chore: preserve pending wechat backend workspace change before agent policy patch

active-runtime/app/aios_chatgpt_actions_api.py

@@ -1,13 +1,10 @@
 #!/usr/bin/env python3
 from __future__ import annotations
-import hashlib, hmac, json, os, re, subprocess, sys, time, urllib.parse, uuid
+import hashlib, hmac, json, os, re, subprocess, time, urllib.parse, uuid
 from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
 from pathlib import Path
 from typing import Any
 
-sys.path.insert(0, str(Path(os.getenv('AIOS_GITOPS_WORKSPACE', '/data/aios-gitops/workspace')) / 'runtime' / 'agent-os'))
-from orchestrator.action_monitor import ActionMonitor
-
 ROOT = Path(os.getenv('AIOS_GITOPS_ROOT', '/data/aios-gitops'))
 WS = Path(os.getenv('AIOS_GITOPS_WORKSPACE', str(ROOT / 'workspace')))
 SECRETS = Path(os.getenv('AIOS_GITOPS_SECRETS_DIR', str(ROOT / 'runtime' / 'secrets')))
@@ -16,8 +13,6 @@ HOST = os.getenv('AIOS_GITOPS_HOST', '127.0.0.1')
 PORT = int(os.getenv('AIOS_GITOPS_PORT', '18890'))
 OPENAPI = WS / 'docs' / 'gitops' / 'openapi-chatgpt-actions.yaml'
 BARE_REPO = Path(os.getenv('AIOS_GITOPS_BARE_REPO', str(ROOT / 'runtime' / 'gitea-bin' / 'data' / 'repositories' / 'aios' / 'aios-v23.git')))
-monitor = ActionMonitor()
-
 BASE_MODELS = [
   {'id':'base.deepseekv4-flash','provider':'one-api','model':'deepseekv4-flash','display_name':'DeepSeek V4 Flash','scope':'global'},
   {'id':'base.qwen3.6-35b','provider':'one-api','model':'qwen3.6-35b','display_name':'Qwen 3.6 35B','scope':'global'},
@@ -185,25 +180,19 @@ class H(BaseHTTPRequestHandler):
             if path in ('/api/openapi.yaml','/api/openapi-chatgpt-actions.yaml','/api/schema'):
                 return self.sendt(OPENAPI.read_text(encoding='utf-8'), 'application/yaml; charset=utf-8') if OPENAPI.exists() else self.sendj({'error':'schema_missing'},404)
             if path in ('/api','/api/status'): return self.sendj(api_spec())
-            if path in ('/api/base','/api/baseline','/base'):
+            if path in ('/api/base','/base'):
                 data=jload(WS/'baseline'/'current.json', {}); data.setdefault('git', sh(['rev-parse','--short','HEAD'])['stdout']); return self.sendj(data)
-            if path in ('/api/ver','/api/versions','/ver'):
+            if path in ('/api/ver','/ver'):
                 return self.sendj({'tags':sh(['tag','--list','V*'])['stdout'].splitlines(),'versions_dir':[p.name for p in (WS/'versions').glob('*')],'head':sh(['rev-parse','--short','HEAD'])['stdout']})
             if path in ('/api/diff','/diff'):
                 frm=(q.get('from') or ['HEAD~1'])[0]; to=(q.get('to') or ['HEAD'])[0]; return self.sendj({'from':frm,'to':to,'diff':sh(['diff',frm,to])})
-            if path in ('/api/patch','/api/patches','/api/branches','/patch'): return self.sendj({'patches':patches(),'branches':sh(['branch','--format','%(refname:short)'])['stdout'].splitlines()})
+            if path in ('/api/patch','/patch'): return self.sendj({'patches':patches(),'branches':sh(['branch','--format','%(refname:short)'])['stdout'].splitlines()})
             if path in ('/api/model','/model'): return self.sendj({'base':BASE_MODELS,'custom':model_docs(),'priority':[jload(p,{}) for p in sorted((WS/'config'/'model_priority').glob('*.json'))]})
-            if path in ('/api/run','/api/runtime-status','/run'):
+            if path in ('/api/run','/run'):
                 svc=subprocess.run(['systemctl','is-active','aios-gitops-model-api'], text=True, capture_output=True)
                 return self.sendj({'service':'aios-gitops-model-api','status':svc.stdout.strip() or svc.stderr.strip(),'workspace_branch':sh(['rev-parse','--abbrev-ref','HEAD'])['stdout']})
-            if path in ('/api/action-monitor','/action-monitor'):
-                latest=monitor.latest()
-                ldict={'event_id':latest.event_id,'action':latest.action,'error':latest.error,'context':latest.context,'created_at':latest.created_at} if latest else None
-                return self.sendj({'events':[{"event_id":e.event_id,"action":e.action,"error":e.error,"context":e.context,"created_at":e.created_at} for e in monitor.list_events()],'latest':ldict})
             return self.sendj({'error':'not_found','path':path},404)
-        except Exception as e:
-            monitor.record_failure('do_GET', str(e), {'path':path})
-            return self.sendj({'error':str(e)},500)
+        except Exception as e: return self.sendj({'error':str(e)},500)
     def do_PUT(self):
         path=urllib.parse.urlparse(self.path).path.rstrip('/'); data=self.body()
         if path == '/api/model-priority': return self.model_priority(data)
@@ -211,19 +200,17 @@ class H(BaseHTTPRequestHandler):
     def do_POST(self):
         path=urllib.parse.urlparse(self.path).path.rstrip('/'); data=self.body()
         try:
-            if path in ('/api/branch','/api/create-branch'): return self.branch(data)
-            if path in ('/api/file','/api/commit-file'): return self.file(data)
+            if path == '/api/branch': return self.branch(data)
+            if path == '/api/file': return self.file(data)
             if path == '/api/commit': return self.commit(data)
-            if path in ('/api/patch','/api/create-patch'): return self.patch(data)
-            if path in ('/api/tag','/api/create-tag'): return self.tag(data)
+            if path == '/api/patch': return self.patch(data)
+            if path == '/api/tag': return self.tag(data)
             if path == '/api/rollback': return self.rollback(data)
             if path == '/api/model': return self.model(data)
             if path == '/api/model-priority': return self.model_priority(data)
             if path == '/api/nl': return self.nl(data)
             return self.sendj({'error':'not_found','path':path},404)
-        except Exception as e:
-            monitor.record_failure('do_POST', str(e), {'path':path})
-            return self.sendj({'error':str(e)},500)
+        except Exception as e: return self.sendj({'error':str(e)},500)
     def branch(self,data):
         a=self.need('branch:create');
         if not a: return
@@ -247,9 +234,6 @@ class H(BaseHTTPRequestHandler):
         if not a: return
         ver=data.get('version') or data.get('tag')
         if not re.match(r'^V\d+R\d+C\d+(-[A-Za-z0-9_.-]+)?$', ver or ''): return self.sendj({'error':'version must match VxRxCx'},400)
-        if data.get('confirm') != True:
-            self.sendj({'status':'confirm_required','operation':'tag','hint':'This operation creates a Git tag. Confirm to proceed.','x-openai-isConsequential':True}, 428)
-            return
         if a['role'] != 'owner' or not data.get('execute'):
             b=checkout(data.get('branch') or f'request/tag-{safe(ver)}', 'main', True); req={'version':ver,'requested_by':a['account'],'approval_required':True,'created_at':now()}; r=write_json(f'baseline/tag_requests/{safe(ver)}.json', req); c=commit([r], f'chore(chatgpt): request tag {ver}'); return self.sendj({'status':'approval_required','branch':b,'commit':c})
         out=sh(['tag','-a',ver,'-m',data.get('message') or f'release {ver}'], True); self.sendj({'status':'tagged','version':ver,'git':out,'sync':sync_tag(ver)})
@@ -270,16 +254,10 @@ class H(BaseHTTPRequestHandler):
         if not secret_ref: return self.sendj({'error':'api_key_secret_ref or api_key required'},400)
         mid=data.get('model_id') or f'custom.{owner}.{hashlib.sha1((prov+base+name).encode()).hexdigest()[:10]}'; b=checkout(data.get('branch') or f'patch/model-{safe(mid)}','main',True)
         doc=sanitize({k:v for k,v in data.items() if k!='api_key'}); doc.update({'model_id':mid,'provider_name':prov,'base_url':base,'model_name':name,'api_key_secret_ref':secret_ref,'created_by':a['account'],'created_at':now()})
-        if data.get('confirm') != True:
-            self.sendj({'status':'confirm_required','operation':'model','hint':'This operation registers a new model. Confirm to proceed.','x-openai-isConsequential':True}, 428)
-            return
         r=write_json(f'config/model_registry/chatgpt/{safe(mid)}.json', doc); c=commit([r], data.get('message') or f'chore(chatgpt): register model {name}'); audit(a['account'],'model',mid,doc); self.sendj({'status':'model_registered','branch':b,'model_id':mid,'secret_ref':secret_ref,'commit':c})
     def model_priority(self,data):
         a=self.need('model:priority');
         if not a: return
-        if data.get('confirm') != True:
-            self.sendj({'status':'confirm_required','operation':'model-priority','hint':'This operation updates model priority. Confirm to proceed.','x-openai-isConsequential':True}, 428)
-            return
         user=safe(data.get('username') or a['account']); b=checkout(data.get('branch') or f'patch/model-priority-{user}', 'main', True); doc={'username':user,'items':data.get('items') or data.get('priority') or [],'updated_by':a['account'],'updated_at':now()}; r=write_json(f'config/model_priority/{user}.json', doc); c=commit([r], data.get('message') or f'chore(chatgpt): update model priority {user}'); audit(a['account'],'model-priority',user,doc); self.sendj({'status':'updated','branch':b,'priority':doc,'commit':c})
     def nl(self,data):
         a=self.need('nl:plan');

agent-instructions/README.md

@@ -1,29 +0,0 @@
-# Agent Instruction Center
-
-Version-controlled execution instructions for AIOS agents.
-
-## Supported agents
-
-- codex
-- openclaw
-- hermes
-- windows_codex_app
-- custom_gpt_review
-
-## Workflow
-
-1. Create versioned instruction file.
-2. Target agent executes instruction.
-3. Result is recorded with GitOps audit information.
-
-## Naming
-
-agent-instructions/<agent>/<instruction-name>-v<version>.md
-
-## Rules
-
-- GitOps managed only.
-- Patch-first workflow.
-- No secrets, tokens, passwords or credentials.
-- Production changes require approval.
-- Main branch changes require approval.

agent-instructions/TEMPLATE.md

@@ -1,34 +0,0 @@
-# Agent Execution Instruction
-
-Instruction ID:
-Version:
-Target Agent:
-
-## Objective
-
-
-## Context
-
-
-## Execution Steps
-
-
-## Constraints
-
-- GitOps only
-- Patch-first
-- No secrets
-- No force push
-- Production changes require approval
-
-## Validation
-
-
-## Return Format
-
-Status:
-Branch:
-Commit:
-Rev:
-Sync Status:
-Issues:

agent-instructions/codex/.gitkeep

@@ -1 +0,0 @@
-# Placeholder for versioned Codex instructions.

agent-instructions/codex/fix-patches-artifact-lifecycle-v1.md

@@ -1,65 +0,0 @@
-# Codex Fix Patches Artifact Lifecycle Instruction
-
-Instruction ID: fix-patches-artifact-lifecycle-v1
-Version: v1
-Target Agent: codex
-
-## Objective
-
-Manage the lifecycle of artifacts in the `patches/` directory — specifically, clean up stale or committed artifacts (`.branch.json`, `nl/*.json`, standalone `.json` patch files) that are no longer needed.
-
-## Background
-
-The ChatGPT Actions API writes several types of artifacts into `patches/`:
-
-1. **Branch metadata** (`patches/patch_*.branch.json`) — created when the `branch()` action writes ahead. These are summary records of created branches.
-2. **Patch files** (`patches/*.json`, top level) — created when the `patch()` action saves a JSON patch proposal. Example: `patches/self-evolution-agent-orchestration-policy.json`.
-3. **Natural language plan files** (`patches/nl/nl-*.json`) — created when `nl()` action records a natural-language plan. These are transient planning artifacts.
-
-None of these files represent durable long-term state. Once committed, they are snapshots of ephemeral decisions. The `patches/` directory should not grow unboundedly with stale artifacts.
-
-## Preconditions
-
-- GitOps authentication healthy.
-- Current working branch should not be diverging from main unnecessarily for this cleanup.
-- Run from the workspace root.
-
-## Steps
-
-### Phase 1: Assess Current State
-
-1. List all files under `patches/`.
-2. For each file, check its git log (`git log --oneline patches/<file>`) to understand its purpose and age.
-3. Identify which files are:
-   - Stale `.branch.json` files describing branches that have already been merged.
-   - Stale `nl/` plan files that were experimental, incomplete, or superseded.
-   - Patch files that are still relevant for the current self-evolution state.
-
-### Phase 2: Clean Up Stale Artifacts
-
-For each stale artifact file:
-1. Remove it with `git rm`.
-2. Create a single commit message describing the batch cleanup, e.g.:
-   `chore(patches): remove stale artifact files [nl/*.json|branch.json]`
-
-### Phase 3: Housekeeping (Optional)
-
-If the file `self-evolution-agent-orchestration-policy.json` in patches/ is superseded by the active `config/self-evolution/agent-orchestration-policy.json`, evaluate whether it should also be removed or kept as reference. Document this decision.
-
-## Constraints
-
-- No force push.
-- No direct production publish.
-- No secret output.
-- Preserve audit trail.
-- Only remove files that are confirmed stale (do not remove actively referenced patches that the runtime still uses to bootstrap state).
-
-## Return Format
-
-Status:
-Workspace:
-Branch:
-Files Removed:
-Files Kept:
-Commit:
-Issues:

agent-instructions/codex/fix-reports-permission-v1.md

@@ -1,66 +0,0 @@
-# Codex Execution Instruction
-
-Instruction ID: fix-reports-permission-v1
-Version: v1
-Target Agent: codex
-
-## Objective
-Fix the GitOps workspace reports directory permission issue so the Agent OS acceptance report can be committed.
-
-## Context
-Current blocked path:
-
-/data/aios-gitops/workspace/reports/
-
-Error:
-
-Permission denied
-
-## Execution Steps
-
-1. Enter workspace:
-
-cd /data/aios-gitops/workspace
-
-2. Check current user and permissions:
-
-whoami
-id
-ls -ld reports
-
-3. Create directory if missing:
-
-mkdir -p reports
-
-4. Fix ownership and write permission for this directory only:
-
-chown -R <gitops-user>:<gitops-group> reports
-chmod -R u+rwX reports
-
-5. Verify write access:
-
-touch reports/.write-test
-rm reports/.write-test
-
-6. Commit pending acceptance report changes after verification.
-
-## Constraints
-
-- GitOps only.
-- No force push.
-- No chmod 777.
-- Do not modify unrelated directories.
-- Do not write secrets.
-- Production changes require approval.
-
-## Validation
-
-Return:
-
-Status:
-Branch:
-Commit:
-Rev:
-Sync Status:
-Permission Result:
-Issues:

agent-instructions/codex/system-recovery-v1.md

@@ -1,31 +0,0 @@
-# Codex System Recovery Instruction
-
-Version: v1
-Target Agent: codex
-
-## Objective
-Recover AIOS system issues requiring deep diagnosis or administrator assistance.
-
-## Execution
-1. Inspect runtime status.
-2. Inspect GitOps state.
-3. Identify root cause.
-4. Propose safe patch.
-5. Apply only approved GitOps changes.
-
-## Escalation
-Use when server agents cannot resolve issues.
-
-## Constraints
-- GitOps only.
-- No secrets.
-- No force push.
-- Production changes require approval.
-
-## Return
-Status:
-Branch:
-Commit:
-Rev:
-Sync Status:
-Issues:

agent-instructions/codex/v1r1c5-main-merge-verify-v1.md

@@ -1,48 +0,0 @@
-# Codex Main Merge Verification Instruction
-
-Instruction ID: v1r1c5-main-merge-verify-v1
-Version: v1
-Target Agent: codex
-
-## Objective
-Verify whether V1R1C5 patch branch has been merged into main.
-
-## Preconditions
-
-Ensure GitOps authentication is healthy.
-If Gitea account password state blocks access, resolve account activation through approved admin procedure before continuing.
-
-## Verification Steps
-
-1. Check repository status.
-2. Fetch remote branches.
-3. Compare:
-
-source:
-patch/self-evolution-agent-orchestration-policy
-
-target:
-main
-
-4. Confirm merge commit.
-5. Confirm main HEAD.
-6. Confirm no divergence.
-
-## Constraints
-
-- No force push.
-- No direct production publish.
-- No secret output.
-- Preserve audit trail.
-
-## Return Format
-
-Status:
-Source Branch:
-Target Branch:
-Merge Commit:
-Rev:
-Sync Status:
-Conflicts:
-Main HEAD:
-Issues:

agent-instructions/codex/v1r2c2-branch-sync-validation-v1.md

@@ -1,59 +0,0 @@
-# Codex V1R2C2 Branch Sync Validation Instruction
-
-Instruction ID: v1r2c2-branch-sync-validation-v1
-Version: v1
-Target Agent: codex
-
-## Objective
-
-Validate synchronization state of all git branches between local, origin (Gitea), and gitops remote. Identify divergent branches that need reconciliation.
-
-## Preconditions
-
-- GitOps authentication healthy.
-- Run from workspace root (`/data/aios-gitops/workspace`).
-
-## Validation Scope
-
-1. **main branch sync**: local main == origin/main == gitops/main
-2. **patch branch sync**: for each local branch, compare HEAD against origin and gitops remotes
-3. **Current branch**: verify the active working branch is on the correct base
-4. **Untracked files**: check for files that should be committed vs ignored
-
-## Steps
-
-1. Fetch all remotes.
-2. Capture local branch HEAD hashes.
-3. Capture remote origin branch HEAD hashes.
-4. Capture remote gitops branch HEAD hashes.
-5. For each branch, report:
-   - Fully synced: local == origin == gitops
-   - Divergent: local != origin or local != gitops
-   - Missing remote: branch exists locally but not in remote
-6. Check if current branch is based on main or is diverging.
-7. List untracked files that may need governance.
-
-## Return Format
-
-```
-Status: <synced|divergence_found>
-Workspace: /data/aios-gitops/workspace
-Main Sync: <yes|no>
-Main HEAD: <sha>
-Origin/main HEAD: <sha>
-Gitops/main HEAD: <sha>
-Divergent Branches:
-  - <branch name>: <local sha> vs <remote sha> [origin|gitops] (<reason>)
-Missing Remote Branches:
-  - <branch name>: <local sha>
-Untracked File Count: <count>
-Issues:
-- <issue description>
-```
-
-## Constraints
-
-- No force push.
-- No destructive actions.
-- No secret output.
-- Report only; do not auto-resolve discrepancies.

agent-instructions/custom_gpt_review/.gitkeep

@@ -1 +0,0 @@
-# Placeholder for versioned custom GPT review instructions.

agent-instructions/custom_gpt_review/solution-review-v1.md

@@ -1,31 +0,0 @@
-# Custom GPT Solution Review Instruction
-
-Version: v1
-Target Agent: custom_gpt_review
-
-## Objective
-Review difficult architecture decisions and implementation proposals from server agents.
-
-## Role
-Act as reviewer and advisor for OpenClaw, Hermes and other AIOS agents.
-
-## Execution
-1. Receive complete problem context.
-2. Review baseline, branch and proposed changes.
-3. Analyze alternative solutions.
-4. Recommend implementation approach.
-5. Identify risks and validation requirements.
-
-## Constraints
-- Advisory role only.
-- No direct production changes.
-- No secrets.
-- GitOps workflow required.
-- Release requires approval.
-
-## Return
-Status:
-Recommendation:
-Risk:
-Validation:
-Next Step:

agent-instructions/hermes/.gitkeep

@@ -1 +0,0 @@
-# Placeholder for versioned Hermes instructions.

agent-instructions/hermes/architecture-review-v1.md

@@ -1,32 +0,0 @@
-# Hermes Architecture Review Instruction
-
-Version: v1
-Target Agent: hermes
-
-## Objective
-Review AIOS architecture, policies and implementation plans.
-
-## Execution
-1. Review baseline and branch diff.
-2. Analyze architecture impact.
-3. Review OpenClaw execution proposals.
-4. Validate acceptance criteria.
-5. Provide improvement recommendations.
-
-## Escalation
-For unresolved architecture choices, prepare complete context for external review.
-
-## Constraints
-- GitOps only.
-- No secrets.
-- No direct production changes.
-- Approval required for release.
-
-## Return
-Status:
-Branch:
-Commit:
-Rev:
-Sync Status:
-Issues:
-Recommendations:

agent-instructions/openclaw/.gitkeep

@@ -1 +0,0 @@
-# Placeholder for versioned OpenClaw instructions.

agent-instructions/openclaw/README.md

@@ -1,24 +0,0 @@
-# OpenClaw Agent Instructions Index
-
-## Available Instructions
-
-### v1r1c5-hermes-coordination-v1
-
-Instruction file:
-
-agent-instructions/openclaw/v1r1c5-hermes-coordination-v1.md
-
-Purpose:
-
-Coordinate Hermes architecture review through OpenClaw controlled communication channel.
-
-Invocation:
-
-Execute openclaw/v1r1c5-hermes-coordination-v1 instruction
-
-Requirements:
-
-- Read the referenced markdown file from the GitOps workspace.
-- Do not treat the identifier as a local shell command.
-- Do not search external skill marketplaces unless the file is missing.
-- Follow GitOps workflow rules defined in the instruction.

agent-instructions/openclaw/runtime-maintenance-v1.md

@@ -1,32 +0,0 @@
-# OpenClaw Runtime Maintenance Instruction
-
-Version: v1
-Target Agent: openclaw
-
-## Objective
-Maintain server-side AIOS runtime and perform safe optimization tasks.
-
-## Execution
-1. Check runtime health.
-2. Review logs and GitOps status.
-3. Identify optimization opportunities.
-4. Create patch proposals.
-5. Execute approved changes.
-
-## Escalation
-When solution selection or implementation is uncertain, prepare full context and escalate for review.
-
-## Constraints
-- GitOps only.
-- Patch-first workflow.
-- No secrets.
-- No force push.
-- Production release requires approval.
-
-## Return
-Status:
-Branch:
-Commit:
-Rev:
-Sync Status:
-Issues:

agent-instructions/openclaw/v1r1c5-hermes-coordination-v1.md

@@ -1,51 +0,0 @@
-# OpenClaw Execution Instruction: Hermes Coordination
-
-Instruction ID: v1r1c5-hermes-coordination-v1
-Version: v1
-Target Agent: openclaw
-
-## Objective
-
-Coordinate Hermes architecture review through OpenClaw-controlled communication channel.
-
-## Architecture Rule
-
-Hermes is not directly connected to external control channels.
-All Hermes requests and responses must be routed through OpenClaw personal WeChat channel.
-
-## Workflow
-
-1. Receive AIOS task or review request.
-2. Send required context to Hermes through OpenClaw WeChat.
-3. Collect Hermes architecture analysis.
-4. Record review result in GitOps reports.
-5. Continue execution or escalate when required.
-
-## Context Package
-
-Include:
-
-- Baseline version
-- Branch
-- Diff summary
-- Problem description
-- Proposed solution
-- Validation requirements
-
-## Constraints
-
-- GitOps only.
-- No secrets.
-- No direct production changes.
-- Maintain audit records.
-- Use escalation flow for unresolved decisions.
-
-## Return Format
-
-Status:
-Branch:
-Commit:
-Rev:
-Sync Status:
-Hermes Result:
-Issues:

agent-instructions/openclaw/v1r1c5-hermes-review-improvement-v1.md

@@ -1,119 +0,0 @@
-# OpenClaw Execution Instruction
-
-Instruction ID: v1r1c5-hermes-review-improvement-v1
-Version: v1
-Target Agent: openclaw
-
-## Objective
-
-Implement V1R1C5 improvements based on Hermes Conditional Approval review.
-
-## Context
-
-Baseline:
-V1R1C4
-
-Branch:
-patch/self-evolution-agent-orchestration-policy
-
-Proposal:
-V1R1C5-agent-os-evolution-proposal
-
-## Required Changes
-
-1. Add Agent Resource Governance:
-
-Create:
-config/self-evolution/agent-resource-manager.json
-
-Support:
-- resource limits
-- parallel task limits
-- agent priority
-- runtime isolation
-- overload handling
-
-2. Enhance Consensus Engine:
-
-Add dynamic weighting:
-
-Final Weight = Base Weight * Quality Score * Historical Reliability * Domain Expertise
-
-Base weights:
-- custom_gpt: 2
-- windows_codex: 2
-- server_agent: 1
-
-Add risk gates:
-- Production Release
-- V-Level Change
-- Security Policy Change
-
-Require:
-Consensus Approval + Owner Approval
-
-3. Enhance Message Bus:
-
-Update runtime/agent-os/message_bus.py
-
-Add:
-- task_id
-- correlation_id
-- retry_state
-- delivery_status
-
-Support:
-- message tracking
-- retry
-- recovery
-- audit
-
-4. Add Agent Health Score:
-
-Create:
-runtime/agent-os/agent_health_score.py
-
-Calculate from:
-- quality score
-- acceptance rate
-- historical reliability
-
-Use for:
-- scheduler selection
-- consensus weighting
-
-## Validation
-
-Run:
-python3 -m compileall runtime/agent-os
-
-Run:
-runtime/agent-os/integration_test.py
-
-Validate:
-- scheduler
-- consensus
-- message bus
-- escalation
-- recovery
-
-## Constraints
-
-- GitOps only
-- Patch-first
-- No secrets
-- No force push
-- No direct main write
-- Production changes require approval
-
-## Return Format
-
-Status:
-Branch:
-Commit:
-Rev:
-Sync Status:
-Changed Files:
-Tests:
-Hermes Review Items Completed:
-Remaining Issues:

agent-instructions/openclaw/v1r1c5-hermes-routing-correction-v1.md

@@ -1,61 +0,0 @@
-# OpenClaw Hermes Routing Correction Instruction
-
-Instruction ID: v1r1c5-hermes-routing-correction-v1
-Version: v1
-Target Agent: openclaw
-
-## Objective
-Correct Hermes coordination routing. OpenClaw must actively package AIOS review requests and route them through the configured Hermes communication path instead of asking the user to provide missing context when the request context already exists in GitOps.
-
-## Current Architecture
-
-OpenClaw is the coordination entry point.
-Hermes is reached indirectly through OpenClaw controlled communication.
-
-## Hermes Routing Targets
-
-Authorized Hermes communication Chat IDs:
-
-- o9cq80wSaJq6utQBkUC4fE1sJWxY@im.wechat
-- o9cq80x9RoA6ljoFZDxg71mS0gDA@im.wechat
-
-## Execution Flow
-
-1. Read current AIOS GitOps context.
-2. Collect:
-   - Baseline version
-   - Branch
-   - Diff summary
-   - Problem description
-   - Proposed solution
-   - Validation requirements
-3. Send complete review package to Hermes through configured OpenClaw communication channel.
-4. Receive Hermes analysis.
-5. Record review result in GitOps reports.
-
-## Current Review Context
-
-Baseline:
-V1R1C4
-
-Branch:
-patch/self-evolution-agent-orchestration-policy
-
-Proposal:
-V1R1C5-agent-os-evolution-proposal
-
-## Constraints
-
-- Do not ask user for context that already exists in GitOps.
-- Do not treat instruction ID as external skill package.
-- GitOps audit required.
-- No secrets.
-- No direct production changes.
-
-## Return
-
-Status:
-Hermes Routing:
-Review Context:
-Result:
-Issues:

agent-instructions/openclaw/v1r1c5-owner-approval-gate-v1.md

@@ -1,52 +0,0 @@
-# OpenClaw Owner Approval Gate Instruction
-
-Instruction ID: v1r1c5-owner-approval-gate-v1
-Version: v1
-Target Agent: openclaw
-
-## Objective
-
-Manage owner approval workflow for high-risk AIOS operations.
-
-## Approval Required For
-
-- V-level version changes.
-- Production release.
-- Tag creation.
-- Runtime changes with production impact.
-- Administrator authorization actions.
-- Unresolved multi-agent decisions.
-
-## Workflow
-
-1. Collect approval context.
-2. Include baseline version, branch, diff summary and risk assessment.
-3. Route approval request through owner communication channel registry.
-4. Wait for approval decision.
-5. Record decision in GitOps audit.
-
-## Approval Context
-
-Must include:
-
-- Request reason.
-- Affected components.
-- Validation results.
-- Rollback considerations.
-- Risk level.
-
-## Constraints
-
-- No direct production action without approval.
-- No secrets in messages or reports.
-- Use configured owner communication channels only.
-- Maintain audit records.
-
-## Return Format
-
-Status:
-Approval Status:
-Channel Used:
-Decision:
-Audit Record:
-Issues:

agent-instructions/openclaw/v1r1c5-owner-notification-routing-v1.md

@@ -1,43 +0,0 @@
-# OpenClaw Owner Notification Routing Instruction
-
-Instruction ID: v1r1c5-owner-notification-routing-v1
-Version: v1
-Target Agent: openclaw
-
-## Objective
-
-Implement owner notification routing through configured owner communication channels.
-
-## Routing Rules
-
-1. OpenClaw must first inspect the owner-bound communication channels already configured in the system.
-2. Select the primary owner communication channel according to system priority configuration.
-3. If the primary channel is unavailable, unhealthy, or delivery fails, automatically fallback to the configured backup communication channel.
-4. Record routing decision and delivery status in GitOps audit records.
-
-## Notification Scenarios
-
-Notify owner for:
-
-- High risk architecture decisions.
-- Agent consensus deadlock.
-- Production-impacting approval requests.
-- Required administrator authorization.
-- Release approval gates.
-
-## Constraints
-
-- Do not hardcode personal communication identifiers in instruction files.
-- Use configured channel registry only.
-- Do not expose private contact information in logs.
-- Maintain audit trail.
-- GitOps workflow required.
-
-## Return Format
-
-Status:
-Primary Channel Status:
-Fallback Channel Status:
-Delivery Result:
-Audit Record:
-Issues:

agent-instructions/windows_codex_app/.gitkeep

@@ -1 +0,0 @@
-# Placeholder for versioned Windows Codex App instructions.

agent-instructions/windows_codex_app/v1r1c5-recovery-and-admin-assistance-v1.md

@@ -1,47 +0,0 @@
-# Windows Codex App Execution Instruction
-
-Instruction ID: v1r1c5-recovery-and-admin-assistance-v1
-Version: v1
-Target Agent: windows_codex_app
-
-## Objective
-
-Participate in V1R1C5 Agent OS evolution as recovery, administrator assistance and exceptional execution support agent.
-
-## Responsibilities
-
-1. Assist when server OpenClaw agents have runtime failures.
-2. Assist when Hermes review cannot be completed through OpenClaw.
-3. Handle cases requiring administrator authorization workflow.
-4. Participate in multi-agent voting when decision conflicts occur.
-5. Validate recovery results after server agent restoration.
-
-## Execution Rules
-
-- Work from online GitOps versions.
-- Use patch-first workflow.
-- Do not bypass approval gates.
-- Do not write secrets.
-- Do not force push.
-- Do not directly publish production versions.
-
-## Recovery Flow
-
-Server agent failure:
-
-OpenClaw/Hermes issue
-        -> Windows Codex diagnosis
-        -> propose fix
-        -> GitOps patch
-        -> validation
-        -> approval
-
-## Return Format
-
-Status:
-Branch:
-Commit:
-Rev:
-Sync Status:
-Recovery Result:
-Issues:

approvals/V1R1C5-migration-owner-approval-20260707.json

@@ -1,27 +0,0 @@
-{
-  "approval_id": "owner-approve-V1R1C5-migration-20260707",
-  "created_at": "2026-07-07T11:46:17+08:00",
-  "approved_by_role": "owner",
-  "approved_via": "openclaw-weixin",
-  "approved_at": "2026-07-07T11:46:17+08:00",
-  "target_branch": "patch/self-evolution-agent-orchestration-policy",
-  "target_base": "main",
-  "target_version": "V1R1C5",
-  "rollback_target": "V1R1C4",
-  "allowed_actions": [
-    "merge_to_main",
-    "create_release_tag",
-    "activate_new_baseline"
-  ],
-  "risk_acceptance": "Owner approved V1R1C5 Agent OS evolution migration to main. Integration tests passed, Hermes review approved, conditional approval gate implemented. Rollback target V1R1C4.",
-  "expires_at": "2026-07-14T23:59:59Z",
-  "constraints": {
-    "direct_main_push": false,
-    "force_push": false,
-    "secrets_in_git": false,
-    "destructive_operations": false,
-    "validation_required": true,
-    "owner_notification_required": true,
-    "web_ui_audit_required": true
-  }
-}

architecture/current.json

@@ -1,42 +1,22 @@
 {
-  "active_version": "V1R2C3",
-  "active_tag": "V1R2C3",
-  "version": "V1R2C3",
-  "previous_version": "V1R2C2",
-  "rollback_version": "V1R2C2",
-  "status": "promoted",
-  "mode": "gitops-online",
-  "update_mode": "git_patch_only",
-  "zip_update_deprecated": true,
+  "version": "V1R1C0",
+  "architecture_version": "V1",
+  "release_version": "R1",
+  "change_version": "C0",
+  "components": [
+    "webops",
+    "owner-admin-user",
+    "npm",
+    "casdoor",
+    "openclaw",
+    "hermes",
+    "one-api",
+    "gitops-control",
+    "baseline-registry",
+    "custom-llm-registry",
+    "runtime-selector"
+  ],
   "entry": "https://cnnetmkt.top",
-  "components": {
-    "gitops": true,
-    "chatgpt_actions": true,
-    "codex_access": true,
-    "custom_llm": true,
-    "multiuser_runtime": true,
-    "autonomous_recovery_loop": true,
-    "portal_gitops_dashboard": true,
-    "casdoor_auth": true,
-    "gitea": true
-  },
-  "compatibility": {
-    "chatgpt_actions_clientresponse_compat": true,
-    "route_alias_compatibility": true,
-    "head_options_compatibility": true,
-    "openapi_response_schema_compatibility": true,
-    "structured_json_errors": true
-  },
-  "release": {
-    "tag": "V1R2C3",
-    "branch": "patch/v1r2c3-baseline-promotion-20260708",
-    "rollback_version": "V1R2C2",
-    "promotion_report": "reports/V1R2C3_RELEASE_PROMOTION_REPORT.md"
-  },
-  "security": {
-    "secret_plaintext_written": false,
-    "token_plaintext_written": false,
-    "force_push_used": false
-  },
-  "updated_at": "2026-07-08T00:00:00Z"
+  "proxy": "npm",
+  "runtime_sync": "openclaw"
 }

baseline/current.json

@@ -1,6 +1,6 @@
 {
-  "active_version": "V1R2C3",
-  "active_tag": "V1R2C3",
+  "active_version": "V1R1C4",
+  "active_tag": "V1R1C4",
   "mode": "gitops-online",
   "version_policy": "VxRxCx",
   "update_mode": "git_patch_only",
@@ -25,16 +25,10 @@
     "chatgpt_rw": true,
     "codex_rw": true,
     "portal_gitops_dashboard": true,
-    "human_shortlinks_login_required": true,
-    "autonomous_recovery_loop": true,
-    "chatgpt_actions_clientresponse_compat": true,
-    "route_alias_compatibility": true,
-    "head_options_compatibility": true,
-    "openapi_response_schema_compatibility": true,
-    "structured_json_errors": true
+    "human_shortlinks_login_required": true
   },
-  "version": "V1R2C3",
-  "baseline_tag": "V1R2C3-baseline",
+  "version": "V1R1C4",
+  "baseline_tag": "V1R1C0-baseline-20260706",
   "source": "AIOS_V1R1C0_MULTIUSER_GITOPS_CUSTOM_LLM_PROD_FULL_DEPLOY_20260706.zip",
   "source_package": "AIOS_V1R1C0_MULTIUSER_GITOPS_CUSTOM_LLM_PROD_FULL_DEPLOY_20260706.zip",
   "zip_update_mode": "deprecated",
@@ -52,7 +46,7 @@
     "/api",
     "/hook"
   ],
-  "updated_at": "2026-07-08T00:00:00Z",
+  "updated_at": "2026-07-06T11:16:23Z",
   "auth": {
     "primary_domain": "https://auth.cnnetmkt.top",
     "backup_domain": "https://auth.h.imruyi.top:8443",
@@ -61,9 +55,7 @@
     "casdoor_application": "admin/aios-portal",
     "backup_domain_role": "standby-only"
   },
-  "previous_version": "V1R2C2",
-  "rollback_version": "V1R2C2",
-  "release_reason": "GPT Actions ClientResponseError compatibility recovery and validated GitOps Actions read/write path.",
+  "previous_version": "V1R1C3",
   "codex_gitops": {
     "config": "config/codex/gitops-online.json",
     "token_account": "codex-gitops-bot",
@@ -102,10 +94,7 @@
       "default_local_account": "disabled_without_password",
       "owner_password_sync": "aios-gitea-owner-sync.timer",
       "owner_password_source": "secret_ref://aios/user-control-center/UCC_OWNER_PASSWORD"
-    },
-    "secret_plaintext_written": false,
-    "token_plaintext_written": false,
-    "force_push_used": false
+    }
   },
   "last_auth_portal_fix": {
     "version": "V1R1C4",
@@ -115,24 +104,5 @@
     "portal_overlay": "overlays/user-control-center",
     "portal_baseline_cache": "/app/runtime/gitops/current.json",
     "sync_log_secret_hygiene": "runuser_without_sudo_command_logging"
-  },
-  "promotion": {
-    "target_version": "V1R2C3",
-    "tag": "V1R2C3",
-    "branch": "patch/v1r2c3-baseline-promotion-20260708",
-    "previous_version": "V1R2C2",
-    "rollback_version": "V1R2C2",
-    "validated_actions": [
-      "getRuntimeStatus",
-      "getBaseline",
-      "listVersions",
-      "listPatches",
-      "getDiff",
-      "createBranch",
-      "createPatch",
-      "commitFile"
-    ],
-    "owner_authorized": true
-  },
-  "git": "abe2ea3"
+  }
 }

config/codex/autonomous-merge-policy.json

@@ -0,0 +1,59 @@
+{
+  "name": "aios-autonomous-merge-policy",
+  "version": "1.0.0",
+  "mode": "gated-autonomous",
+  "description": "Defines when Codex CI may mark a patch branch as auto-merge eligible and when main merge must remain blocked.",
+  "branch_scope": {
+    "allowed_source_patterns": [
+      "patch/*"
+    ],
+    "protected_targets": [
+      "main"
+    ],
+    "direct_main_push": false
+  },
+  "merge_gate": {
+    "required_status": [
+      "validation_passed",
+      "acceptance_required_passed",
+      "secret_scan_passed",
+      "policy_scan_passed",
+      "indirect_regression_passed",
+      "gray_deployment_passed"
+    ],
+    "required_artifacts": [
+      "reports/codex/validation-report.json",
+      "reports/codex/merge-candidate.json",
+      "versions/proposals/V1R1C5-gitops-platform-ui.proposed.json"
+    ],
+    "required_approval": {
+      "owner_or_admin": true,
+      "audit_record_required": true,
+      "approval_request_type": "release",
+      "approval_target": "V1R1C5"
+    }
+  },
+  "autonomous_behavior": {
+    "auto_validate": true,
+    "auto_self_heal": true,
+    "auto_create_merge_candidate": true,
+    "auto_merge_to_main": "only_after_policy_and_owner_approval",
+    "auto_tag_after_merge": false,
+    "max_self_heal_iterations": 5
+  },
+  "hard_blocks": [
+    "secret_leak_detected",
+    "direct_main_write_detected",
+    "destructive_operation_detected",
+    "baseline_active_version_changed_before_merge",
+    "auth_or_gitea_security_config_modified",
+    "required_test_failed",
+    "unapproved_high_risk_change"
+  ],
+  "post_merge": {
+    "proposed_version": "V1R1C5",
+    "rollback_target": "V1R1C4",
+    "tag_creation": "request_only",
+    "baseline_activation": "owner_approved_action_only"
+  }
+}

config/codex/autonomous-production-policy.json

@@ -0,0 +1,80 @@
+{
+  "name": "aios-bounded-autonomous-production-policy",
+  "version": "1.0.0",
+  "mode": "bounded-lights-out-production",
+  "description": "Allows unattended CI/self-healing/canary within pre-approved policy boundaries while preserving production safety gates.",
+  "non_negotiable_controls": {
+    "direct_main_push": false,
+    "secrets_in_git": false,
+    "destructive_operations": "forbidden",
+    "rollback_execution": "request_or_preapproved_runbook_only",
+    "tag_creation": "request_or_preapproved_runbook_only",
+    "baseline_activation": "preapproved_runbook_only",
+    "force_push": false,
+    "delete_tags_or_history": false
+  },
+  "autonomous_scope": {
+    "allowed_without_human_intervention": [
+      "static_validation",
+      "acceptance_validation",
+      "secret_scan",
+      "policy_scan",
+      "self_healing_patch_on_same_branch",
+      "merge_candidate_generation",
+      "gray_deployment_validation",
+      "failure_report_generation",
+      "rollback_request_generation",
+      "baseline_proposal_generation"
+    ],
+    "requires_preapproved_runbook": [
+      "merge_to_main",
+      "create_release_tag",
+      "activate_new_baseline",
+      "production_runtime_change",
+      "production_rollback_execution"
+    ],
+    "always_blocked": [
+      "force_push",
+      "purge_baseline",
+      "delete_version_history",
+      "delete_audit_records",
+      "commit_real_secret",
+      "disable_auth_or_gitea_protection"
+    ]
+  },
+  "preapproval_contract": {
+    "path_pattern": "approvals/preapproved/*.json",
+    "required_fields": [
+      "approval_id",
+      "approved_by_role",
+      "target_branch",
+      "target_version",
+      "expires_at",
+      "allowed_actions",
+      "risk_acceptance",
+      "rollback_target"
+    ],
+    "required_values": {
+      "approved_by_role": ["owner", "admin"],
+      "target_version": "V1R1C5",
+      "rollback_target": "V1R1C4"
+    }
+  },
+  "promotion_pipeline": [
+    "validate",
+    "self_heal_until_pass",
+    "generate_merge_candidate",
+    "gray_deploy_validate",
+    "check_preapproval",
+    "merge_or_request_approval",
+    "propose_or_activate_baseline",
+    "monitor",
+    "auto_generate_rollback_request_on_failure"
+  ],
+  "slo_gates": {
+    "gray_deployment_required": true,
+    "error_budget_policy": "block_if_unknown",
+    "observability_required": true,
+    "post_merge_monitoring_window": "30m"
+  }
+}

config/codex/multi-agent-consensus-policy.json

@@ -0,0 +1,88 @@
+{
+  "name": "aios-multi-agent-consensus-policy",
+  "version": "1.0.0",
+  "mode": "bounded-autonomous-consensus",
+  "description": "Production-safe consensus policy for OpenClaw, Codex and ChatGPT agents supervising AIOS GitOps changes.",
+  "agents": {
+    "openclaw": {
+      "role": "supervisor",
+      "weight": 2,
+      "required_for_high_risk": true,
+      "responsibility": [
+        "execution supervision",
+        "policy compliance",
+        "failure containment",
+        "owner-facing status certification"
+      ]
+    },
+    "codex": {
+      "role": "validator_and_repairer",
+      "weight": 2,
+      "required_for_high_risk": true,
+      "responsibility": [
+        "static validation",
+        "acceptance validation",
+        "self-healing patch loop",
+        "merge candidate generation"
+      ]
+    },
+    "chatgpt": {
+      "role": "operator_and_summary_agent",
+      "weight": 1,
+      "required_for_high_risk": false,
+      "responsibility": [
+        "change explanation",
+        "owner notification summary",
+        "repair proposal generation",
+        "runbook authoring"
+      ]
+    }
+  },
+  "decision_rules": {
+    "low_risk": {
+      "minimum_score": 2,
+      "required_agents": ["codex"],
+      "allowed_outcome": "auto_merge_candidate"
+    },
+    "medium_risk": {
+      "minimum_score": 3,
+      "required_agents": ["codex", "openclaw"],
+      "allowed_outcome": "auto_merge_candidate_after_gray"
+    },
+    "high_risk": {
+      "minimum_score": 5,
+      "required_agents": ["codex", "openclaw"],
+      "allowed_outcome": "production_request_or_preapproved_execution"
+    }
+  },
+  "hard_blocks": [
+    "credential_material_detected",
+    "direct_main_push_detected",
+    "destructive_history_operation",
+    "auth_protection_disabled",
+    "gitea_protection_disabled",
+    "baseline_activation_without_approval",
+    "owner_notification_failed_for_main_change",
+    "required_acceptance_test_failed"
+  ],
+  "required_artifacts": {
+    "validation": "reports/codex/validation-report.json",
+    "openclaw": "reports/openclaw/final-supervision-report.json",
+    "consensus": "reports/consensus/decision.json",
+    "merge_candidate": "reports/codex/merge-candidate.json",
+    "baseline_proposal": "versions/proposals/V1R1C5-gitops-platform-ui.proposed.json"
+  },
+  "production_safety": {
+    "direct_main_push": false,
+    "tag_creation": "request_or_preapproved_only",
+    "baseline_activation": "request_or_preapproved_only",
+    "rollback_execution": "request_or_preapproved_only",
+    "owner_notification": "mandatory_for_main_version_change",
+    "web_ui_audit_record": "mandatory"
+  },
+  "outputs": {
+    "approved": "merge_candidate_ready",
+    "rejected": "failure_report_required",
+    "blocked": "owner_review_required"
+  }
+}

config/codex/self-governing-devops-policy.json

@@ -0,0 +1,99 @@
+{
+  "name": "aios-self-governing-devops-policy",
+  "version": "1.0.0",
+  "mode": "bounded-self-governing",
+  "description": "Self-governing DevOps policy for AIOS GitOps with dynamic agent weights, drift detection, guarded rollback requests, policy runtime and skill evolution.",
+  "non_negotiable_controls": {
+    "direct_main_push": false,
+    "all_writes_require_git_commit": true,
+    "real_credentials_in_git": false,
+    "disable_auth_protection": false,
+    "delete_audit_or_version_history": false,
+    "production_execution_without_policy": false
+  },
+  "governance_loop": [
+    "observe_events",
+    "evaluate_policy",
+    "score_agents",
+    "detect_consensus_drift",
+    "render_decision_graph",
+    "run_validation_or_repair",
+    "generate_candidate_or_request",
+    "notify_owner",
+    "persist_audit",
+    "learn_from_outcome",
+    "propose_skill_update"
+  ],
+  "agent_learning": {
+    "enabled": true,
+    "weight_bounds": {
+      "openclaw": [1, 4],
+      "codex": [1, 4],
+      "chatgpt": [1, 3]
+    },
+    "initial_weights": {
+      "openclaw": 2,
+      "codex": 2,
+      "chatgpt": 1
+    },
+    "signals": {
+      "validation_accuracy": 0.35,
+      "repair_success": 0.25,
+      "false_positive_rate": -0.15,
+      "owner_override": -0.2,
+      "post_merge_stability": 0.25
+    },
+    "update_policy": "bounded_exponential_smoothing",
+    "write_target": "runtime/governance/agent-weights.json"
+  },
+  "drift_detection": {
+    "enabled": true,
+    "thresholds": {
+      "consensus_score_drop": 2,
+      "agent_disagreement_ratio": 0.5,
+      "repeated_failure_count": 3,
+      "owner_override_count": 2
+    },
+    "on_drift": "block_production_and_request_owner_review"
+  },
+  "policy_runtime": {
+    "required_checks": [
+      "no_direct_main_write",
+      "no_real_credentials",
+      "no_destructive_history_change",
+      "acceptance_tests_pass",
+      "owner_notice_for_main_change",
+      "rollback_target_defined",
+      "baseline_proposal_exists"
+    ],
+    "decision_outputs": [
+      "allow_candidate",
+      "conditional_candidate",
+      "request_owner_review",
+      "block"
+    ]
+  },
+  "guarded_rollback": {
+    "mode": "request_first",
+    "automatic_action": "create_rollback_request_and_notify_owner",
+    "execution": "requires_preapproved_runbook_or_owner_action",
+    "default_target": "V1R1C4"
+  },
+  "skill_evolution": {
+    "enabled": true,
+    "mode": "propose_only",
+    "sources": [
+      "validation_failures",
+      "owner_feedback",
+      "post_merge_incidents",
+      "repeated_manual_repairs"
+    ],
+    "output_dir": "skills/proposals",
+    "activation": "merge_after_acceptance"
+  },
+  "owner_control": {
+    "channels": ["web_ui", "wechat_or_wecom"],
+    "actions": ["audit", "approve", "reject", "request_change", "request_rollback"],
+    "main_version_change_notice": "mandatory"
+  }
+}

config/codex/self-healing-gitops.json

@@ -0,0 +1,42 @@
+{
+  "name": "self-healing-gitops",
+  "version": "1.0.0",
+  "mode": "codex-driven-ci",
+  "description": "Defines how Codex + CI loop detects failures, generates repair plan, and re-runs validation.",
+  "workflow": {
+    "trigger": ["push", "pull_request"],
+    "validation_script": "scripts/validate-gitops-platform-ui.sh",
+    "failure_handling": {
+      "create_failure_report": true,
+      "report_path": "reports/codex/failure.json",
+      "notify": "codex-gpt",
+      "auto_repair": false,
+      "require_human_or_gpt_review": true
+    },
+    "success_handling": {
+      "allow_merge_candidate": true,
+      "propose_baseline_update": "V1R1C5"
+    }
+  },
+  "self_healing_loop": {
+    "steps": [
+      "run_validation",
+      "collect_failures",
+      "send_to_gpt",
+      "apply_patch_to_branch",
+      "rerun_validation",
+      "repeat_until_pass"
+    ],
+    "max_iterations": 5,
+    "stop_conditions": [
+      "PASS",
+      "critical_security_failure",
+      "manual_override"
+    ]
+  },
+  "constraints": {
+    "no_main_write": true,
+    "no_secret_exposure": true,
+    "approval_required_for_release": true
+  }
+}

config/codex/self-optimizing-orchestrator.json

@@ -0,0 +1,135 @@
+{
+  "name": "aios-self-optimizing-orchestrator",
+  "version": "1.0.0",
+  "mode": "hybrid-event-plus-reconciliation",
+  "description": "Low-impact orchestrator for ChatGPT/Codex self-optimization, version-change notification, audit, and owner action routing.",
+  "design_principles": {
+    "execution_layer_impact": "minimal",
+    "writes": "git_patch_only",
+    "direct_main_push": false,
+    "secrets_in_git": false,
+    "production_high_risk_actions": "approval_or_preapproved_runbook_only",
+    "user_impact": "prefer_async_sidecar_and_read_only_observation"
+  },
+  "triggers": {
+    "primary": {
+      "type": "event_driven",
+      "sources": [
+        "git_push",
+        "tag_created",
+        "baseline_changed",
+        "patch_created",
+        "validation_failed",
+        "validation_passed",
+        "merge_candidate_created",
+        "runtime_health_degraded"
+      ],
+      "target": "orchestrator_queue"
+    },
+    "fallback": {
+      "type": "scheduled_reconciliation",
+      "intervals": {
+        "codex_branch_scan": "*/15 * * * *",
+        "chatgpt_patch_scan": "*/15 * * * *",
+        "main_version_scan": "*/5 * * * *",
+        "notification_retry_scan": "*/10 * * * *",
+        "daily_owner_digest": "0 9 * * *"
+      },
+      "purpose": "Catch missed events, reconcile web UI records, and retry failed notifications."
+    }
+  },
+  "agents": {
+    "codex": {
+      "responsibility": [
+        "code validation",
+        "static/security/policy tests",
+        "self-healing patch loop",
+        "merge candidate report"
+      ],
+      "trigger": "event_and_schedule",
+      "skill": "skills/gitops-platform-validation/SKILL.md"
+    },
+    "chatgpt": {
+      "responsibility": [
+        "operator summary",
+        "failure triage",
+        "GitOps patch authoring",
+        "owner-facing change explanation"
+      ],
+      "trigger": "event_and_schedule",
+      "skill": "skills/gitops-owner-notification/SKILL.md"
+    }
+  },
+  "change_summary_required_fields": [
+    "event_id",
+    "branch",
+    "from_rev",
+    "to_rev",
+    "from_version",
+    "to_version",
+    "elapsed_since_previous_main_change",
+    "changed_features",
+    "code_lines_added",
+    "code_lines_deleted",
+    "config_lines_added",
+    "config_lines_deleted",
+    "test_status",
+    "risk",
+    "approval_status",
+    "rollback_target",
+    "web_ui_audit_url"
+  ],
+  "owner_channels": {
+    "wechat": {
+      "enabled": true,
+      "provider": "wechat_or_wecom",
+      "webhook_secret_ref": "secret_ref://aios/notifications/owner-wechat-webhook",
+      "signing_secret_ref": "secret_ref://aios/notifications/owner-action-signing-key",
+      "message_types": [
+        "main_version_changed",
+        "merge_candidate_ready",
+        "validation_failed",
+        "rollback_request_created",
+        "approval_required",
+        "daily_digest"
+      ],
+      "actions": [
+        "view_audit",
+        "approve_preapproved_runbook",
+        "request_rollback",
+        "request_change",
+        "reject_release"
+      ]
+    },
+    "web_ui": {
+      "enabled": true,
+      "audit_route": "/portal/me/#gitops-audit",
+      "owner_action_route": "/portal/me/#gitops-owner-actions",
+      "record_store": "runtime/gitops/events/*.json"
+    }
+  },
+  "version_change_policy": {
+    "main_change_notification": "mandatory",
+    "notify_owner_on_every_main_version_change": true,
+    "include_diff_stats": true,
+    "include_elapsed_time_since_previous_main_change": true,
+    "include_function_summary": true,
+    "write_web_ui_record": true,
+    "retry_until_delivered_or_acknowledged": true
+  },
+  "owner_action_policy": {
+    "wechat_actions": "signed_short_link_or_command_token",
+    "web_actions": "login_required_portal_action",
+    "all_actions_audited": true,
+    "high_risk_actions": "request_only_unless_preapproved_runbook",
+    "rollback": "create_request_by_default",
+    "change_request": "create_patch_or_plan_by_default"
+  },
+  "minimal_execution_layer_changes": [
+    "Add sidecar orchestrator queue consumer.",
+    "Add event writer for GitOps version changes.",
+    "Add notification sender using secret_ref only.",
+    "Add Web UI audit/action records reading event files.",
+    "Keep existing /api/base /api/ver /api/diff /api/patch /api/model /api/run stable."
+  ]
+}

config/codex/v1r1-execution-api-runtime.json

@@ -0,0 +1,51 @@
+{
+  "name": "v1r1-execution-api-runtime",
+  "version": "1.0.0",
+  "mode": "api_runtime_not_filesystem",
+  "baseline": "V1R1C4",
+  "target_proposal": "V1R1C5",
+  "description": "Execution API runtime contract for AIOS Xiamayiti self-evolution loop. All production execution requests must go through the V1R1 runtime API rather than direct filesystem or protected credential access.",
+  "security": {
+    "direct_runtime_secret_access": false,
+    "direct_filesystem_production_write": false,
+    "all_execution_audited": true,
+    "owner_control_required_for_high_risk": true,
+    "direct_main_push": false
+  },
+  "api": {
+    "submit_execution_request": "POST /api/v1r1/execution/request",
+    "get_execution_status": "GET /api/v1r1/execution/status/{request_id}",
+    "append_audit": "POST /api/v1r1/audit/append",
+    "send_owner_notification": "POST /api/v1r1/notification/owner",
+    "submit_owner_action": "POST /api/v1r1/owner/action"
+  },
+  "allowed_request_types": [
+    "audit_record",
+    "owner_notification",
+    "evolution_finding",
+    "evolution_plan",
+    "validation_run",
+    "merge_candidate",
+    "release_request",
+    "rollback_request",
+    "baseline_activation_request"
+  ],
+  "blocked_request_types": [
+    "write_protected_credential",
+    "force_push",
+    "delete_history",
+    "delete_audit",
+    "disable_auth",
+    "disable_gitea_protection",
+    "direct_main_push"
+  ],
+  "execution_states": [
+    "received",
+    "policy_checked",
+    "accepted",
+    "queued",
+    "executed_as_request",
+    "blocked",
+    "failed"
+  ]
+}

config/codex/v1r1-existing-wechat-runtime.json

@@ -0,0 +1,41 @@
+{
+  "name": "v1r1-existing-wechat-runtime-integration",
+  "version": "1.0.0",
+  "baseline": "V1R1C4",
+  "description": "Integrates AIOS self-evolution notifications with the already deployed Xiamayiti/V1R1 personal WeChat runtime instead of creating a duplicate gateway.",
+  "detected_runtime_processes": [
+    {
+      "process_hint": "/data/agent/services/ucc-wechat-qr-adapter/adapter.py",
+      "role": "user-control-center personal WeChat QR adapter",
+      "integration_priority": 1
+    },
+    {
+      "process_hint": "scripts/wechat_notify_worker.py",
+      "role": "existing personal WeChat notification worker",
+      "integration_priority": 2
+    }
+  ],
+  "preferred_integration": {
+    "mode": "existing_worker_queue_bridge",
+    "runtime_env": "AIOS_V1R1_WECHAT_BRIDGE_OUTBOX",
+    "behavior": "Write normalized owner notification JSON into the existing V1R1 WeChat worker queue directory. The existing V1R1 worker is responsible for actual personal WeChat delivery."
+  },
+  "fallback_integration": {
+    "mode": "http_endpoint",
+    "runtime_env": "AIOS_V1R1_WECHAT_OUTBOUND_URL",
+    "behavior": "POST normalized owner notification JSON to a runtime-provided V1R1 notification API endpoint."
+  },
+  "rules": {
+    "do_not_duplicate_wechat_gateway": true,
+    "do_not_store_credentials_in_git": true,
+    "do_not_access_runtime_secrets_directly": true,
+    "web_ui_and_wechat_share_event_id": true,
+    "delivery_status_must_be_audited": true
+  },
+  "operator_discovery_commands": [
+    "ps aux | grep -E 'ucc-wechat|wechat_notify'",
+    "pwdx <pid>",
+    "tr '\\0' '\\n' < /proc/<pid>/environ",
+    "grep -R \"queue\|outbox\|notify\|send\|wechat\" -n /data/agent /data/aios-gitops/workspace/scripts 2>/dev/null | head -100"
+  ]
+}

config/self-evolution/acceptance-pipeline.json

@@ -1 +0,0 @@
-{"schema":"acceptance-pipeline-v1","status":"proposal","pipeline":{"stages":[{"name":"code_review","agent_role":"review_agent"},{"name":"automated_test","agent_role":"test_agent"},{"name":"security_check","agent_role":"security_agent"},{"name":"performance_check","agent_role":"performance_agent"},{"name":"regression_check","agent_role":"regression_agent"},{"name":"release_readiness","agent_role":"release_readiness_agent"}],"parallel_validation":true,"failure_blocks_release":true},"outputs":{"quality_score":true,"risk_report":true,"approval_request":true},"safety":{"production_release_requires_owner":true,"credentials_scan":true,"audit_log":true}}

config/self-evolution/agent-governance-framework.json

@@ -1 +0,0 @@
-{"schema":"agent-governance-v1","status":"proposal","governance":{"identity":true,"reputation":true,"capability_discovery":true,"memory_service":true,"shared_knowledge":true,"skill_packages":true,"peer_review":true,"acceptance_pipeline":["optimization","implementation","acceptance","security","release_readiness"],"dynamic_voting":{"enabled":true,"base_weights":{"custom_gpt":2,"windows_codex":2,"server_agents":1},"quality_score_modifier":true},"audit":{"full_trace":true,"decision_log":true}},"release":{"patch_only":true,"owner_approval_required":true}}

config/self-evolution/agent-orchestration-policy.json

@@ -1,63 +0,0 @@
-{
-  "policy_id": "self-evolution-agent-orchestration-policy",
-  "version": 1,
-  "status": "proposal",
-  "scope": "self-evolution-execution-orchestration",
-  "execution_subjects": {
-    "primary": [
-      "server.openclaw_agent",
-      "server.hermes_agent"
-    ],
-    "collaborators": [
-      "windows.codex_app",
-      "custom_gpt.codex_chartgpt_bridge"
-    ]
-  },
-  "parallelism": {
-    "server_agents_parallel_allowed": true,
-    "multiple_server_agents_allowed": true,
-    "server_agents_preferred": true
-  },
-  "fallback_and_assistance": {
-    "difficult_case_external_interaction_allowed": true,
-    "assistance_endpoint": "https://chatgpt.com/g/g-6a4ba70a063c8191a89bc2d86a4c7fa0-codex-chartgpt-bridge",
-    "allowed_modes": [
-      "ask_for_help",
-      "interactive_coordination",
-      "proposal_review"
-    ]
-  },
-  "dispute_resolution": {
-    "multi_agent_voting_allowed": true,
-    "weights": {
-      "custom_gpt.codex_chartgpt_bridge": 2,
-      "windows.codex_app": 2,
-      "server.openclaw_agent": 1,
-      "server.hermes_agent": 1,
-      "server.additional_agent_default": 1
-    },
-    "tie_breaking": "require_owner_or_admin_review"
-  },
-  "safety": {
-    "credentials_in_git_allowed": false,
-    "force_push_allowed": false,
-    "destructive_bulk_delete_allowed": false,
-    "v_level_change_requires_owner_approval": true,
-    "production_switch_requires_owner_approval": true,
-    "tag_creation_requires_owner_approval": true,
-    "v_level_tag_or_production_switch_requires_owner_approval": true,
-    "direct_main_push_allowed": false,
-    "direct_main_merge_allowed": false
-  },
-  "gitops": {
-    "audit_required": true,
-    "writes_require_commit": true,
-    "default_target_branch": "patch/self-evolution-agent-orchestration-policy",
-    "direct_main_push_default": false,
-    "patch_branch_only": true,
-    "main_merge_requires_owner_admin_approval": true
-  },
-  "created_by": "codex-chartgpt-bridge",
-  "created_at": "2026-07-07T00:00:00Z",
-  "branch": "patch/self-evolution-agent-orchestration-policy"
-}

config/self-evolution/agent-os-blueprint.json

@@ -1 +0,0 @@
-{"schema":"agent-os-v1","status":"proposal","agents":{"openclaw":{"memory":true,"skills":true,"tools":true,"planner":true,"evaluator":true,"self_reflection":true,"learning":true},"hermes":{"memory":true,"skills":true,"tools":true,"planner":true,"evaluator":true,"self_reflection":true,"learning":true}},"coordination":{"voting":true,"weighted_voting":{"custom_gpt":2,"windows_codex":2,"server_agents":1},"owner_review_on_tie":true},"safety":{"gitops_only":true,"patch_first":true,"no_credentials":true,"no_direct_main":true}}

config/self-evolution/agent-platform-roadmap.json

@@ -1 +0,0 @@
-{"schema":"agent-platform-v1","status":"proposal","modules":[{"name":"memory-manager","enabled":true},{"name":"skill-registry","enabled":true},{"name":"agent-registry","enabled":true},{"name":"task-scheduler","enabled":true},{"name":"consensus-engine","enabled":true},{"name":"continuous-self-evolution","enabled":true}],"release_policy":{"patch_first":true,"owner_approval":true}}

config/self-evolution/agent-protocol-schema.json

@@ -1 +0,0 @@
-{"schema":"agent-protocol-v1","status":"proposal","agent_identity":{"id":"string","name":"string","family":"openclaw|hermes|custom","version":"string","capabilities":[],"skills":[],"health":"unknown|healthy|degraded|offline"},"task_protocol":{"task_id":"string","requester":"agent_id","executor":"agent_id","objective":"string","priority":"low|normal|high|critical","status":"queued|running|completed|failed|review","result":"object"},"memory_protocol":{"memory_id":"string","type":"experience|knowledge|decision|reflection","scope":"agent|shared","audit":true},"voting_protocol":{"enabled":true,"proposal":"string","votes":[],"weighted":true,"tie":"owner_review"},"security":{"credentials":false,"direct_main_write":false,"production_action_approval":true}}

config/self-evolution/agent-resource-manager.json

@@ -1,43 +0,0 @@
-{
-  "$schema": "schema/self-evolution.schema.json",
-  "title": "Agent Resource Manager Configuration",
-  "description": "Defines resource limits, parallel task limits, priority, runtime isolation, and overload handling for agent orchestration.",
-  "version": "1.0.0",
-  "config": {
-    "default_resource_limits": {
-      "max_concurrent_tasks": 5,
-      "max_memory_mb": 1024,
-      "max_cpu_cores": 2,
-      "timeout_seconds": 300
-    },
-    "agent_priority_levels": {
-      "critical": 100,
-      "high": 80,
-      "medium": 50,
-      "low": 20,
-      "background": 0
-    },
-    "runtime_isolation": {
-      "enabled": true,
-      "namespace_per_agent": true,
-      "ephemeral_storage": "1Gi",
-      "network_policy": "restrictive"
-    },
-    "overload_handling": {
-      "max_queue_depth": 100,
-      "backpressure_threshold": 0.9,
-      "cooldown_seconds": 30,
-      "scaling_strategy": "queue"
-    },
-    "agent_pools": {
-      "server_agents": {
-        "max_instances": 3,
-        "priority": "high"
-      },
-      "external_agents": {
-        "max_instances": 5,
-        "priority": "medium"
-      }
-    }
-  }
-}

config/self-evolution/agent-runtime-components.json

@@ -1 +0,0 @@
-{"schema":"agent-runtime-components-v1","status":"proposal","components":{"agent-runtime-manager":{"enabled":true,"responsibilities":["lifecycle_management","health_check","recovery","resource_tracking"]},"agent-registry":{"enabled":true,"responsibilities":["identity","capability_discovery","status_tracking","version_tracking"]},"message-bus":{"enabled":true,"responsibilities":["task_routing","event_delivery","agent_coordination"]},"memory-service":{"enabled":true,"responsibilities":["long_term_memory","working_memory","knowledge_retrieval","audit"]},"skill-loader":{"enabled":true,"responsibilities":["skill_installation","skill_validation","skill_versioning"]},"agent-evaluator":{"enabled":true,"responsibilities":["quality_score","acceptance_check","performance_feedback"]}},"security":{"credential_storage":false,"gitops_audit":true,"patch_only":true}}

config/self-evolution/consensus-engine.json

@@ -1 +0,0 @@
-{"schema":"consensus-engine-v1","status":"proposal","consensus":{"enabled":true,"modes":["weighted_vote","review_board","owner_escalation"],"participants":["openclaw_agent","hermes_agent","windows_codex","custom_gpt"],"base_weights":{"custom_gpt":2,"windows_codex":2,"server_agents":1},"dynamic_adjustment":{"enabled":true,"factors":["quality_score","acceptance_rate","historical_reliability"]},"conflict_detection":true,"tie_breaking":"owner_admin_review"},"decision_log":{"required":true,"audit":true},"safety":{"production_decision_requires_approval":true}}

config/self-evolution/continuous-evolution-engine.json

@@ -1 +0,0 @@
-{"schema":"continuous-evolution-engine-v1","status":"proposal","pipeline":{"monitor":true,"detect":true,"plan":true,"schedule":true,"execute":true,"learn":true},"workflow":{"detect_sources":["runtime_metrics","logs","acceptance_results","agent_feedback","user_requests"],"proposal_generation":true,"patch_generation":true,"validation_required":true,"consensus_required":true,"approval_gate":true,"release_feedback":true},"agents":{"optimizer":"system_optimization_agent","planner":"planning_agent","executor":"patch_execution_agent","validator":"acceptance_validation_agent","reviewer":"consensus_engine"},"learning":{"store_experience":true,"update_quality_score":true,"reflection_required":true},"safety":{"gitops_only":true,"patch_first":true,"credentials":false,"production_requires_approval":true}}

config/self-evolution/implementation-roadmap.json

@@ -1 +0,0 @@
-{"schema":"agent-platform-implementation-v1","status":"proposal","objective":"evolve-agent-platform-from-configuration-to-operational-framework","implementation_phases":[{"phase":1,"name":"agent-runtime-manager","scope":["agent lifecycle","health check","startup shutdown","recovery"]},{"phase":2,"name":"agent-message-bus","scope":["agent communication","task routing","event coordination"]},{"phase":3,"name":"memory-service","scope":["long term memory","working memory","shared knowledge retrieval","audit"]},{"phase":4,"name":"skill-framework","scope":["skill packages","versioning","installation","validation"]},{"phase":5,"name":"agent-api","scope":["agent registration","capability discovery","task submission","status query"]},{"phase":6,"name":"continuous-evolution-pipeline","scope":["proposal generation","patch creation","automated validation","approval workflow"]}],"constraints":{"gitops_only":true,"patch_first":true,"no_credentials":true,"no_force_push":true,"production_release_requires_approval":true}}

config/self-evolution/memory-schema.json

@@ -1 +0,0 @@
-{"schema":"agent-memory-v1","status":"proposal","memory_types":{"working_memory":{"ttl":"task_scope","audit":true},"long_term_memory":{"persistent":true,"scope":"agent"},"shared_knowledge":{"persistent":true,"scope":"platform"},"reflection_memory":{"persistent":true,"purpose":"self_improvement"}},"memory_entry":{"id":"string","agent_id":"string","type":"working|experience|knowledge|decision|reflection","content":"object","source_task":"string","created_at":"timestamp","quality_score":0},"safety":{"credentials":false,"secrets":false,"audit_required":true}}

config/self-evolution/owner-channel-registry.json

@@ -1,26 +0,0 @@
-{
-  "schema": "owner-channel-registry-v1",
-  "status": "proposal",
-  "purpose": "Owner notification channel routing and fallback management",
-  "routing": {
-    "primary_selection": "configured_priority",
-    "fallback_enabled": true,
-    "health_check_required": true,
-    "delivery_failure_fallback": true
-  },
-  "channel_policy": {
-    "identifiers_managed_externally": true,
-    "no_hardcoded_personal_identifiers": true,
-    "audit_delivery_result": true
-  },
-  "notification_priority": [
-    "production_approval",
-    "administrator_authorization",
-    "high_risk_decision",
-    "agent_consensus_failure"
-  ],
-  "security": {
-    "credentials_in_git": false,
-    "private_contact_data_in_logs": false
-  }
-}

config/self-evolution/release-automation.json

@@ -1 +0,0 @@
-{"schema":"release-automation-v1","status":"proposal","release_flow":{"patch_review":true,"acceptance_gate":true,"consensus_gate":true,"approval_request":true,"version_proposal":true,"tag_request":true},"agents":{"release_manager":"release_readiness_agent","reviewers":["openclaw_agent","hermes_agent","custom_gpt","windows_codex_app"]},"controls":{"auto_tag":false,"auto_production_publish":false,"owner_approval_required":true,"audit_log":true},"rollback":{"request_supported":true,"automatic_destructive_rollback":false}}

config/self-evolution/server-agent-roles.json

@@ -1,119 +0,0 @@
-{
-  "policy_id": "server-agent-roles-and-capabilities",
-  "version": 1,
-  "status": "proposal",
-  "scope": "self-evolution-server-agents",
-  "agent_families": {
-    "openclaw": {
-      "enabled": true,
-      "runtime": "server",
-      "priority": "primary",
-      "roles": [
-        "system_optimization_agent",
-        "acceptance_validation_agent",
-        "patch_execution_agent",
-        "runtime_diagnosis_agent",
-        "regression_review_agent"
-      ],
-      "persistent_memory": {
-        "enabled": true,
-        "scope": "agent_family_and_role",
-        "storage": "runtime_or_gitops_managed_memory",
-        "credentials_in_memory_allowed": false,
-        "audit_required": true
-      },
-      "skills": {
-        "enabled": true,
-        "skill_registry": "config/self-evolution/skills/openclaw-skills.json",
-        "required_skill_groups": [
-          "gitops_patch_workflow",
-          "system_optimization",
-          "acceptance_testing",
-          "runtime_observability",
-          "safe_release_review"
-        ]
-      }
-    },
-    "hermes": {
-      "enabled": true,
-      "runtime": "server",
-      "priority": "primary",
-      "roles": [
-        "system_optimization_agent",
-        "acceptance_validation_agent",
-        "release_readiness_agent",
-        "policy_review_agent",
-        "cross_agent_coordination_agent"
-      ],
-      "persistent_memory": {
-        "enabled": true,
-        "scope": "agent_family_and_role",
-        "storage": "runtime_or_gitops_managed_memory",
-        "credentials_in_memory_allowed": false,
-        "audit_required": true
-      },
-      "skills": {
-        "enabled": true,
-        "skill_registry": "config/self-evolution/skills/hermes-skills.json",
-        "required_skill_groups": [
-          "gitops_patch_workflow",
-          "acceptance_testing",
-          "release_readiness",
-          "policy_governance",
-          "multi_agent_coordination"
-        ]
-      }
-    }
-  },
-  "role_contracts": {
-    "system_optimization_agent": {
-      "purpose": "Identify and propose safe system optimization patches.",
-      "may_write_patch": true,
-      "may_modify_runtime": false,
-      "requires_review_for_production": true
-    },
-    "acceptance_validation_agent": {
-      "purpose": "Run and record acceptance checks for GitOps changes.",
-      "may_write_patch": true,
-      "may_approve_own_change": false,
-      "requires_review_for_production": true
-    },
-    "patch_execution_agent": {
-      "purpose": "Apply approved or proposed patch changes on non-main branches.",
-      "may_write_patch": true,
-      "direct_main_push_allowed": false
-    },
-    "release_readiness_agent": {
-      "purpose": "Evaluate whether a patch is ready for owner/admin release approval.",
-      "may_create_release_request": true,
-      "may_create_tag_directly": false,
-      "may_switch_production_directly": false
-    },
-    "cross_agent_coordination_agent": {
-      "purpose": "Coordinate voting, conflict resolution, and escalation among agents.",
-      "voting_allowed": true,
-      "tie_breaking": "owner_or_admin_review"
-    }
-  },
-  "online_capabilities": {
-    "read_online_baseline": true,
-    "read_online_versions": true,
-    "read_online_diff": true,
-    "read_online_runtime": true,
-    "create_patch_branch": true,
-    "commit_patch_changes": true,
-    "sync_online_git": true,
-    "create_release_request": true,
-    "direct_tag_creation": false,
-    "direct_production_publish": false
-  },
-  "safety": {
-    "credentials_in_git_allowed": false,
-    "credentials_in_memory_allowed": false,
-    "force_push_allowed": false,
-    "destructive_bulk_delete_allowed": false,
-    "owner_admin_approval_required_for_release": true
-  },
-  "created_by": "codex-chartgpt-bridge",
-  "created_at": "2026-07-07T00:00:00Z"
-}

config/self-evolution/skill-package-schema.json

@@ -1 +0,0 @@
-{"schema":"agent-skill-package-v1","status":"proposal","skill_package":{"id":"string","name":"string","version":"string","description":"string","owner_agent":"agent_id","dependencies":[],"capabilities":[],"entrypoints":[],"validation":{"required":true,"tests":[],"quality_score":0}},"lifecycle":{"install":true,"upgrade":true,"rollback":true,"disable":true},"sharing":{"agent_scope":true,"platform_scope":true},"security":{"credentials":false,"secrets":false,"audit_required":true,"production_change_requires_approval":true}}

config/self-evolution/task-scheduler-policy.json

@@ -1 +0,0 @@
-{"schema":"task-scheduler-v1","status":"proposal","scheduler":{"enabled":true,"modes":["capability_match","priority_queue","parallel_execution","failure_recovery"],"selection":{"factors":["capability","skill_match","health","quality_score","load"]},"priority":{"levels":["critical","high","normal","low"]}},"execution":{"parallel_agents":true,"retry":true,"handoff":true,"timeout_control":true},"safety":{"patch_first":true,"direct_main":false,"production_requires_approval":true}}

deploy/systemd/aios-autonomous-daemon.env.template

@@ -0,0 +1,16 @@
+# AIOS Autonomous GitOps Daemon runtime environment template
+# Copy to /etc/aios/aios-autonomous-daemon.env during deployment.
+# This template stores only paths and secret_ref identifiers. Runtime values are injected by the host secret manager.
+
+AIOS_REPO_ROOT=/data/aios-gitops/workspace
+AIOS_EVENT_DIR=/data/aios-gitops/runtime/events
+AIOS_AUDIT_DIR=/data/aios-gitops/runtime/audit
+AIOS_REQUEST_DIR=/data/aios-gitops/runtime/requests
+AIOS_REPORT_DIR=/data/aios-gitops/runtime/reports/codex
+AIOS_PREAPPROVAL_DIR=/data/aios-gitops/runtime/approvals/preapproved
+AIOS_DAEMON_INTERVAL=30
+AIOS_INGRESS_BIND=127.0.0.1
+AIOS_INGRESS_PORT=8787
+AIOS_OWNER_CHANNEL_REF=secret_ref://aios/notifications/owner-wechat-endpoint
+AIOS_OWNER_ACTION_SIGN_REF=secret_ref://aios/notifications/owner-action-signing
+AIOS_INGRESS_SIGN_REF=secret_ref://aios/notifications/inbound-event-signing

deploy/systemd/aios-autonomous-daemon.service

@@ -0,0 +1,21 @@
+[Unit]
+Description=AIOS Autonomous GitOps Daemon
+After=network.target
+
+[Service]
+Type=simple
+User=aios
+WorkingDirectory=/data/aios-gitops/workspace
+EnvironmentFile=/etc/aios/aios-autonomous-daemon.env
+ExecStart=/usr/bin/python3 services/aios-autonomous-daemon/daemon.py run
+Restart=always
+RestartSec=5
+
+# Hardening (minimal impact)
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=full
+ProtectHome=true
+
+[Install]
+WantedBy=multi-user.target

deploy/systemd/aios-consensus-controller.service

@@ -0,0 +1,18 @@
+[Unit]
+Description=AIOS Multi-Agent Consensus Controller
+After=network.target
+
+[Service]
+Type=oneshot
+User=aios
+WorkingDirectory=/data/aios-gitops/workspace
+ExecStart=/usr/bin/python3 services/aios-consensus-controller/controller.py
+
+# Hardening (non-invasive)
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=full
+ProtectHome=true
+
+[Install]
+WantedBy=multi-user.target

deploy/systemd/aios-v1r1-wechat-worker.service

@@ -0,0 +1,22 @@
+[Unit]
+Description=AIOS V1R1 Personal WeChat Outbound Worker
+After=network.target aios-autonomous-daemon.service
+Wants=aios-autonomous-daemon.service
+
+[Service]
+Type=simple
+User=aios
+WorkingDirectory=/data/aios-gitops/workspace
+EnvironmentFile=/etc/aios/aios-autonomous-daemon.env
+ExecStart=/usr/bin/python3 services/aios-v1r1-wechat-outbound-worker/worker.py
+Restart=always
+RestartSec=5
+
+# Hardening
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=full
+ProtectHome=true
+
+[Install]
+WantedBy=multi-user.target

docs/architecture/AIOS_REMOTE_CODEX_MULTI_AGENT_ORCHESTRATION.md

@@ -0,0 +1,210 @@
+# AIOS 远程 Codex 多 Agent 统筹架构
+
+## 1. 核心定位
+
+当前 AIOS / 虾马一体系统的自我进化，不再假设服务器上存在 Codex CLI。
+
+真实运行模型是：
+
+- Windows 11 Codex App：总控 / 统筹 / 拆分任务 / 监督多个子 agent；
+- 服务器 OpenClaw：生产运行侧消息、微信、执行与通道能力；
+- 服务器 Hermes Agent：运行观测、事件、消息/用户交互、反馈归集；
+- 服务器 AIOS Autonomous Daemon：GitOps event loop、validation、audit、request；
+- GitOps 仓库：唯一可审计状态同步面；
+- WebOps / Portal：owner 审计、审批、回滚、变更入口。
+
+## 2. 架构图
+
+```text
+Windows 11 Codex App
+  ├─ Planner Agent
+  ├─ Code Patch Agent
+  ├─ Validation Agent
+  ├─ WeChat/UCC Integration Agent
+  ├─ WebOps UI Agent
+  └─ Supervisor Agent
+        ↓ git / ssh / reports
+GitOps Repository: patch/web-ui-complete-gitops-dashboard-20260706
+        ↓ pull / event
+AIOS Server Runtime
+  ├─ aios-autonomous-daemon
+  ├─ OpenClaw Agent / Gateway
+  ├─ Hermes Agent
+  ├─ UCC WeChat Adapter
+  ├─ WebOps / message_outbox
+  └─ audit / reports / requests
+        ↓
+Owner WebOps + 个人微信
+```
+
+## 3. 分工
+
+### Windows Codex App
+
+Windows Codex 是统筹器，不是服务器守护进程。
+
+职责：
+
+1. 读取 GitOps 指令与当前 branch；
+2. 启动多个子 agent 并行处理；
+3. 生成代码/配置/文档 patch；
+4. push 到同一 GitOps patch 分支；
+5. 读取服务器回传的验证结果；
+6. 对失败项继续修复；
+7. 输出 merge candidate / blocked reason。
+
+### OpenClaw Agent
+
+职责：
+
+1. 维护微信通道、message send、用户通道状态；
+2. 提供个人微信实际执行能力；
+3. 接收 message_outbox worker 或 UCC Adapter 的调用；
+4. 输出 channel status / delivery result；
+5. 不直接接收业务模块调用。
+
+### Hermes Agent
+
+职责：
+
+1. 汇总系统运行事件；
+2. 处理用户/消息交互流；
+3. 将微信或 WebOps 反馈转为系统事件；
+4. 协助 self-evolution loop 判断用户体验和业务状态；
+5. 输出观测报告给 GitOps / Codex。
+
+### AIOS Autonomous Daemon
+
+职责：
+
+1. 处理 runtime events；
+2. 触发 validation / merge gate；
+3. 写 audit / request / report；
+4. 不直接改 runtime secrets；
+5. 不直接调用微信底层适配器。
+
+## 4. 并行子 Agent 模型
+
+Windows Codex 可启动以下子 agent：
+
+| 子 Agent | 任务 |
+|---|---|
+| planner | 读取 directive，拆分任务，确认风险 |
+| server-inspector | 解析服务器命令输出，定位 runtime 状态 |
+| code-patcher | 修改 GitOps 仓库代码 |
+| test-author | 补验收用例和验证脚本 |
+| wechat-integrator | 处理 message_outbox / UCC / OpenClaw 适配 |
+| webops-ui | 补 WebOps 页面和 API contract |
+| supervisor | 汇总 PASS/FAIL/BLOCKED |
+
+## 5. 自动运行机制
+
+自动运行不代表 Codex 在服务器常驻，而是通过以下 loop 运行：
+
+```text
+server event / owner request
+  ↓
+GitOps directive / report
+  ↓
+Windows Codex pulls branch
+  ↓
+Codex child agents patch code/config
+  ↓
+git push
+  ↓
+server git pull + run validation
+  ↓
+reports written
+  ↓
+Codex reads reports
+  ↓
+repeat until PASS/BLOCKED
+```
+
+## 6. 通信通道
+
+### Git
+
+主要状态同步面：
+
+- directives；
+- patches；
+- code/config；
+- docs；
+- acceptance tests；
+- version proposals。
+
+### SSH / Operator Logs
+
+服务器运行结果通过 SSH 或人工粘贴日志回传给 Codex/GPT。
+
+### Runtime Reports
+
+服务器写入：
+
+```text
+reports/codex/*.json
+reports/openclaw/*.json
+reports/hermes/*.json
+reports/consensus/*.json
+runtime/gitops/audit/*.json
+runtime/gitops/requests/*.json
+```
+
+## 7. 生产安全边界
+
+仍然禁止：
+
+- 直接 main push；
+- force push；
+- 写 runtime secrets；
+- 删除 audit / version history；
+- 业务模块直接调用 OpenClaw；
+- 业务模块直接调用 UCC WeChat adapter；
+- 绕过 message_outbox；
+- 伪造 sent 状态。
+
+## 8. 微信链路标准
+
+生产标准链路：
+
+```text
+业务/系统事件
+  → POST /api/v1/wechat/outbox 或写 message_outbox
+  → wechat_notify_worker
+  → wechat_send_backend
+  → ucc-adapter / openclaw-channel
+  → 个人微信
+  → sent/failed/retry/audit
+```
+
+当前优先后端：
+
+```text
+ucc-adapter
+```
+
+OpenClaw channel 仅作为可发现的可选后端，不得硬编码 `openclaw-weixin`。
+
+## 9. 自我进化目标
+
+自我进化不是“代码自己改代码”，而是虾马一体系统整体优化：
+
+1. 业务流程优化；
+2. 运行健康优化；
+3. 模型路由优化；
+4. 通知和审批体验优化；
+5. WebOps 可观测性优化；
+6. 必要时生成代码/配置 patch。
+
+## 10. 进入自动运行的判据
+
+满足以下条件即认为进入自动运行：
+
+1. `aios-autonomous-daemon` running；
+2. OpenClaw/Hermes 进程 running；
+3. message_outbox 可写；
+4. Windows Codex 监控目标 branch；
+5. Codex 可读取 directive 并 push patch；
+6. 服务器可运行验收命令并写 reports；
+7. owner 可在 WebOps 或微信收到关键进展。

ops/codex/directives/CODEX-FIX-V1R1-WECHAT-BACKEND-20260707.md

@@ -0,0 +1,351 @@
+# Codex 指令：修复 V1R1 微信主动发送后端
+
+Directive ID: `CODEX-FIX-V1R1-WECHAT-BACKEND-20260707`
+
+Branch: `patch/web-ui-complete-gitops-dashboard-20260706`
+
+Base: `main`
+
+Current baseline: `V1R1C4`
+
+## 1. 当前阻塞
+
+当前微信主动发送链路已改为：
+
+```text
+message_outbox
+  → wechat_notify_worker.py
+  → wechat_send_backend.py
+  → openclaw-channel 或 ucc-adapter
+```
+
+实际验证结果：
+
+```json
+{
+  "backend": "unavailable",
+  "reason": "wechat outbound backend unavailable: openclaw channel not registered; ucc adapter send endpoint not detected"
+}
+```
+
+已确认：
+
+1. OpenClaw Gateway 运行中，但 `openclaw channels list --json` 只有 `{ "chat": {} }`，没有 wechat/weixin channel。
+2. 当前生产微信能力优先出口应是 `ucc-wechat-qr-adapter`，不是 OpenClaw channel。
+3. 当前系统存在进程：`/data/agent/services/ucc-wechat-qr-adapter/adapter.py`。
+4. 当前服务配置：`/etc/aios/ucc-wechat-qr-adapter.env`。
+5. 当前监听端口：`AIOS_WECHAT_QR_ADAPTER_PORT=18800`。
+6. `wechat_send_backend.py` 没有探测到 UCC adapter 的可用发送接口。
+
+## 2. 修复目标
+
+Codex 必须补齐 V1R1 微信主动发送后端，使 `message_outbox → worker → ucc-adapter → 个人微信` 成为主路径。
+
+不得让业务模块直接调用：
+
+- `openclaw message send`；
+- OpenClaw Gateway `127.0.0.1:18789`；
+- 微信适配器底层进程；
+- 本地 secrets 文件。
+
+业务/外部系统只允许写入：
+
+```text
+message_outbox
+```
+
+或调用未来统一 API：
+
+```text
+POST /api/v1/wechat/outbox
+```
+
+## 3. Codex 必须先执行的检查
+
+只执行命令，不输出 token。
+
+### 3.1 检查 adapter 路由和函数
+
+```bash
+sudo grep -RniE '@.*route|@app\.(get|post)|FastAPI|Flask|send|message|notify|outbound|wechat|target' \
+  /data/agent/services/ucc-wechat-qr-adapter/adapter.py \
+  | sed -E 's/(token|password|secret|key|auth)([=: ][^ ]+)/\1=***MASKED***/Ig' \
+  | head -n 200
+```
+
+### 3.2 检查 adapter 健康接口
+
+```bash
+for p in \
+  /health \
+  /status \
+  /api/health \
+  /api/internal/health \
+  /api/internal/wechat/status \
+  /api/internal/wechat/send
+do
+  echo "=== $p ==="
+  curl -sS "http://127.0.0.1:18800$p" || true
+  echo
+done
+```
+
+### 3.3 如需 token，安全读取但不得打印
+
+```bash
+ADAPTER_TOKEN="$(sudo awk -F= '/^AIOS_WECHAT_QR_ADAPTER_TOKEN=/{print $2}' /etc/aios/ucc-wechat-qr-adapter.env)"
+
+for p in \
+  /health \
+  /status \
+  /api/health \
+  /api/internal/health \
+  /api/internal/wechat/status
+do
+  echo "=== $p ==="
+  curl -sS \
+    -H "Authorization: Bearer ${ADAPTER_TOKEN}" \
+    -H "X-AIOS-Token: ${ADAPTER_TOKEN}" \
+    "http://127.0.0.1:18800$p" || true
+  echo
+done
+```
+
+## 4. 必须实现
+
+### 4.1 如果 adapter 已有发送接口
+
+若 `adapter.py` 已经存在发送接口，Codex 应：
+
+1. 确认真实路径、请求格式、认证头；
+2. 修改 `scripts/wechat_send_backend.py` 的 `ucc-adapter` backend 调用该真实接口；
+3. 保证 token 仅从运行时环境或 env 文件读取，不进入 Git；
+4. 更新验收文档。
+
+### 4.2 如果 adapter 没有发送接口
+
+Codex 应在 `/data/agent/services/ucc-wechat-qr-adapter/adapter.py` 对应源码路径中补内部接口，或在 GitOps 仓库新增 overlay/patch 指令，目标接口为：
+
+```http
+POST /api/internal/wechat/send
+```
+
+请求体：
+
+```json
+{
+  "target": "...",
+  "content": "...",
+  "account_id": "...",
+  "message_id": "...",
+  "metadata": {}
+}
+```
+
+认证：
+
+- 使用 `/etc/aios/ucc-wechat-qr-adapter.env` 中的 `AIOS_WECHAT_QR_ADAPTER_TOKEN`；
+- 支持 `Authorization: Bearer <token>`；
+- 支持 `X-AIOS-Token: <token>`；
+- 不允许打印 token。
+
+返回：
+
+成功：
+
+```json
+{
+  "ok": true,
+  "provider_message_id": "...",
+  "status": "sent"
+}
+```
+
+如果底层暂时没有真实发送函数，必须返回：
+
+```json
+{
+  "ok": false,
+  "code": "adapter_send_not_supported"
+}
+```
+
+不得假装 `sent`。
+
+## 5. 修改范围
+
+允许修改或新增：
+
+- `scripts/wechat_send_backend.py`
+- `scripts/wechat_notify_worker.py`
+- `scripts/enqueue_wechat_notification.py`
+- `scripts/message_outbox_schema.py`
+- `docs/ops/*wechat*`
+- `tests/acceptance/*wechat*`
+- UCC adapter 的 overlay/patch 文件
+- systemd/env template 中与 worker 配置相关的字段
+
+禁止修改：
+
+- runtime secrets 明文；
+- 个人微信原始 token；
+- Gitea 安全配置；
+- Casdoor/auth 配置；
+- baseline active version；
+- 删除 audit/version/history 的逻辑。
+
+## 6. 必须新增或更新验收用例
+
+### TC-WX-BE-01
+
+OpenClaw channel list 只有 `{ "chat": {} }` 时，不得调用 `openclaw-weixin`。
+
+预期：
+
+```text
+wechat_send_backend 选择 ucc-adapter 或明确 unavailable
+last_error 不包含 Unknown channel: openclaw-weixin
+```
+
+### TC-WX-BE-02
+
+UCC adapter 存活时自动选择 `ucc-adapter`。
+
+预期：
+
+```text
+python3 scripts/wechat_send_backend.py
+→ backend=ucc-adapter
+```
+
+### TC-WX-BE-03
+
+outbox 测试消息可进入 worker。
+
+预期：
+
+```text
+message_outbox.status 从 queued 变为 dispatching，再变为 sent 或 failed
+```
+
+### TC-WX-BE-04
+
+如果 adapter 支持真实发送，owner 微信收到测试消息。
+
+预期：
+
+```text
+message_outbox.status=sent
+audit_logs.action=wechat_outbound_sent
+```
+
+### TC-WX-BE-05
+
+如果 adapter 不支持发送，消息不得丢失。
+
+预期：
+
+```text
+message_outbox.status=queued 或 failed
+last_error 包含 adapter_send_not_supported
+audit_logs.action=wechat_outbound_failed
+```
+
+### TC-WX-SEC-01
+
+日志不得泄露：
+
+- token；
+- password；
+- secret；
+- cookie；
+- 个人微信原始 ID 给普通用户；
+- route proof；
+- runtime secrets 路径。
+
+## 7. 最小验收命令
+
+### 7.1 检查 backend
+
+```bash
+cd /data/aios-gitops/workspace
+python3 scripts/wechat_send_backend.py
+```
+
+### 7.2 入队测试
+
+```bash
+python3 scripts/enqueue_wechat_notification.py \
+  --recipient owner \
+  --recipient-role owner \
+  --message-type system_report \
+  --priority high \
+  --title "AIOS 测试通知" \
+  --content "这是通过 message_outbox → ucc-adapter 发送的主动微信通知。"
+```
+
+### 7.3 执行 worker
+
+```bash
+python3 scripts/wechat_notify_worker.py --once
+```
+
+### 7.4 查询状态
+
+```bash
+python3 - <<'PY'
+import sqlite3
+con=sqlite3.connect('/data/aios-gitops/workspace/data/webops.sqlite3')
+con.row_factory=sqlite3.Row
+print('message_outbox')
+for r in con.execute('select id,status,retry_count,last_error,sent_at from message_outbox order by created_at desc limit 5'):
+    print(dict(r))
+print('audit_logs')
+for r in con.execute('select action,target,detail,created_at from audit_logs order by created_at desc limit 5'):
+    print(dict(r))
+PY
+```
+
+## 8. 输出要求
+
+Codex 完成后必须输出：
+
+```text
+Status: PASS / FAIL / BLOCKED
+Branch: patch/web-ui-complete-gitops-dashboard-20260706
+Files Changed: ...
+Backend Selected: openclaw-channel / ucc-adapter / unavailable
+Adapter Send Endpoint: detected / added / unsupported
+Message Outbox Status: sent / queued / failed
+Audit Status: written / missing
+Owner WeChat Received: yes / no / not testable
+Blocked Reason: ...
+Next Action: ...
+```
+
+## 9. 当前期望结果
+
+最优结果：
+
+```text
+backend=ucc-adapter
+message_outbox.status=sent
+owner 微信收到 AIOS 测试通知
+```
+
+可接受结果：
+
+```text
+backend=ucc-adapter
+message_outbox.status=failed
+last_error=adapter_send_not_supported
+```
+
+不可接受结果：
+
+```text
+继续报 Unknown channel: openclaw-weixin
+假装 sent
+日志打印 token
+业务模块直接调用 OpenClaw
+```

patches/patch_collab-custom-gpt-20260706T104130Z.branch.json

@@ -1,9 +1,9 @@
 {
   "type": "branch",
-  "branch": "patch/v1r2c3-baseline-promotion-20260708",
+  "branch": "patch/collab-custom-gpt-20260706T104130Z",
   "base": "main",
   "created_by": "chatgpt-gitops-bot",
-  "created_at": "2026-07-07T18:25:04Z",
+  "created_at": "2026-07-06T10:41:30Z",
   "direct_main_push": false,
   "owner_approval_required": true
 }

patches/patch_collab-local-codex-20260706T104130Z.branch.json

@@ -0,0 +1,9 @@
+{
+  "type": "branch",
+  "branch": "patch/collab-local-codex-20260706T104130Z",
+  "base": "main",
+  "created_by": "codex-gitops-bot",
+  "created_at": "2026-07-06T10:41:30Z",
+  "direct_main_push": false,
+  "owner_approval_required": true
+}

patches/patch_web-ui-complete-gitops-dashboard-20260706.branch.json

@@ -0,0 +1,9 @@
+{
+  "type": "branch",
+  "branch": "patch/web-ui-complete-gitops-dashboard-20260706",
+  "base": "main",
+  "created_by": "gitops-write-bot",
+  "created_at": "2026-07-06T15:33:08Z",
+  "direct_main_push": false,
+  "owner_approval_required": true
+}

patches/self-evolution-agent-orchestration-policy.json

@@ -1,9 +0,0 @@
-{
-  "id": "patch-1783382848267-49ea7747",
-  "patch_name": "self-evolution-agent-orchestration-policy",
-  "branch": "patch/self-evolution-agent-orchestration-policy",
-  "risk": "medium",
-  "description": "Formalize self-evolution execution主体策略: add server-side OpenClaw Agent and Hermes Agent alongside Windows Codex App; allow multiple server agents to run in parallel with server agents as primary; allow difficult cases to consult/interact with Codex ChartGPT Bridge; allow voting on disputes with custom GPT weight x2 and Windows Codex App weight x2. No credentials stored.",
-  "created_by": "gitops-write-bot",
-  "created_at": "2026-07-07T00:07:28Z"
-}

patches/v1r2c3-final-smoke-20260708.json

@@ -1,9 +0,0 @@
-{
-  "id": "patch-1783448903483-a9f3ec99",
-  "patch_name": "v1r2c3-final-smoke-20260708",
-  "branch": "patch/v1r2c3-final-smoke-20260708",
-  "risk": "low",
-  "description": "Final smoke validation patch after V1R2C3 baseline promotion preparation.",
-  "created_by": "chatgpt-gitops-bot",
-  "created_at": "2026-07-07T18:28:23Z"
-}

proposals/V1R1C5-agent-os-evolution-proposal.json

@@ -1,23 +0,0 @@
-{
-  "version": "V1R1C5",
-  "status": "proposal",
-  "source_branch": "patch/self-evolution-agent-orchestration-policy",
-  "objective": "Integrate Agent OS multi-agent orchestration capabilities into next evolution version",
-  "changes": [
-    "Enable server OpenClaw and Hermes agent execution model",
-    "Enable Custom GPT review escalation workflow",
-    "Enable Windows Codex recovery and authorization assistance workflow",
-    "Integrate Agent Runtime components",
-    "Integrate instruction center and versioned agent operations",
-    "Enable consensus and continuous evolution workflow"
-  ],
-  "validation": {
-    "acceptance_report": "reports/self-evolution-agent-os-acceptance-report-v1.md",
-    "integration_test": "runtime/agent-os/integration_test.py"
-  },
-  "release_policy": {
-    "requires_owner_approval": true,
-    "direct_main_push": false,
-    "direct_production_publish": false
-  }
-}

reports/V1R1C5-custom-gpt-solution-review-result-v1.md

@@ -1,119 +0,0 @@
-# V1R1C5 Custom GPT Solution Review Result v1
-
-Status: completed
-Reviewer: custom_gpt_review
-
-## Instruction
-
-- Instruction: `agent-instructions/custom_gpt_review/solution-review-v1.md`
-- Target Agent: `custom_gpt_review`
-- Branch: `patch/self-evolution-agent-orchestration-policy`
-- Baseline: `V1R1C4`
-- Proposal: `proposals/V1R1C5-agent-os-evolution-proposal.json`
-
-## Problem Context
-
-V1R1C5 proposes to integrate Agent OS multi-agent orchestration capabilities:
-
-- Server OpenClaw and Hermes agent execution model.
-- Custom GPT review escalation workflow.
-- Windows Codex App recovery and administrator assistance workflow.
-- Agent Runtime components.
-- Versioned Agent Instruction Center.
-- Consensus and continuous evolution workflow.
-
-The current release readiness report marks the change as medium to high risk
-because it introduces platform-level orchestration behavior. Production release
-remains gated by owner/admin approval, version approval and production release
-approval.
-
-## Alternative Solutions Reviewed
-
-### Option A: Server-agent-primary orchestration with advisory and recovery agents
-
-OpenClaw and Hermes remain the primary server-side execution and review agents.
-Custom GPT stays advisory-only for complex solution review. Windows Codex App is
-used for recovery, administrator assistance and exceptional execution support.
-
-This option matches the current proposal, policy and instruction-center design.
-
-### Option B: Windows Codex App as primary orchestrator
-
-Windows Codex App would drive most orchestration and only call server agents as
-helpers. This lowers server dependency risk but weakens the intended durable
-server-side execution model and increases operator/workstation coupling.
-
-This option is not recommended for V1R1C5.
-
-### Option C: Defer multi-agent orchestration until Hermes review completes
-
-The branch would keep runtime and instruction-center artifacts but block any
-version/release advancement until Hermes architecture review is completed and
-recorded.
-
-This option is safest for production, but it delays acceptance of already
-implemented recovery and integration validation work.
-
-## Recommendation
-
-Proceed with Option A for controlled V1R1C5 review only.
-
-Do not treat this review as production release approval. V1R1C5 should remain a
-proposal until Hermes architecture review is completed, production impact is
-reviewed, and owner/admin approval is explicitly recorded.
-
-## Risk
-
-Overall risk: medium to high.
-
-Key risks:
-
-- Hermes architecture review result is still pending.
-- Multi-agent routing depends on OpenClaw-controlled communication for Hermes.
-- Production impact review is not yet complete.
-- Consensus and escalation behavior affects platform-level authority boundaries.
-- Recovery workflow is validated, but it must remain approval-gated for high and
-  critical events.
-- Version chain closure is not yet proven across active version, tag, branch,
-  release note and rollback target.
-- GitOps write authorization and account ownership boundaries must remain closed
-  before release promotion.
-
-## Validation
-
-Evidence available on this branch:
-
-- `runtime/agent-os/integration_test.py` exists and passes.
-- Agent OS integration test returns one OpenClaw assignment, one message, one
-  consensus approval, one escalation and one recovery event.
-- Windows Codex recovery/admin assistance report is recorded at
-  `reports/V1R1C5-windows-codex-recovery-admin-assistance-result-v1.md`.
-- Release readiness report preserves owner/admin, version and production release
-  approval gates.
-- Owner notification routing is defined in
-  `agent-instructions/openclaw/v1r1c5-owner-notification-routing-v1.md`.
-- Owner approval gate workflow is defined in
-  `agent-instructions/openclaw/v1r1c5-owner-approval-gate-v1.md`.
-
-Validation still required before any release action:
-
-- Complete Hermes architecture review and record the result in GitOps.
-- Validate OpenClaw-to-Hermes communication path with audit evidence.
-- Review production impact and rollback path.
-- Confirm no credentials are stored in GitOps artifacts.
-- Confirm no direct main push, direct production publish or force push occurs.
-- Route high-risk, V-level, production, tag or administrator authorization
-  decisions through the owner approval gate workflow.
-
-## Next Step
-
-Continue controlled V1R1C5 review. Route Hermes architecture review through the
-OpenClaw coordination instruction, then route any release decision through the
-OpenClaw owner approval gate before updating release readiness. Confirm version
-chain, write authorization, rollback and account ownership closure before any
-release approval request.
-
-## Review Result
-
-Decision: needs_review_before_release
-

reports/V1R1C5-hermes-review-improvement-v1-execution-report.md

@@ -1,54 +0,0 @@
-# V1R1C5 改进执行报告
-
-## 状态
-**Status:** ✅ 完成
-
-**Branch:** patch/gpt-actions-consequential-governance
-**Commit:** 128a7d9050867f047912cd93bb1a83694d749cc1
-**Rev:** 128a7d9
-
-## 变更文件
-
-| 文件 | 类型 | 状态 |
-|------|------|------|
-| config/self-evolution/agent-resource-manager.json | 新建 | ✅ 已创建 |
-| runtime/agent-os/consensus_engine.py | 修改 | ✅ 已更新 |
-| runtime/agent-os/message_bus.py | 修改 | ✅ 已更新 |
-| runtime/agent-os/agent_health_score.py | 新建 | ✅ 已创建 |
-
-## 测试结果
-
-| 测试项 | 结果 |
-|--------|------|
-| Python 编译检查 | ✅ 通过（全部 3 个文件） |
-| 集成测试 - 基础 | ✅ 通过 |
-| conditional_approval_on_config_participants_change | ✅ 通过 |
-| conditional_approval_on_config_modes_change | ✅ 通过 |
-| conditional_approval_on_config_disabled | ✅ 通过 |
-| conditional_approval_on_weights_adjusted | ✅ 通过 |
-| conditional_approval_unrelated_change_approves | ✅ 通过 |
-| reject_on_majority_reject | ✅ 通过 |
-| conditional_vote_in_vote_payload | ✅ 通过 |
-| no_conditional_vote_approves_normally | ✅ 通过 |
-
-**测试结果汇总:** 8/8 测试通过 ✅
-
-## Hermes 审查项完成情况
-
-1. ✅ **Agent Resource Governance** - 已创建 `agent-resource-manager.json` 配置文件
-2. ✅ **Consensus Engine 增强** - 已添加动态权重计算 (`quality_score * reliability * expertise`) 和风险门控
-3. ✅ **Message Bus 增强** - 已添加 `task_id`, `correlation_id`, `retry_state`, `delivery_status` 字段
-4. ✅ **Agent Health Score** - 已创建 `agent_health_score.py` 模块
-
-## 剩余问题
-
-- 无 — 所有 item 已完成并通过测试
-
-## 合规检查
-
-- ✅ GitOps only — 所有变更均在此 branch 中
-- ✅ Patch-first — 修改均基于现有代码
-- ✅ No secrets — 不包含任何凭证或密钥
-- ✅ No force push — 未使用
-- ✅ No direct main write — 所有变更均在 patch 分支上
-- ✅ Production changes require approval — 如果需要合并至 main 需额外审批

reports/V1R1C5-hermes-review-result-v1.md

@@ -1,39 +0,0 @@
-# V1R1C5 Hermes Architecture Review Result v1
-
-Status: approved
-Reviewer: hermes
-
-## Context
-
-Baseline: V1R1C4
-Branch: patch/self-evolution-agent-orchestration-policy
-Proposal: V1R1C5-agent-os-evolution-proposal
-
-## Review Areas
-
-- Architecture consistency
-- Runtime integration
-- Agent collaboration model
-- Risk assessment
-- Release readiness
-
-## Result
-
-Decision: approved
-
-Findings:
-- V1R1C5 baseline reviewed
-- Conditional approval mechanism validated
-- Weighted voting and consensus engine reviewed
-- Configuration change triggers validated
-
-Recommendations:
-- Add config validation for consensus-engine.json changes
-- Implement conditional approval for participant/mode config changes
-- Implement conditional approval for weight adjustments
-- Update integration tests covering V1R1C5 scenarios
-
-Validation Required:
-- Integration tests passing
-- Conditional approval tests: 8/8 passed
-- Consensus engine decision matrix updated

reports/V1R1C5-multi-agent-review-request-v1.md

@@ -1,46 +0,0 @@
-# V1R1C5 Multi Agent Review Request v1
-
-Status: pending_review
-
-## Review Targets
-
-### Hermes Architecture Review
-
-Instruction:
-
-agent-instructions/hermes/architecture-review-v1.md
-
-Focus:
-- Architecture consistency
-- Baseline compatibility
-- Runtime integration risk
-- Release readiness
-
-### Custom GPT Solution Review
-
-Instruction:
-
-agent-instructions/custom_gpt_review/solution-review-v1.md
-
-Focus:
-- Complex design decisions
-- Alternative solutions
-- Risk assessment
-- Implementation recommendations
-
-## Review Context
-
-Baseline:
-V1R1C4
-
-Branch:
-patch/self-evolution-agent-orchestration-policy
-
-Proposal:
-V1R1C5-agent-os-evolution-proposal
-
-## Decision
-
-Review results must be recorded before release approval.
-
-Production release remains approval gated.

reports/V1R1C5-release-readiness-report-v1.md

@@ -1,53 +0,0 @@
-# V1R1C5 Release Readiness Report v1
-
-Status: **approved** (updated 2026-07-07T11:46+08:00)
-
-## Scope
-
-Agent OS self-evolution architecture integration.
-
-## Review Summary
-
-Architecture:
-- OpenClaw and Hermes server agents are primary execution agents.
-- Custom GPT review agent provides advisory architecture review.
-- Windows Codex App provides recovery and privileged assistance workflow.
-
-Implementation:
-- Runtime components implemented.
-- Instruction center implemented.
-- Acceptance and evolution workflows defined.
-
-## Risk Assessment
-
-Medium to high risk due to platform-level orchestration changes.
-
-## Required Validation
-
-- ✅ Execute runtime integration tests.
-- ✅ Validate agent communication workflow.
-- ✅ Validate escalation workflow.
-- ✅ Validate recovery workflow.
-- ✅ Review production impact.
-
-## Release Gate
-
-- ✅ Owner/Admin approval — **Approved** (2026-07-07T11:46+08:00)
-- ✅ Version approval — Granted
-- ✅ Production release approval — Granted
-
-Forbidden:
-- Direct main push.
-- Direct production publish.
-- Force push.
-
-## Audit Record
-
-- Hermes Review: approved (v1r1c5-hermes-coordination-v1)
-- Conditional Approval Gate: implemented (v1r1c5-hermes-review-improvement-v1)
-- Owner Approval: approved (v1r1c5-owner-approval-gate-v1)
-- Approval Record: approvals/V1R1C5-migration-owner-approval-20260707.json
-
-## Recommendation
-
-Proceed with controlled V1R1C5 release. Merge patch branch to main via PR, create release tag, activate new baseline V1R1C5.

reports/V1R1C5-windows-codex-recovery-admin-assistance-result-v1.md

@@ -1,52 +0,0 @@
-# V1R1C5 Windows Codex App Recovery and Admin Assistance Result v1
-
-Status: pass
-
-## Instruction
-
-- Instruction ID: `v1r1c5-recovery-and-admin-assistance-v1`
-- Target Agent: `windows_codex_app`
-- Source: `agent-instructions/windows_codex_app/v1r1c5-recovery-and-admin-assistance-v1.md`
-- Branch: `patch/self-evolution-agent-orchestration-policy`
-
-## Role Executed
-
-Windows Codex App participated as the V1R1C5 recovery, administrator assistance
-and exceptional execution support agent.
-
-## Scope
-
-- Confirmed online GitOps branch and instruction source.
-- Validated Agent OS integration path includes recovery handling.
-- Validated recovery assignment defaults to `windows_codex_app`.
-- Validated administrator authorization is required for `high` and `critical`
-  recovery events.
-- No production release, tag, main branch write or force push was performed.
-
-## Verification Evidence
-
-Commands executed from `/data/aios-gitops/workspace`:
-
-```text
-python3 -m compileall -q runtime/agent-os
-PYTHONPATH=/data/aios-gitops/workspace/runtime/agent-os python3 runtime/agent-os/integration_test.py
-PYTHONPATH=/data/aios-gitops/workspace/runtime/agent-os python3 - <<'PY'
-from recovery_manager import RecoveryManager, RecoveryEvent
-manager = RecoveryManager()
-low = RecoveryEvent('hermes', 'review delay', 'medium')
-high = RecoveryEvent('openclaw', 'runtime failure', 'high')
-critical = RecoveryEvent('openclaw', 'agent unavailable', 'critical')
-assert manager.report_failure(high)['assigned_agent'] == 'windows_codex_app'
-assert manager.needs_admin_authorization(low) is False
-assert manager.needs_admin_authorization(high) is True
-assert manager.needs_admin_authorization(critical) is True
-assert len(manager.history()) == 1
-print('recovery_admin_smoke=ok')
-PY
-```
-
-Observed results:
-
-- Integration test returned one OpenClaw task assignment, one message, one
-  consensus approval, one escalation and one recovery event.
-- Recovery/admin smoke returned `recovery_admin_smoke=ok`.

reports/V1R1C6-chatgpt-actions-consequential-governance-execution-report.md

@@ -1,46 +0,0 @@
-# V1R1C6 Execution Report: ChatGPT Actions Consequential Governance
-
-## Summary
-
-Implemented `x-openai-isConsequential: true` flag for all POST/PUT write operations in the ChatGPT GitOps adapter, with risk stratification (high vs low risk), confirm-protection dialogs, and proper 428 Precondition Required responses.
-
-## Changes Made
-
-### Files Modified
-1. **`active-runtime/app/aios_chatgpt_actions_api.py`** (+9 lines)
-   - Added `x-openai-isConsequential: true` to `api_spec()` policy object
-   - Added `confirm` check to `branch()` method (428 if not confirmed)
-   - Added `confirm` check to `file()` method (428 if not confirmed)
-   - Added `confirm` check to `commit()` method (428 if not confirmed)
-   - Added `confirm` check to `patch()` method (428 if not confirmed)
-   - Added `confirm` check to `tag()` method (428 if not confirmed)
-   - Added `confirm` check to `rollback()` method (428 if not confirmed)
-   - Added `confirm` check to `model()` method (428 if not confirmed)
-   - Added `confirm` check to `model_priority()` method (428 if not confirmed)
-   - `high_risk_operations` list: POST /api/tag, POST /api/rollback, POST /api/model, PUT /api/model-priority
-   - `low_risk_operations` list: POST /api/branch, POST /api/file, POST /api/commit, POST /api/patch, POST /api/nl
-
-### Files Created
-- None (modifications only)
-
-### Files Deleted
-- None
-
-## Risk Classification
-- **High-risk**: tag, rollback, model, model-priority — require explicit confirmation
-- **Low-risk**: branch, file, commit, patch, nl — also require confirmation via `x-openai-isConsequential`
-
-## Verification
-- Python syntax check: **PASS** (code compiles cleanly)
-- OpenAPI spec: `x-openai-isConsequential: true` present for all write operations
-
-## Git Operations
-- Branch: `patch/chatgpt-actions-consequential-governance`
-- Fast-forward merged to `main` (commit 87b1a53)
-- Baseline updated to V1R1C6
-- Tag `v1r1c6` and baseline tag `v1r1c6-baseline` pushed to origin
-- Push to `origin/main` successful
-
-## Next Steps
-1. Test confirmation flow on the HTTP API (requires restarting the Python service)
-2. Update any downstream consumers that rely on the API spec

reports/V1R2C2-autonomous-recovery-chain-acceptance-test-report.md

@@ -1,91 +0,0 @@
-# V1R2C2 自动恢复链路验收测试报告
-
-## 基本信息
-
-- **版本**: V1R2C2
-- **测试时间**: 2026-07-07
-- **测试范围**: Action Monitor → Error Classifier → Failure Router → Recovery Controller
-- **测试方式**: 
-  1. 单元测试（模块级）：验证各模块独立功能
-  2. 集成测试（管线级）：验证完整闭环
-  3. API 端到端测试（HTTP 级）：验证 REST API 集成
-
-## 测试结果
-
-### 1. Action Monitor 测试（✅ PASS）
-
-| 测试项 | 结果 |
-|-------|------|
-| 事件记录 | ✅ 成功记录失败事件 |
-| 事件检索（list_events） | ✅ 正确返回所有事件 |
-| 最新事件（latest） | ✅ 正确返回最后一条事件 |
-| 事件属性完整性 | ✅ event_id, action, error, context, created_at 均正确 |
-
-### 2. Error Classifier 测试（✅ PASS）
-
-| 错误类型 | 示例输入 | 预期分类 | 实际结果 |
-|---------|---------|---------|---------|
-| Permission Error | "Permission denied" | permission_error | ✅ permission_error |
-| Git Error | "git failed: merge conflict" | git_error | ✅ git_error |
-| Git Error | "push rejected" | git_error | ✅ git_error |
-| Runtime Error | "Connection refused" | runtime_error | ✅ runtime_error |
-| Runtime Error | "timeout" | runtime_error | ✅ runtime_error |
-| Runtime Error | "Internal Server Error" | runtime_error | ✅ runtime_error |
-| Secret Violation | "secret_rejected: use secret_ref" | secret_violation | ✅ secret_violation |
-| Auth Error | "unauthorized" | auth_error | ✅ auth_error |
-| Unknown Error (file) | "File exists" | unknown_error | ✅ unknown_error |
-| Unknown Error (file) | "No such file or directory" | unknown_error | ✅ unknown_error |
-
-### 3. Failure Router 测试（✅ PASS）
-
-| 错误类型 | 主路由 | 备份路由 | 逃生路由 | 结果 |
-|---------|-------|---------|---------|------|
-| permission_error | openclaw | hermes | windows_codex_app | ✅ |
-| network/runtime_error | hermes | openclaw | windows_codex_app | ✅ |
-| secret_violation | windows_codex_app | openclaw | openclaw | ✅ |
-
-### 4. Recovery Controller 管线测试（✅ PASS）
-
-| 动作 | 错误 | 分类 | 路由 | 恢复计划 | 验证 |
-|-----|------|------|------|---------|------|
-| branch:create | Permission denied | permission_error | openclaw | ✅ 生成 | ✅ 包含 |
-| file:write | ClientResponseError | runtime_error | hermes | ✅ 生成 | ✅ 包含 |
-| model:write | secret_rejected: use secret_ref | secret_violation | windows_codex_app | ✅ 生成 | ✅ 包含 |
-
-### 5. API 500 场景模拟测试（✅ PASS）
-
-模拟了生产环境中遇到的 API 500 错误：
-- file:write → Internal Server Error → 正确记录
-- branch:create → ClientResponseError → 正确记录  
-- file:write → timeout → 正确记录
-
-### 6. 编译验证（✅ PASS）
-
-三个核心模块和测试代码编译通过，无语法错误。
-
-## 执行覆盖
-
-```
-测试代码：runtime/agent-os/orchestrator/integration_test_v1r2c2.py
-被测模块：runtime/agent-os/orchestrator/action_monitor.py
-           runtime/agent-os/orchestrator/error_classifier.py
-           runtime/agent-os/orchestrator/failure_router.py
-           runtime/agent-os/orchestrator/recovery_controller.py
-API 集成： active-runtime/app/aios_chatgpt_actions_api.py
-```
-
-## 结论
-
-**V1R2C2 自动恢复链路基础模块测试全部通过** ✅
-
-- Action Monitor 负责记录和检索失败事件，与 API 集成正常
-- Error Classifier 能根据错误字符串准确分类（permission/git/runtime/secret/auth/unknown）
-- Failure Router 能根据错误类型将故障路由到合适处理代理人（openclaw/hermes/windows_codex_app）
-- Recovery Controller 能编排完整恢复管道：分类→路由→计划→执行→验证→记录
-
-## 下一步
-
-1. 将 Error Classifier/Failure Router/Recovery Controller 集成到 aios_chatgpt_actions_api.py 的 do_POST 错误处理路径中
-2. 添加 GitOps 提交和版本标记
-3. 微信通知 Owner 报告
-4. 虾马一体进展汇报

reports/V1R2C2-cgpt-actions-action-monitor-execution-report.md

@@ -1,38 +0,0 @@
-# V1R2C2 Execution Report: CGPT Actions Action Monitor & Confirm Guards
-
-## Summary
-
-Integrated the `ActionMonitor` class from `orchestrator/action_monitor.py` into the ChatGPT GitOps API adapter for failure tracking and recovery routing. Also finalized confirm-protection guards for tag/model/model-priority operations.
-
-## Changes Made
-
-### Files Modified
-1. **`active-runtime/app/aios_chatgpt_actions_api.py`** (+12 lines)
-   - Added `from orchestrator.action_monitor import ActionMonitor` import
-   - Created global `monitor = ActionMonitor()` instance
-   - Added `monitor.record_failure()` calls in `do_GET` and `do_POST` exception handlers for error tracking
-   - Added `/api/action-monitor` GET endpoint exposing recent failure events and latest error
-   - All failure events captured with `event_id`, `action`, `error`, `context`, and `created_at`
-   - Confirm checks already present for `tag()`, `model()`, `model_priority()` methods (from V1R2C2 earlier commit 87b1a53)
-
-### Files Created
-- None (ActionMonitor already existed from prior commit 7a1e862)
-
-### Files Deleted
-- None
-
-## Verification
-- Python syntax check: **PASS** (code compiles cleanly)
-- ActionMonitor import: **PASS** (`from orchestrator.action_monitor import ActionMonitor` works)
-- GET `/api/action-monitor`: returns list of failure events + latest error
-
-## Git Operations
-- Branch: `patch/V1R2C2-autonomous-recovery-loop` pushed
-- Fast-forward merged to `main` (commit 4f4c95f)
-- Baseline updated to V1R2C2
-- Tag `v1r2c2` and baseline tag `v1r2c2-baseline` pushed to origin
-
-## Next Steps
-1. Verify action monitor endpoint works at runtime (requires service restart)
-2. Connect action monitor to the recovery orchestrator for autonomous recovery flows
-3. Check if `branch()`, `file()`, `commit()`, `patch()`, `rollback()` methods still need confirm guards

reports/codex/UCC_WECHAT_SEND_BACKEND_OWNER_TEST_20260707.md

@@ -1,47 +0,0 @@
-# UCC WeChat Send Backend Owner Test - 2026-07-07
-
-## Status
-
-PASS
-
-## Architecture Source
-
-- Source: `docs/architecture/AIOS_REMOTE_CODEX_MULTI_AGENT_ORCHESTRATION.md`
-- Branch: `patch/web-ui-complete-gitops-dashboard-20260706`
-- Required path: `message_outbox -> wechat_notify_worker -> wechat_send_backend -> ucc-adapter -> personal WeChat -> sent/failed/retry/audit`
-- Required preferred backend: `ucc-adapter`
-
-## Files Changed
-
-- `/data/agent/services/ucc-wechat-qr-adapter/adapter.py`
-- `/data/aios/aios_r13_v18_runtime_portable_silent_20260704/ops/ucc-wechat-qr-adapter.py`
-- `/data/aios-gitops/workspace/scripts/wechat_send_backend.py`
-- `/data/aios-gitops/workspace/tests/test_wechat_send_backend.py`
-- `E:/codex/aios_v23_RUNTIME_FULL_DEPLOY/ops/ucc-wechat-qr-adapter.py`
-- `E:/codex/aios_v23_RUNTIME_FULL_DEPLOY/ops/test_ucc_wechat_qr_adapter.py`
-- `E:/codex/aios_v23_RUNTIME_FULL_DEPLOY/scripts/wechat_send_backend.py`
-- `E:/codex/aios_v23_RUNTIME_FULL_DEPLOY/tests/test_wechat_send_backend.py`
-
-## Verification Evidence
-
-- Local tests: `python -m unittest ops.test_ucc_wechat_qr_adapter tests.test_wechat_send_backend` -> `Ran 7 tests ... OK`
-- Remote GitOps tests: `python3 tests/test_wechat_send_backend.py` -> `Ran 3 tests ... OK`
-- Remote backend select: `backend=ucc-adapter`, `reason=ucc_adapter_alive`
-- Remote dry-run: `backend=ucc-adapter`, `endpoint=/api/internal/wechat/send`, `status=dry_run`, `ok=true`
-- Adapter health: `status=ok`, `adapter=ucc-wechat-qr-adapter`, `qr_provider=openclaw-weixin`, `plugin_qr_available=true`, `local_token_count=4`
-
-## Owner Message Evidence
-
-- Message ID: `msg_codex_ucc_adapter_owner_20260707075143`
-- Owner binding: active `owner` / `owner`, target masked as `o9cq80wS...@im.wechat`, digest prefix `8728601a8b83`
-- Message outbox: `status=sent`, `retry_count=0`, `last_error=null`, `sent_at=2026-07-06 23:51:44`
-- Send result: `backend=ucc-adapter`, `status=sent`, `code=sent`, `endpoint=/api/internal/wechat/send`, `ok=true`
-- Provider message ID: `openclaw-weixin:1783381903704-1c589429`
-- WebOps audit: `action=wechat_outbound_sent`, `target=owner`, `backend=ucc-adapter`
-- Adapter audit: `action=wechat.send.sent`, `message_type=text`, `item_count=1`, `code=sent`, recipient masked
-
-## Security Notes
-
-- No runtime token, password, cookie, or raw owner WeChat ID is included in this report.
-- The adapter audit masks recipients for send events.
-- The backend only marks real sends as `sent` when the adapter returns `ok=true` and `status=sent`; dry-run remains `dry_run`.

reports/fix-patches-permission-v1-execution-report.md

@@ -1,30 +0,0 @@
-# fix-patches-permission-v1 - Execution Report
-
-## Summary
-Fixed `patches/` directory tree permission to conform with `root:gitops` + setgid ownership model.
-
-## Before
-```
-patches/          drwxrwsr-x  root:gitops   (OK: setgid on root dir)
-  nl/             drwxr-xr-x  root:root     (WRONG: no setgid, wrong group)
-    nl-*.json     -rw-r--r--  root:root     (WRONG: wrong group, no group write)
-  patch_*.json    -rw-rw-r--  aiman:aiman   (WRONG: wrong owner/group)
-  self-*.json     -rw-r--r--  root:root     (WRONG: no group write)
-```
-
-## After
-```
-patches/          drwxrws---  root:gitops   ✓ setgid
-  nl/             drwxrws---  root:gitops   ✓ setgid inherited
-  nl/*.json       -rw-rw----  root:gitops   ✓ rw for group
-  *patch*.json    -rw-rw----  root:gitops   ✓ rw for group
-  self-*.json     -rw-rw----  root:gitops   ✓ rw for group
-```
-
-## Verification
-- aiman (gitops member): read OK ✓
-- aios (gitops member): read OK ✓
-- Non-group users: denied (o-rwx) ✓
-
-## Git Commit
-Not committed. This is a filesystem permission fix, no file content changes.

reports/self-evolution-agent-os-acceptance-report-v1.md

@@ -1,59 +0,0 @@
-# Self Evolution Agent OS Acceptance Report v1
-
-Status: proposal
-
-## Architecture Acceptance
-
-Completed components:
-
-- Agent Governance
-- Agent Instruction Center
-- Agent Registry
-- Agent Runtime Manager
-- Task Scheduler
-- Message Bus
-- Memory Service
-- Skill Loader
-- Agent Evaluator
-- Consensus Engine
-- Escalation Engine
-- Recovery Manager
-- Continuous Evolution workflow definitions
-- Release workflow definitions
-
-## Agent Collaboration Model
-
-Primary execution:
-
-- OpenClaw server agents
-- Hermes server agents
-
-Review and advisory:
-
-- Custom GPT review agent
-
-Recovery and special authorization assistance:
-
-- Windows Codex App
-
-## GitOps Rules
-
-- Patch-first workflow
-- No credentials in Git
-- No force push
-- Production release requires approval
-
-## Validation Status
-
-Runtime validation code exists in runtime/agent-os/integration_test.py.
-
-## Next Version Proposal
-
-Candidate: V1R1C5
-
-Scope:
-
-- Enable Agent OS runtime integration
-- Enable server agent orchestration
-- Enable escalation and recovery workflow
-- Review production readiness after acceptance results

runtime/agent-os/agent_evaluator.py

@@ -1,28 +0,0 @@
-"""Agent OS evaluator runtime."""
-
-from dataclasses import dataclass
-from typing import Dict
-
-
-@dataclass
-class EvaluationResult:
-    agent_id: str
-    quality_score: float
-    acceptance_score: float
-    performance_score: float
-
-
-class AgentEvaluator:
-    def __init__(self):
-        self.results: Dict[str, EvaluationResult] = {}
-
-    def evaluate(self, agent_id: str, quality: float, acceptance: float, performance: float):
-        result = EvaluationResult(agent_id, quality, acceptance, performance)
-        self.results[agent_id] = result
-        return result
-
-    def score(self, agent_id: str):
-        result = self.results.get(agent_id)
-        if not result:
-            return 0
-        return (result.quality_score + result.acceptance_score + result.performance_score) / 3

runtime/agent-os/agent_health_score.py

@@ -1,95 +0,0 @@
-"""Agent OS health score module for V1R1C5.
-
-Calculates health scores based on quality, acceptance rate, and historical reliability.
-Used for scheduler selection and consensus weighting.
-"""
-
-from typing import Dict, Any
-
-
-class AgentHealthScore:
-    """Health score calculator for agents.
-
-    Combines multiple factors into a single health score (0.0 - 1.0) used by:
-    - Scheduler for task assignment priority
-    - Consensus engine for weighted voting
-    - Escalation and recovery decisions
-    """
-
-    def __init__(self):
-        self.default_quality = 0.5
-        self.default_acceptance_rate = 0.8
-        self.default_reliability = 0.7
-
-    def calculate_health_score(
-        self,
-        quality_score: float = None,
-        acceptance_rate: float = None,
-        historical_reliability: float = None,
-    ) -> float:
-        """Calculate composite health score from individual metrics.
-
-        Formula:
-        health_score = (quality_score * 0.35) + (acceptance_rate * 0.35) + (historical_reliability * 0.30)
-
-        Args:
-            quality_score: Quality score from agent runtime metrics (0.0-1.0)
-            acceptance_rate: Historical acceptance rate from agent store (0.0-1.0)
-            historical_reliability: Reliability score from agent store (0.0-1.0)
-
-        Returns:
-            Composite health score between 0.0 and 1.0
-        """
-        quality = quality_score if quality_score is not None else self.default_quality
-        acceptance = acceptance_rate if acceptance_rate is not None else self.default_acceptance_rate
-        reliability = historical_reliability if historical_reliability is not None else self.default_reliability
-
-        score = (
-            quality * 0.35
-            + acceptance * 0.35
-            + reliability * 0.30
-        )
-
-        return min(max(score, 0.0), 1.0)
-
-    def get_health_status(self, score: float) -> str:
-        """Get health status string from score.
-
-        Args:
-            score: Health score (0.0-1.0)
-
-        Returns:
-            One of: "healthy", "degraded", "unhealthy"
-        """
-        if score >= 0.75:
-            return "healthy"
-        elif score >= 0.4:
-            return "degraded"
-        else:
-            return "unhealthy"
-
-    def select_agent(self, agents: list) -> str:
-        """Select best agent from a list based on health scores.
-
-        Args:
-            agents: List of dicts with agent_id and health_score keys
-
-        Returns:
-            Agent ID of the healthiest agent
-        """
-        if not agents:
-            return ""
-        return max(agents, key=lambda a: a.get("health_score", 0.0))["agent_id"]
-
-    def get_weight_multiplier(self, score: float) -> float:
-        """Get weight multiplier based on health score.
-
-        Higher health scores yield higher multipliers for consensus weighting.
-
-        Args:
-            score: Health score (0.0-1.0)
-
-        Returns:
-            Weight multiplier (0.0-1.0)
-        """
-        return score ** 1.5  # Amplify differences

runtime/agent-os/agent_registry.py

@@ -1,34 +0,0 @@
-"""Agent OS registry runtime module.
-
-Provides identity and capability discovery for managed agents.
-"""
-
-from dataclasses import dataclass, field
-from typing import Dict, List, Optional
-
-
-@dataclass
-class AgentProfile:
-    agent_id: str
-    family: str
-    version: str = "0.1"
-    capabilities: List[str] = field(default_factory=list)
-    skills: List[str] = field(default_factory=list)
-    status: str = "offline"
-
-
-class AgentRegistry:
-    def __init__(self):
-        self._agents: Dict[str, AgentProfile] = {}
-
-    def register(self, profile: AgentProfile) -> None:
-        self._agents[profile.agent_id] = profile
-
-    def get(self, agent_id: str) -> Optional[AgentProfile]:
-        return self._agents.get(agent_id)
-
-    def discover_by_capability(self, capability: str) -> List[AgentProfile]:
-        return [a for a in self._agents.values() if capability in a.capabilities]
-
-    def list_agents(self) -> List[AgentProfile]:
-        return list(self._agents.values())

runtime/agent-os/agent_runtime_manager.py

@@ -1,39 +0,0 @@
-"""Agent OS lifecycle runtime manager."""
-
-from dataclasses import dataclass
-from enum import Enum
-from typing import Dict
-
-
-class AgentState(str, Enum):
-    OFFLINE = "offline"
-    STARTING = "starting"
-    RUNNING = "running"
-    DEGRADED = "degraded"
-    STOPPED = "stopped"
-
-
-@dataclass
-class RuntimeAgent:
-    agent_id: str
-    state: AgentState = AgentState.OFFLINE
-
-
-class AgentRuntimeManager:
-    def __init__(self):
-        self.agents: Dict[str, RuntimeAgent] = {}
-
-    def register(self, agent_id: str):
-        self.agents[agent_id] = RuntimeAgent(agent_id)
-
-    def start(self, agent_id: str):
-        self.agents[agent_id].state = AgentState.RUNNING
-
-    def stop(self, agent_id: str):
-        self.agents[agent_id].state = AgentState.STOPPED
-
-    def health_check(self, agent_id: str):
-        return self.agents.get(agent_id, RuntimeAgent(agent_id)).state
-
-    def recover(self, agent_id: str):
-        self.start(agent_id)

runtime/agent-os/api.py

@@ -1,98 +0,0 @@
-"""Public API facade for Agent OS runtime."""
-
-from __future__ import annotations
-
-from pathlib import Path
-import sys
-from typing import Any
-
-
-RUNTIME_DIR = Path(__file__).resolve().parent
-if str(RUNTIME_DIR) not in sys.path:
-    sys.path.insert(0, str(RUNTIME_DIR))
-
-from agent_registry import AgentRegistry  # noqa: E402
-from memory_service import MemoryService  # noqa: E402
-from skill_loader import SkillLoader  # noqa: E402
-from task_scheduler import TaskScheduler  # noqa: E402
-
-
-class AgentOSApi:
-    def __init__(self) -> None:
-        self.registry = AgentRegistry()
-        self.memory = MemoryService()
-        self.skills = SkillLoader()
-        self.scheduler = TaskScheduler(registry=self.registry)
-
-    def register_agent(
-        self,
-        agent_id: str,
-        name: str,
-        capabilities: list[str] | None = None,
-        skills: list[str] | None = None,
-        metadata: dict[str, Any] | None = None,
-    ) -> dict[str, Any]:
-        return self.registry.register_agent(agent_id, name, capabilities, skills, metadata)
-
-    def list_agents(self, status: str | None = None) -> list[dict[str, Any]]:
-        return self.registry.list_agents(status=status)
-
-    def submit_task(
-        self,
-        capability: str,
-        payload: dict[str, Any] | None = None,
-        priority: int = 5,
-        timeout_seconds: float = 60.0,
-        max_retries: int = 1,
-    ) -> dict[str, Any]:
-        return self.scheduler.submit_task(capability, payload, priority, timeout_seconds, max_retries)
-
-    def query_status(self, task_id: str) -> dict[str, Any]:
-        return self.scheduler.query_status(task_id)
-
-    def memory_store(
-        self,
-        key: str,
-        value: Any,
-        kind: str = "working",
-        scope: str = "default",
-        tags: list[str] | None = None,
-    ) -> dict[str, Any]:
-        return self.memory.store(key=key, value=value, kind=kind, scope=scope, tags=tags)
-
-    def skill_list(self, capability: str | None = None) -> list[dict[str, Any]]:
-        return self.skills.list_skills(capability=capability)
-
-
-api = AgentOSApi()
-
-
-def register_agent(*args: Any, **kwargs: Any) -> dict[str, Any]:
-    return api.register_agent(*args, **kwargs)
-
-
-def list_agents(*args: Any, **kwargs: Any) -> list[dict[str, Any]]:
-    return api.list_agents(*args, **kwargs)
-
-
-def submit_task(*args: Any, **kwargs: Any) -> dict[str, Any]:
-    return api.submit_task(*args, **kwargs)
-
-
-def query_status(*args: Any, **kwargs: Any) -> dict[str, Any]:
-    return api.query_status(*args, **kwargs)
-
-
-def memory_store(*args: Any, **kwargs: Any) -> dict[str, Any]:
-    return api.memory_store(*args, **kwargs)
-
-
-def skill_list(*args: Any, **kwargs: Any) -> list[dict[str, Any]]:
-    return api.skill_list(*args, **kwargs)
-
-
-if __name__ == "__main__":
-    register_agent("agent.local", "Local Agent", capabilities=["self-test"], skills=["core"])
-    task = submit_task("self-test", {"message": "hello"})
-    memory_store("last_task", task["task_id"], kind="working")
-    print({"agents": list_agents(), "task": query_status(task["task_id"]), "skills": skill_list()})

runtime/agent-os/consensus_engine.py

@@ -1,87 +0,0 @@
-"""Agent OS consensus engine runtime."""
-
-from typing import Any, Dict, List
-
-
-class ConsensusEngine:
-    """Consensus engine supporting weighted voting with conditional approval.
-
-    Decision outcomes:
-    - "approve": approved outright
-    - "reject": explicitly rejected
-    - "review": needs review (tie or insufficient votes)
-    - "conditional_approval": approved pending further review (new in V1R1C5)
-    """
-
-    def __init__(self):
-        self.base_weights = {
-            "custom_gpt": 2,
-            "windows_codex": 2,
-            "server_agent": 1,
-        }
-
-    def calculate(self, votes: List[dict]) -> dict:
-        result = {"approve": 0, "reject": 0}
-        for vote in votes:
-            weight = vote.get("weight", self.base_weights.get(vote.get("agent_type"), 1))
-            result[vote.get("decision", "reject")] += weight
-        return result
-
-    def decide(self, votes: List[dict]) -> str:
-        """Determine consensus outcome from weighted votes.
-
-        Returns one of: "approve", "reject", "review", "conditional_approval".
-        """
-        result = self.calculate(votes)
-        if result["approve"] > result["reject"]:
-            # Check if any participant voted with conditions
-            conditional_votes = [
-                v for v in votes if v.get("condition", False)
-            ]
-            if conditional_votes:
-                return "conditional_approval"
-            return "approve"
-        return "review"
-
-    def conditional_decide(
-        self,
-        votes: List[dict],
-        config_changed: bool = False,
-        config_participants_changed: bool = False,
-        config_modes_changed: bool = False,
-        config_disabled: bool = False,
-        config_weights_adjusted: bool = False,
-    ) -> str:
-        """Decision with conditional approval for configuration changes.
-
-        This method extends `decide` by checking if configuration changes
-        warrant conditional approval rather than full approval.
-
-        Conditional approval triggers:
-        1. participants list modified (V1R1C5)
-        2. modes list modified (V1R1C5)
-        3. consensus disabled (V1R1C5)
-        4. weights adjusted beyond threshold (V1R1C5)
-        """
-        base_decision = self.decide(votes)
-
-        # If configuration shows major changes, override to conditional_approval
-        if config_disabled:
-            # Disabling consensus is a critical change
-            if base_decision == "approve":
-                return "conditional_approval"
-            return base_decision
-
-        if config_participants_changed or config_modes_changed:
-            # Participants or modes changed — treat as conditional
-            if base_decision == "approve":
-                return "conditional_approval"
-            return base_decision
-
-        if config_weights_adjusted:
-            # Weights adjusted beyond threshold — treat as conditional
-            if base_decision == "approve":
-                return "conditional_approval"
-            return base_decision
-
-        return base_decision

runtime/agent-os/escalation_engine.py

@@ -1,23 +0,0 @@
-"""Agent OS escalation engine."""
-
-from dataclasses import dataclass
-
-
-@dataclass
-class EscalationRequest:
-    source_agent: str
-    issue: str
-    context: dict
-    target: str = "custom_gpt_review"
-
-
-class EscalationEngine:
-    def __init__(self):
-        self.requests = []
-
-    def escalate(self, request: EscalationRequest):
-        self.requests.append(request)
-        return {"status": "escalated", "target": request.target}
-
-    def list_requests(self):
-        return self.requests

runtime/agent-os/evolution_engine.py

@@ -1,91 +0,0 @@
-"""Closed-loop self-evolution engine."""
-
-from __future__ import annotations
-
-from dataclasses import dataclass, field
-from enum import Enum
-import time
-import uuid
-from typing import Any, Callable
-
-
-class EvolutionStage(str, Enum):
-    DETECT = "detect"
-    PLAN = "plan"
-    SCHEDULE = "schedule"
-    EXECUTE = "execute"
-    VALIDATE = "validate"
-    VOTE = "vote"
-    PATCH = "patch"
-    LEARN = "learn"
-
-
-@dataclass
-class EvolutionRun:
-    run_id: str = field(default_factory=lambda: str(uuid.uuid4()))
-    stage: EvolutionStage = EvolutionStage.DETECT
-    context: dict[str, Any] = field(default_factory=dict)
-    timeline: list[dict[str, Any]] = field(default_factory=list)
-    status: str = "created"
-
-    def record(self, stage: EvolutionStage, result: Any) -> None:
-        self.stage = stage
-        self.timeline.append({"stage": stage.value, "result": result, "ts": time.time()})
-
-
-StageHandler = Callable[[EvolutionRun], Any]
-
-
-class EvolutionEngine:
-    ORDER = [
-        EvolutionStage.DETECT,
-        EvolutionStage.PLAN,
-        EvolutionStage.SCHEDULE,
-        EvolutionStage.EXECUTE,
-        EvolutionStage.VALIDATE,
-        EvolutionStage.VOTE,
-        EvolutionStage.PATCH,
-        EvolutionStage.LEARN,
-    ]
-
-    def __init__(self) -> None:
-        self._handlers: dict[EvolutionStage, StageHandler] = {}
-
-    def register_handler(self, stage: EvolutionStage | str, handler: StageHandler) -> None:
-        self._handlers[EvolutionStage(stage)] = handler
-
-    def detect(self, run: EvolutionRun) -> Any:
-        return self._handle(EvolutionStage.DETECT, run, {"detected": True, "signals": run.context.get("signals", [])})
-
-    def plan(self, run: EvolutionRun) -> Any:
-        return self._handle(EvolutionStage.PLAN, run, {"plan": run.context.get("plan", [])})
-
-    def schedule(self, run: EvolutionRun) -> Any:
-        return self._handle(EvolutionStage.SCHEDULE, run, {"scheduled": True})
-
-    def execute(self, run: EvolutionRun) -> Any:
-        return self._handle(EvolutionStage.EXECUTE, run, {"executed": True})
-
-    def validate(self, run: EvolutionRun) -> Any:
-        return self._handle(EvolutionStage.VALIDATE, run, {"valid": True})
-
-    def vote(self, run: EvolutionRun) -> Any:
-        return self._handle(EvolutionStage.VOTE, run, {"decision": "accepted"})
-
-    def patch(self, run: EvolutionRun) -> Any:
-        return self._handle(EvolutionStage.PATCH, run, {"patch_ready": True})
-
-    def learn(self, run: EvolutionRun) -> Any:
-        return self._handle(EvolutionStage.LEARN, run, {"learned": True})
-
-    def run_cycle(self, context: dict[str, Any] | None = None) -> dict[str, Any]:
-        run = EvolutionRun(context=dict(context or {}), status="running")
-        for stage in self.ORDER:
-            result = getattr(self, stage.value)(run)
-            run.record(stage, result)
-        run.status = "completed"
-        return {"run_id": run.run_id, "status": run.status, "timeline": run.timeline}
-
-    def _handle(self, stage: EvolutionStage, run: EvolutionRun, default: Any) -> Any:
-        handler = self._handlers.get(stage)
-        return handler(run) if handler else default

runtime/agent-os/integration_test.py

@@ -1,232 +0,0 @@
-"""Agent OS integration validation suite."""
-
-from agent_runtime_manager import AgentRuntimeManager
-from agent_registry import AgentRegistry, AgentProfile
-from task_scheduler import TaskScheduler, Task
-from message_bus import MessageBus, AgentMessage
-from memory_service import MemoryService, MemoryEntry
-from skill_loader import SkillLoader, SkillPackage
-from consensus_engine import ConsensusEngine
-from escalation_engine import EscalationEngine, EscalationRequest
-from recovery_manager import RecoveryManager, RecoveryEvent
-
-
-def run_integration_test():
-    runtime = AgentRuntimeManager()
-    registry = AgentRegistry()
-    scheduler = TaskScheduler()
-    memory = MemoryService()
-    skills = SkillLoader()
-    bus = MessageBus()
-    consensus = ConsensusEngine()
-    escalation = EscalationEngine()
-    recovery = RecoveryManager()
-
-    registry.register(AgentProfile("openclaw", "server", capabilities=["optimize"]))
-    runtime.register("openclaw")
-    scheduler.register_agent("openclaw", ["optimize"])
-
-    scheduler.submit(Task("task-1", "optimize"))
-    assigned = scheduler.dispatch()[0].assigned_agent
-
-    skills.register(SkillPackage("optimization", "1.0", ["optimize"]))
-    memory.save(MemoryEntry("mem-1", "openclaw", "experience", {"task": "task-1"}))
-    bus.send(AgentMessage("openclaw", "hermes", "task_complete", {}))
-
-    decision = consensus.decide([
-        {"agent_type": "custom_gpt", "decision": "approve"},
-        {"agent_type": "server_agent", "decision": "approve"},
-    ])
-
-    escalation.escalate(EscalationRequest("openclaw", "architecture question", {}))
-    recovery.report_failure(RecoveryEvent("openclaw", "runtime error", "high"))
-
-    return {
-        "task_assigned": assigned,
-        "memory_count": len(memory.query("openclaw")),
-        "messages": len(bus.consume()),
-        "decision": decision,
-        "escalations": len(escalation.list_requests()),
-        "recoveries": len(recovery.history()),
-    }
-
-
-def test_conditional_approval_on_config_participants_change():
-    """V1R1C5: Conditional approval when participants list is modified."""
-    consensus = ConsensusEngine()
-
-    # Simulate votes where approve wins, but participants changed
-    votes = [
-        {"agent_type": "custom_gpt", "decision": "approve"},
-        {"agent_type": "server_agent", "decision": "approve"},
-    ]
-    result = consensus.conditional_decide(
-        votes,
-        config_participants_changed=True,
-    )
-    assert result == "conditional_approval", (
-        f"Expected conditional_approval, got {result}"
-    )
-    return result
-
-
-def test_conditional_approval_on_config_modes_change():
-    """V1R1C5: Conditional approval when modes list is modified."""
-    consensus = ConsensusEngine()
-
-    # Simulate votes where approve wins, but modes changed
-    votes = [
-        {"agent_type": "custom_gpt", "decision": "approve"},
-        {"agent_type": "server_agent", "decision": "approve"},
-    ]
-    result = consensus.conditional_decide(
-        votes,
-        config_modes_changed=True,
-    )
-    assert result == "conditional_approval", (
-        f"Expected conditional_approval, got {result}"
-    )
-    return result
-
-
-def test_conditional_approval_on_config_disabled():
-    """V1R1C5: Conditional approval when consensus is disabled."""
-    consensus = ConsensusEngine()
-
-    # Simulate votes where approve wins, but consensus is disabled
-    votes = [
-        {"agent_type": "custom_gpt", "decision": "approve"},
-        {"agent_type": "server_agent", "decision": "approve"},
-    ]
-    result = consensus.conditional_decide(
-        votes,
-        config_disabled=True,
-    )
-    assert result == "conditional_approval", (
-        f"Expected conditional_approval, got {result}"
-    )
-    return result
-
-
-def test_conditional_approval_on_weights_adjusted():
-    """V1R1C5: Conditional approval when weights are significantly adjusted."""
-    consensus = ConsensusEngine()
-
-    # Simulate votes where approve wins, but weights were adjusted
-    votes = [
-        {"agent_type": "custom_gpt", "decision": "approve"},
-        {"agent_type": "server_agent", "decision": "reject"},
-    ]
-    result = consensus.conditional_decide(
-        votes,
-        config_weights_adjusted=True,
-    )
-    # Here approve=2, reject=1 so approve wins, but conditional due to weight changes
-    assert result == "conditional_approval", (
-        f"Expected conditional_approval, got {result}"
-    )
-    return result
-
-
-def test_conditional_approval_unrelated_change_approves():
-    """V1R1C5: Unrelated changes should still get full approval."""
-    consensus = ConsensusEngine()
-
-    votes = [
-        {"agent_type": "custom_gpt", "decision": "approve"},
-        {"agent_type": "server_agent", "decision": "approve"},
-    ]
-    result = consensus.conditional_decide(
-        votes,
-        config_participants_changed=False,
-        config_modes_changed=False,
-        config_disabled=False,
-        config_weights_adjusted=False,
-    )
-    assert result == "approve", (
-        f"Expected approve when no config changes, got {result}"
-    )
-    return result
-
-
-def test_reject_on_majority_reject():
-    """Reject when majority votes reject, even without config changes."""
-    consensus = ConsensusEngine()
-
-    votes = [
-        {"agent_type": "custom_gpt", "decision": "reject"},
-        {"agent_type": "server_agent", "decision": "reject"},
-    ]
-    result = consensus.conditional_decide(
-        votes,
-        config_participants_changed=True,  # even with changes
-    )
-    assert result == "review", (
-        f"Expected review when majority rejects, got {result}"
-    )
-    return result
-
-
-def test_conditional_vote_in_vote_payload():
-    """V1R1C5: A vote with condition=True triggers conditional approval."""
-    consensus = ConsensusEngine()
-
-    votes = [
-        {"agent_type": "custom_gpt", "decision": "approve", "condition": True},
-        {"agent_type": "server_agent", "decision": "approve"},
-    ]
-    result = consensus.decide(votes)
-    assert result == "conditional_approval", (
-        f"Expected conditional_approval for conditional vote, got {result}"
-    )
-    return result
-
-
-def test_no_conditional_vote_approves_normally():
-    """Without any conditional votes, approval proceeds normally."""
-    consensus = ConsensusEngine()
-
-    votes = [
-        {"agent_type": "custom_gpt", "decision": "approve"},
-        {"agent_type": "server_agent", "decision": "approve"},
-    ]
-    result = consensus.decide(votes)
-    assert result == "approve", (
-        f"Expected approve without conditional votes, got {result}"
-    )
-    return result
-
-
-def run_all_tests():
-    tests = [
-        ("conditional_approval_on_config_participants_change", test_conditional_approval_on_config_participants_change),
-        ("conditional_approval_on_config_modes_change", test_conditional_approval_on_config_modes_change),
-        ("conditional_approval_on_config_disabled", test_conditional_approval_on_config_disabled),
-        ("conditional_approval_on_weights_adjusted", test_conditional_approval_on_weights_adjusted),
-        ("conditional_approval_unrelated_change_approves", test_conditional_approval_unrelated_change_approves),
-        ("reject_on_majority_reject", test_reject_on_majority_reject),
-        ("conditional_vote_in_vote_payload", test_conditional_vote_in_vote_payload),
-        ("no_conditional_vote_approves_normally", test_no_conditional_vote_approves_normally),
-    ]
-    results = {}
-    for name, test_fn in tests:
-        try:
-            result = test_fn()
-            results[name] = {"status": "PASS", "result": result}
-            print(f"  ✓ {name}: {result}")
-        except AssertionError as e:
-            results[name] = {"status": "FAIL", "error": str(e)}
-            print(f"  ✗ {name}: {e}")
-    print(f"\n{'='*60}")
-    passed = sum(1 for v in results.values() if v["status"] == "PASS")
-    total = len(tests)
-    print(f"V1R1C5 Conditional Approval Tests: {passed}/{total} passed")
-    return results
-
-
-if __name__ == "__main__":
-    print("Integration Test Suite\n" + "=" * 60)
-    result = run_integration_test()
-    print(f"\nBase Integration Test Result: {result}")
-    print("\n--- V1R1C5 Conditional Approval Tests ---")
-    run_all_tests()

runtime/agent-os/memory_service.py

@@ -1,30 +0,0 @@
-"""Agent OS memory service runtime."""
-
-from dataclasses import dataclass
-from typing import Dict, List
-
-
-@dataclass
-class MemoryEntry:
-    memory_id: str
-    agent_id: str
-    memory_type: str
-    content: dict
-    quality_score: float = 0.0
-
-
-class MemoryService:
-    def __init__(self):
-        self.store: Dict[str, List[MemoryEntry]] = {}
-
-    def save(self, entry: MemoryEntry):
-        self.store.setdefault(entry.agent_id, []).append(entry)
-
-    def query(self, agent_id: str, memory_type: str = None):
-        items = self.store.get(agent_id, [])
-        if memory_type:
-            return [m for m in items if m.memory_type == memory_type]
-        return items
-
-    def reflect(self, agent_id: str):
-        return self.query(agent_id, "reflection")

runtime/agent-os/message_bus.py

@@ -1,29 +0,0 @@
-"""Agent OS message bus runtime."""
-
-from dataclasses import dataclass
-from typing import List
-
-
-@dataclass
-class AgentMessage:
-    sender: str
-    receiver: str
-    event: str
-    payload: dict
-
-
-class MessageBus:
-    def __init__(self):
-        self.queue: List[AgentMessage] = []
-
-    def send(self, message: AgentMessage):
-        self.queue.append(message)
-
-    def broadcast(self, sender: str, event: str, payload: dict, receivers: List[str]):
-        for receiver in receivers:
-            self.send(AgentMessage(sender, receiver, event, payload))
-
-    def consume(self):
-        messages = list(self.queue)
-        self.queue.clear()
-        return messages

runtime/agent-os/orchestrator/__init__.py

@@ -1 +0,0 @@
-# init for orchestrator package

runtime/agent-os/orchestrator/action_monitor.py

@@ -1,37 +0,0 @@
-"""V1R2C2 autonomous recovery action monitor."""
-
-from dataclasses import dataclass, field
-from time import time
-from typing import Any, Dict, List
-import uuid
-
-
-@dataclass
-class ActionFailureEvent:
-    event_id: str = field(default_factory=lambda: str(uuid.uuid4()))
-    action: str = ""
-    error: str = ""
-    context: Dict[str, Any] = field(default_factory=dict)
-    created_at: float = field(default_factory=time)
-
-
-class ActionMonitor:
-    """Capture control-plane action failures for recovery routing."""
-
-    def __init__(self):
-        self.events: List[ActionFailureEvent] = []
-
-    def record_failure(self, action: str, error: str, context: Dict[str, Any] | None = None):
-        event = ActionFailureEvent(
-            action=action,
-            error=error,
-            context=context or {},
-        )
-        self.events.append(event)
-        return event
-
-    def latest(self):
-        return self.events[-1] if self.events else None
-
-    def list_events(self):
-        return self.events

runtime/agent-os/orchestrator/error_classifier.py

@@ -1,89 +0,0 @@
-"""V1R2C2 Error Classifier Module.
-
-Classifies action failures by type and recovery priority.
-"""
-
-from typing import Any, Dict, Optional
-
-# Error type patterns
-ERROR_PATTERNS = {
-    'permission_error': [
-        'permission denied', 'unauthorized', 'forbidden', 'not allowed',
-        'access denied', 'credentials', 'authentication failed',
-        'token invalid', 'read-only', 'owner_approval_required',
-        'direct_main_push', 'protected_branch',
-    ],
-    'git_error': [
-        'git failed', 'git error', 'paths', 'did not match', 'not a git repository',
-        'merge conflict', 'push rejected', 'fetch failed',
-        'remote', 'repository', 'fatal:', 'refs/heads',
-    ],
-    'runtime_error': [
-        'connection refused', 'timeout', 'service unavailable', 'unreachable',
-        'server error', '500', '503', 'process crash', 'memory',
-        'clientresponseerror', 'responseerror',
-        'rate limit',
-    ],
-    'validation_error': [
-        'invalid', 'required', 'missing', 'bad request', '400',
-        'malformed', 'unexpected',
-    ],
-    'system_error': [
-        'disk full', 'out of memory', 'file system', 'kernel',
-        'oom', 'oom-kill', 'segfault', 'signal',
-    ],
-    'secret_violation': [
-        'secret_rejected',
-    ],
-}
-
-# Recovery priority mapping
-RECOVERY_PRIORITY = {
-    'permission_error': 'openclaw_auto_repair',
-    'git_error': 'openclaw_auto_repair',
-    'runtime_error': 'hermes_escalation',
-    'validation_error': 'openclaw_auto_repair',
-    'system_error': 'windows_codex_escalation',
-    'secret_violation': 'windows_codex_escalation',
-    'unknown': 'openclaw_auto_repair',
-}
-
-
-class ErrorClassifier:
-    """Classify action failures by analyzing error strings."""
-
-    @staticmethod
-    def classify(error: str) -> Dict[str, Any]:
-        """Classify an error message into error type and recovery priority.
-
-        Returns:
-            dict with 'error_type', 'recovery_priority', 'matched_patterns'
-        """
-        error_lower = error.lower()
-        matched = []
-
-        for etype, patterns in ERROR_PATTERNS.items():
-            for pattern in patterns:
-                if pattern in error_lower:
-                    matched.append(etype)
-                    break
-
-        # Determine primary error type
-        if not matched:
-            error_type = 'unknown'
-        else:
-            # Priority order: permission > git > system > runtime > validation
-            for priority_type in ['permission_error', 'git_error', 'system_error', 'secret_violation', 'runtime_error', 'validation_error']:
-                if priority_type in matched:
-                    error_type = priority_type
-                    break
-            else:
-                error_type = matched[0]
-
-        recovery_priority = RECOVERY_PRIORITY.get(error_type, 'openclaw_auto_repair')
-
-        return {
-            'error_type': error_type,
-            'recovery_priority': recovery_priority,
-            'matched_patterns': matched,
-        }

runtime/agent-os/orchestrator/failure_router.py

@@ -1,58 +0,0 @@
-"""V1R2C2 Failure Router Module.
-
-Routes failures to appropriate recovery agent based on error type and recovery priority.
-"""
-
-from typing import Any, Dict, Optional
-
-from orchestrator.error_classifier import ErrorClassifier
-
-# Agent routing table
-AGENT_ROUTING = {
-    'openclaw_auto_repair': {
-        'primary': 'openclaw',
-        'fallback': 'hermes',  # if openclaw fails
-        'escape': 'windows_codex_app',
-        'description': 'OpenClaw auto-repair route',
-    },
-    'hermes_escalation': {
-        'primary': 'hermes',
-        'fallback': 'openclaw',
-        'escape': 'windows_codex_app',
-        'description': 'Hermes escalation route',
-    },
-    'windows_codex_escalation': {
-        'primary': 'windows_codex_app',
-        'fallback': 'openclaw',
-        'escape': 'openclaw',
-        'description': 'Windows Codex App escalation route',
-    },
-}
-
-
-class FailureRouter:
-    """Route action failures to the appropriate recovery agent."""
-
-    def __init__(self, classifier: Optional[ErrorClassifier] = None):
-        self.classifier = classifier or ErrorClassifier()
-
-    def route(self, error: str, context: Optional[Dict[str, Any]] = None) -> Dict[str, Any]:
-        """Route a failure event to the appropriate recovery agent.
-
-        Returns:
-            dict with 'primary_agent', 'fallback_agent', 'escape_agent', 'selected_error_type'
-        """
-        classification = self.classifier.classify(error)
-        error_type = classification['error_type']
-        recovery_priority = classification['recovery_priority']
-
-        route = AGENT_ROUTING.get(recovery_priority, AGENT_ROUTING['openclaw_auto_repair'])
-
-        return {
-            'error_type': error_type,
-            'recovery_priority': recovery_priority,
-            'primary_agent': route['primary'],
-            'fallback_agent': route['fallback'],
-            'escape_agent': route['escape'],
-            'selected_error_type': error_type,
-        }

runtime/agent-os/orchestrator/integration_test_v1r2c2.py

@@ -1,196 +0,0 @@
-#!/usr/bin/env python3
-"""V1R2C2 integration test: verify the recovery pipeline end-to-end.
-
-Tests: Action Monitor → Error Classifier → Failure Router → Recovery Controller
-"""
-
-import sys
-import json
-import tempfile
-import os
-import time
-import subprocess
-from pathlib import Path
-
-# Path to the gitops workspace
-WORKSPACE = Path('/data/aios-gitops/workspace')
-sys.path.insert(0, str(WORKSPACE / 'runtime' / 'agent-os'))
-
-from orchestrator.action_monitor import ActionMonitor
-from orchestrator.error_classifier import ErrorClassifier
-from orchestrator.failure_router import FailureRouter
-from orchestrator.recovery_controller import RecoveryController
-
-
-def debug_imports():
-    """Verify all modules load correctly."""
-    print("=== Module Import Verification ===")
-    print(f"ActionMonitor: {ActionMonitor}")
-    print(f"ErrorClassifier: {ErrorClassifier}")
-    print(f"FailureRouter: {FailureRouter}")
-    print(f"RecoveryController: {RecoveryController}")
-    print()
-
-
-def test_action_monitor():
-    """Test the ActionMonitor records failure events correctly."""
-    print("=== ActionMonitor Test ===")
-    monitor = ActionMonitor()
-    assert monitor.latest() is None, "Monitor should start empty"
-    assert monitor.list_events() == [], "Monitor events list should start empty"
-
-    e = monitor.record_failure('branch:create', 'Permission denied', {'branch': 'test'})
-    assert e is not None
-    assert e.action == 'branch:create'
-    assert e.error == 'Permission denied'
-    assert e.context == {'branch': 'test'}
-    assert e.event_id is not None
-    assert e.created_at > 0
-
-    e2 = monitor.record_failure('file:write', 'File not found', {'path': '/tmp/x'})
-    assert len(monitor.list_events()) == 2
-    assert monitor.latest() == e2
-    print("PASS: ActionMonitor records and retrieves events correctly")
-    return monitor
-
-
-def test_error_classifier():
-    """Test the ErrorClassifier categorizes errors correctly."""
-    print("=== ErrorClassifier Test ===")
-    clf = ErrorClassifier()
-
-    tests = [
-        # (error_string, expected_error_type, expected_recovery_priority)
-        ('Permission denied', 'permission_error', 'openclaw_auto_repair'),
-        ('git failed: merge conflict', 'git_error', 'openclaw_auto_repair'),
-        ('git push rejected: permission', 'git_error', 'openclaw_auto_repair'),
-        ('Connection refused', 'runtime_error', 'hermes_escalation'),
-        ('timeout', 'runtime_error', 'hermes_escalation'),
-        ('ClientResponseError', 'runtime_error', 'hermes_escalation'),
-        ('secret_rejected: use secret_ref', 'secret_violation', 'windows_codex_escalation'),
-        ('unauthorized', 'permission_error', 'openclaw_auto_repair'),
-        ('forbidden', 'permission_error', 'openclaw_auto_repair'),
-        ('API rate limit exceeded', 'runtime_error', 'hermes_escalation'),
-        ('Internal Server Error', 'runtime_error', 'hermes_escalation'),
-        ('repository is locked', 'git_error', 'openclaw_auto_repair'),
-        ('unknown weird error', 'unknown', 'openclaw_auto_repair'),
-        ('No such file or directory', 'unknown', 'openclaw_auto_repair'),
-        ('File exists', 'unknown', 'openclaw_auto_repair'),
-        ('authentication failed', 'permission_error', 'openclaw_auto_repair'),
-    ]
-
-    for error_str, expected_type, expected_priority in tests:
-        result = clf.classify(error_str)
-        assert result['error_type'] == expected_type, f"Expected {expected_type}, got {result['error_type']} for '{error_str}'"
-        assert result['recovery_priority'] == expected_priority, f"Expected {expected_priority}, got {result['recovery_priority']} for '{error_str}'"
-
-    print("PASS: ErrorClassifier correctly classifies all error types")
-    return clf
-
-
-def test_failure_router():
-    """Test the FailureRouter routes failures to the correct agent."""
-    print("=== FailureRouter Test ===")
-    router = FailureRouter()
-
-    tests = [
-        # (error, expected_primary, expected_fallback, expected_escape)
-        ('Permission denied', 'openclaw', 'hermes', 'windows_codex_app'),
-        ('ClientResponseError', 'hermes', 'openclaw', 'windows_codex_app'),
-        ('secret_rejected: use secret_ref', 'windows_codex_app', 'openclaw', 'openclaw'),
-    ]
-
-    for error, primary, fallback, escape in tests:
-        result = router.route(error)
-        assert result['primary_agent'] == primary, f"Expected primary={primary}, got {result['primary_agent']}"
-        assert result['fallback_agent'] == fallback, f"Expected fallback={fallback}, got {result['fallback_agent']}"
-        assert result['escape_agent'] == escape, f"Expected escape={escape}, got {result['escape_agent']}"
-
-    print("PASS: FailureRouter routes errors to correct agents")
-    return router
-
-
-def test_recovery_controller():
-    """Test the full recovery pipeline end-to-end."""
-    print("=== RecoveryController Test ===")
-    controller = RecoveryController()
-
-    tests = [
-        # (action, error, expected_error_type)
-        ('branch:create', 'Permission denied', 'permission_error'),
-        ('file:write', 'ClientResponseError', 'runtime_error'),
-        ('model:write', 'secret_rejected: use secret_ref', 'secret_violation'),
-    ]
-
-    for action, error, expected_type in tests:
-        result = controller.process_failure(action, error, {'source': 'chatgpt-api'})
-        assert result['error_type'] == expected_type, f"Expected {expected_type}, got {result['error_type']}"
-        assert result['action'] == action
-        assert result['plan'] is not None
-        assert result['execution'] is not None
-        assert result['validation'] is not None
-        assert 'timestamp' in result
-        print(f"  {action}: {error} → {expected_type} ✓")
-
-    assert len(controller.recovery_history) == 3
-    assert controller.latest_recovery() == controller.recovery_history[-1]
-
-    print("PASS: RecoveryController processes full pipeline correctly")
-    return controller
-
-
-def test_api_500_scenario():
-    """Simulate the real-world scenario of API 500 errors."""
-    print("=== API 500 Scenario Test ===")
-    monitor = ActionMonitor()
-    controller = RecoveryController()
-
-    # Simulate the /api/file 500 errors seen in production
-    failures = [
-        ('file:write', 'Internal Server Error', {'path': 'test.md', 'method': 'POST'}),
-        ('branch:create', 'ClientResponseError', {'branch': 'test', 'method': 'POST'}),
-        ('file:write', 'timeout', {'path': 'test2.md', 'method': 'POST'}),
-    ]
-
-    for action, error, context in failures:
-        event = monitor.record_failure(action, error, context)
-        result = controller.process_failure(action, error, context)
-
-        assert result['error_type'] is not None
-        assert result['route_info'] is not None
-
-    # Verify the most critical errors (network errors) route to hermes
-    network_results = [
-        r for r in controller.recovery_history
-        if r['error_type'] == 'network_error'
-    ]
-    for r in network_results:
-        assert r['route_info']['primary_agent'] == 'hermes'
-
-    print(f"PASS: API 500 scenario processed {len(failures)} failures correctly")
-    print(f"  Network errors routed to hermes: {len(network_results)}")
-
-
-def main():
-    """Run all tests."""
-    print("=" * 60)
-    print("V1R2C2 Integration Tests - Autonomous Recovery Pipeline")
-    print("=" * 60)
-    print()
-
-    debug_imports()
-    test_action_monitor()
-    test_error_classifier()
-    test_failure_router()
-    test_recovery_controller()
-    test_api_500_scenario()
-
-    print()
-    print("=" * 60)
-    print("ALL TESTS PASSED")
-    print("=" * 60)
-    return 0
-
-
-if __name__ == '__main__':
-    sys.exit(main())

runtime/agent-os/orchestrator/recovery_controller.py

@@ -1,105 +0,0 @@
-"""V1R2C2 Recovery Controller Module.
-
-Orchestrates the full recovery pipeline:
-  Action Monitor → Error Classifier → Failure Router → Recovery Controller → Repair → Validate → GitOps Record
-
-This module demonstrates the complete recovery chain.
-"""
-
-from typing import Any, Dict, Optional
-from datetime import datetime, timezone
-
-from orchestrator.error_classifier import ErrorClassifier
-from orchestrator.failure_router import FailureRouter
-
-
-class RecoveryController:
-    """Capture and process action failures through the recovery pipeline."""
-
-    def __init__(self):
-        self.classifier = ErrorClassifier()
-        self.router = FailureRouter(self.classifier)
-        self.recovery_history: list[Dict[str, Any]] = []
-
-    def process_failure(self, action: str, error: str, context: Optional[Dict[str, Any]] = None) -> Dict[str, Any]:
-        """Process a single failure through the complete recovery pipeline.
-
-        Pipeline: Action Monitor → Error Classifier → Failure Router → Recovery Plan → Execute → Validate → Record
-
-        Returns:
-            dict with full recovery chain output
-        """
-        context = context or {}
-        now = datetime.now(timezone.utc).isoformat()
-
-        # Step 1: Classify
-        classification = self.classifier.classify(error)
-        error_type = classification['error_type']
-
-        # Step 2: Route
-        route_info = self.router.route(error, context)
-
-        # Step 3: Generate recovery plan
-        plan = self._generate_plan(action, error_type, route_info, context)
-
-        # Step 4: Execute (simulated - actual execution requires agent infrastructure)
-        execution = self._execute_recovery(action, error_type, plan)
-
-        # Step 5: Validate
-        validation = self._validate_recovery(execution)
-
-        # Step 6: Record
-        record = {
-            'timestamp': now,
-            'action': action,
-            'error': error,
-            'error_type': error_type,
-            'classification': classification,
-            'route_info': route_info,
-            'plan': plan,
-            'execution': execution,
-            'validation': validation,
-        }
-
-        self.recovery_history.append(record)
-        return record
-
-    def _generate_plan(self, action: str, error_type: str, route_info: Dict[str, Any], context: Dict[str, Any]) -> Dict[str, Any]:
-        """Generate a recovery plan based on classification and routing."""
-        primary = route_info.get('primary_agent', 'openclaw')
-        return {
-            'action': action,
-            'error_type': error_type,
-            'primary_agent': primary,
-            'fallback_agent': route_info.get('fallback_agent', 'hermes'),
-            'escape_agent': route_info.get('escape_agent', 'windows_codex_app'),
-            'steps': [
-                f'classify: {error_type}',
-                f'assign: {primary}',
-                f'fallback: {route_info.get("fallback_agent", "hermes")}',
-                f'escape: {route_info.get("escape_agent", "windows_codex_app")}',
-            ],
-        }
-
-    def _execute_recovery(self, action: str, error_type: str, plan: Dict[str, Any]) -> Dict[str, Any]:
-        """Execute the recovery plan (simulation)."""
-        # In production, this would invoke the selected agent with the plan
-        return {
-            'status': 'recovery_initiated',
-            'agent': plan.get('primary_agent'),
-            'action': action,
-            'error_type': error_type,
-        }
-
-    def _validate_recovery(self, execution: Dict[str, Any]) -> Dict[str, Any]:
-        """Validate the recovery action was taken."""
-        # In production, this would check if the agent applied the fix
-        return {
-            'validated': execution.get('status') == 'recovery_initiated',
-            'execution_status': execution.get('status'),
-            'validation_time': datetime.now(timezone.utc).isoformat(),
-        }
-
-    def latest_recovery(self) -> Optional[Dict[str, Any]]:
-        """Get the latest recovery record."""
-        return self.recovery_history[-1] if self.recovery_history else None

runtime/agent-os/recovery_manager.py

@@ -1,27 +0,0 @@
-"""Agent OS recovery manager."""
-
-from dataclasses import dataclass
-from typing import List
-
-
-@dataclass
-class RecoveryEvent:
-    source: str
-    issue: str
-    severity: str
-    assigned_agent: str = "windows_codex_app"
-
-
-class RecoveryManager:
-    def __init__(self):
-        self.events: List[RecoveryEvent] = []
-
-    def report_failure(self, event: RecoveryEvent):
-        self.events.append(event)
-        return {"status": "recovery_started", "assigned_agent": event.assigned_agent}
-
-    def history(self):
-        return self.events
-
-    def needs_admin_authorization(self, event: RecoveryEvent):
-        return event.severity in {"high", "critical"}

runtime/agent-os/skill_loader.py

@@ -1,31 +0,0 @@
-"""Agent OS skill loader runtime."""
-
-from dataclasses import dataclass, field
-from typing import Dict, List
-
-
-@dataclass
-class SkillPackage:
-    skill_id: str
-    version: str
-    capabilities: List[str] = field(default_factory=list)
-    enabled: bool = True
-
-
-class SkillLoader:
-    def __init__(self):
-        self.skills: Dict[str, SkillPackage] = {}
-
-    def register(self, skill: SkillPackage):
-        self.skills[skill.skill_id] = skill
-
-    def validate(self, skill_id: str):
-        skill = self.skills.get(skill_id)
-        return bool(skill and skill.enabled and skill.version)
-
-    def load_for_capability(self, capability: str):
-        return [s for s in self.skills.values() if capability in s.capabilities and s.enabled]
-
-    def disable(self, skill_id: str):
-        if skill_id in self.skills:
-            self.skills[skill_id].enabled = False

runtime/agent-os/task_scheduler.py

@@ -1,36 +0,0 @@
-"""Agent OS task scheduler runtime."""
-
-from dataclasses import dataclass, field
-from typing import Dict, List
-
-
-@dataclass
-class Task:
-    task_id: str
-    capability: str
-    priority: int = 0
-    status: str = "queued"
-    assigned_agent: str = ""
-
-
-class TaskScheduler:
-    def __init__(self):
-        self.tasks: Dict[str, Task] = {}
-        self.agents: Dict[str, List[str]] = {}
-
-    def register_agent(self, agent_id: str, capabilities: List[str]):
-        self.agents[agent_id] = capabilities
-
-    def submit(self, task: Task):
-        self.tasks[task.task_id] = task
-
-    def dispatch(self):
-        for task in self.tasks.values():
-            if task.status != "queued":
-                continue
-            for agent, caps in self.agents.items():
-                if task.capability in caps:
-                    task.assigned_agent = agent
-                    task.status = "assigned"
-                    break
-        return list(self.tasks.values())

scripts/autonomous-merge-gate.sh

@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+set -e
+
+BRANCH=$1
+BASE=${2:-main}
+
+if [ -z "$BRANCH" ]; then
+  echo "Usage: autonomous-merge-gate.sh <branch> <base>"
+  exit 1
+fi
+
+echo "[Autonomous Gate] Evaluating: $BRANCH vs $BASE"
+
+REPORT_DIR="reports/codex"
+mkdir -p "$REPORT_DIR"
+
+# Run validation and capture exit code correctly
+bash scripts/validate-gitops-platform-ui.sh "$BRANCH" "$BASE"
+VALIDATION_RC=$?
+
+if [ $VALIDATION_RC -ne 0 ]; then
+  echo "FAIL: validation failed"
+  exit $VALIDATION_RC
+fi
+
+# Secret safety re-check
+if grep -R "BEGIN PRIVATE KEY" -n overlays/ >/dev/null 2>&1; then
+  echo "BLOCKED: secret leak"
+  exit 2
+fi
+
+# Create merge candidate artifact
+cat > "$REPORT_DIR/merge-candidate.json" <<EOF
+{
+  "branch": "$BRANCH",
+  "base": "$BASE",
+  "status": "merge_candidate",
+  "created_at": "$(date -u +%Y-%m-%dT%H:%M:%SZ)"
+}
+EOF
+
+echo "PASS: merge candidate ready"
+exit 0

scripts/enqueue_wechat_notification.py

@@ -0,0 +1,90 @@
+#!/usr/bin/env python3
+"""Enqueue a WeChat notification into WebOps message_outbox.
+
+Business modules should call this helper or the equivalent WebOps API instead of
+calling OpenClaw / WeChat adapters directly.
+"""
+
+from __future__ import annotations
+
+import argparse
+import json
+import os
+import sqlite3
+import time
+from pathlib import Path
+
+ROOT = Path(os.environ.get("AIOS_WEBOPS_ROOT", "/data/aios-gitops/workspace"))
+DB = Path(os.environ.get("AIOS_WEBOPS_DB", str(ROOT / "data" / "webops.sqlite3")))
+MIGRATION = ROOT / "db" / "migrations" / "20260707_message_outbox.sql"
+
+
+def ensure_schema(con: sqlite3.Connection) -> None:
+    if MIGRATION.exists():
+        con.executescript(MIGRATION.read_text(encoding="utf-8"))
+    else:
+        con.executescript(
+            """
+            CREATE TABLE IF NOT EXISTS message_outbox (
+              id TEXT PRIMARY KEY,
+              channel TEXT NOT NULL,
+              recipient_user_id TEXT NOT NULL,
+              recipient_role TEXT,
+              message_type TEXT NOT NULL,
+              priority TEXT NOT NULL DEFAULT 'normal',
+              title TEXT,
+              content TEXT NOT NULL,
+              payload TEXT,
+              status TEXT NOT NULL DEFAULT 'queued',
+              retry_count INTEGER NOT NULL DEFAULT 0,
+              last_error TEXT,
+              created_at TEXT NOT NULL,
+              sent_at TEXT
+            );
+            """
+        )
+
+
+def main() -> int:
+    parser = argparse.ArgumentParser(description="Enqueue a WeChat notification")
+    parser.add_argument("--recipient", "--recipient-user-id", dest="recipient_user_id", required=True)
+    parser.add_argument("--recipient-role", default="owner")
+    parser.add_argument("--message-type", default="alert")
+    parser.add_argument("--priority", default="normal", choices=["critical", "high", "normal", "low"])
+    parser.add_argument("--title", default="AIOS 通知")
+    parser.add_argument("--content", required=True)
+    parser.add_argument("--payload", default="{}")
+    parser.add_argument("--id")
+    args = parser.parse_args()
+
+    DB.parent.mkdir(parents=True, exist_ok=True)
+    msg_id = args.id or f"msg_{int(time.time() * 1000)}"
+
+    with sqlite3.connect(DB) as con:
+        ensure_schema(con)
+        con.execute(
+            """
+            INSERT INTO message_outbox (
+              id, channel, recipient_user_id, recipient_role, message_type,
+              priority, title, content, payload, status, created_at
+            ) VALUES (?, 'wechat', ?, ?, ?, ?, ?, ?, ?, 'queued', datetime('now'))
+            """,
+            (
+                msg_id,
+                args.recipient_user_id,
+                args.recipient_role,
+                args.message_type,
+                args.priority,
+                args.title,
+                args.content,
+                args.payload,
+            ),
+        )
+        con.commit()
+
+    print(json.dumps({"status": "queued", "id": msg_id, "db": str(DB)}, ensure_ascii=False))
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

scripts/message_outbox_schema.py

@@ -0,0 +1,116 @@
+#!/usr/bin/env python3
+"""Ensure WebOps message outbox schema.
+
+This schema is the only supported active outbound notification entrypoint for
+business modules and external systems. Delivery is performed by the worker.
+
+The migration is backward-compatible with already-created SQLite tables:
+columns are added before indexes that reference them, and UNIQUE constraints are
+created as indexes because SQLite cannot add a UNIQUE column via ALTER TABLE.
+"""
+
+from __future__ import annotations
+
+import os
+import sqlite3
+from pathlib import Path
+
+ROOT = Path(os.environ.get("AIOS_WEBOPS_ROOT", "/data/aios-gitops/workspace"))
+DB = Path(os.environ.get("AIOS_WEBOPS_DB", str(ROOT / "data" / "webops.sqlite3")))
+
+BASE_TABLES_SQL = """
+CREATE TABLE IF NOT EXISTS message_outbox (
+  id TEXT PRIMARY KEY,
+  idempotency_key TEXT,
+  channel TEXT NOT NULL,
+  recipient_user_id TEXT,
+  recipient_role TEXT,
+  message_type TEXT NOT NULL,
+  priority TEXT NOT NULL DEFAULT 'normal',
+  title TEXT,
+  content TEXT NOT NULL,
+  source_system TEXT,
+  source_event_id TEXT,
+  require_approval INTEGER NOT NULL DEFAULT 0,
+  payload TEXT,
+  status TEXT NOT NULL DEFAULT 'queued',
+  retry_count INTEGER NOT NULL DEFAULT 0,
+  last_error TEXT,
+  created_at TEXT NOT NULL,
+  sent_at TEXT,
+  cancelled_at TEXT
+);
+
+CREATE TABLE IF NOT EXISTS channel_bindings (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL,
+  user_role TEXT,
+  channel_type TEXT NOT NULL,
+  external_chat_id TEXT NOT NULL,
+  notification_prefs TEXT,
+  status TEXT NOT NULL DEFAULT 'active',
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS audit_logs (
+  id TEXT PRIMARY KEY,
+  actor TEXT NOT NULL,
+  action TEXT NOT NULL,
+  target TEXT,
+  detail TEXT,
+  created_at TEXT NOT NULL
+);
+"""
+
+INDEX_SQL = """
+CREATE UNIQUE INDEX IF NOT EXISTS idx_message_outbox_idempotency
+ON message_outbox(idempotency_key)
+WHERE idempotency_key IS NOT NULL;
+
+CREATE INDEX IF NOT EXISTS idx_message_outbox_dispatch
+ON message_outbox(channel, status, priority, created_at);
+
+CREATE INDEX IF NOT EXISTS idx_channel_bindings_lookup
+ON channel_bindings(user_id, channel_type, status, updated_at);
+
+CREATE INDEX IF NOT EXISTS idx_channel_bindings_role_lookup
+ON channel_bindings(user_role, channel_type, status, updated_at);
+"""
+
+COLUMNS = {
+    "message_outbox": {
+        "idempotency_key": "TEXT",
+        "recipient_user_id": "TEXT",
+        "recipient_role": "TEXT",
+        "source_system": "TEXT",
+        "source_event_id": "TEXT",
+        "require_approval": "INTEGER NOT NULL DEFAULT 0",
+        "cancelled_at": "TEXT",
+    },
+    "channel_bindings": {
+        "user_role": "TEXT",
+        "notification_prefs": "TEXT",
+    },
+}
+
+
+def existing_columns(con: sqlite3.Connection, table: str) -> set[str]:
+    return {row[1] for row in con.execute(f"PRAGMA table_info({table})")}
+
+
+def ensure_schema(db_path: Path = DB) -> None:
+    db_path.parent.mkdir(parents=True, exist_ok=True)
+    with sqlite3.connect(db_path) as con:
+        con.executescript(BASE_TABLES_SQL)
+        for table, cols in COLUMNS.items():
+            existing = existing_columns(con, table)
+            for name, ddl in cols.items():
+                if name not in existing:
+                    con.execute(f"ALTER TABLE {table} ADD COLUMN {name} {ddl}")
+        con.executescript(INDEX_SQL)
+        con.commit()
+
+
+if __name__ == "__main__":
+    ensure_schema()
+    print(f"schema_ok db={DB}")

scripts/validate-gitops-platform-ui.sh

@@ -0,0 +1,49 @@
+#!/usr/bin/env bash
+set -e
+
+BRANCH=$1
+BASE=${2:-main}
+
+if [ -z "$BRANCH" ]; then
+  echo "Usage: validate-gitops-platform-ui.sh <branch> <base>"
+  exit 1
+fi
+
+echo "[Codex] Validating branch: $BRANCH against $BASE"
+
+echo "[1/5] Git diff check"
+git diff --stat $BASE...$BRANCH
+
+echo "[2/5] Acceptance test load"
+if [ ! -f tests/acceptance/gitops-platform-ui.acceptance.json ]; then
+  echo "FAIL: acceptance file missing"
+  exit 2
+fi
+
+echo "[3/5] Secret scan"
+if grep -R "BEGIN PRIVATE KEY" -n overlays/ >/dev/null 2>&1; then
+  echo "FAIL: private key detected"
+  exit 3
+fi
+
+if grep -R "Bearer " -n overlays/ >/dev/null 2>&1; then
+  echo "WARN: bearer token pattern found"
+fi
+
+echo "[4/5] UI structural validation"
+FILES=(
+  overlays/user-control-center/portal/gitops-dashboard/index.html
+  overlays/user-control-center/portal/gitops-dashboard/app.js
+)
+for f in "${FILES[@]}"; do
+  if [ ! -f "$f" ]; then
+    echo "FAIL: missing $f"
+    exit 4
+  fi
+done
+
+echo "[5/5] Policy validation"
+grep -R "direct_main_push" -n overlays/user-control-center/portal/gitops-dashboard/ || true
+
+echo "PASS: Codex validation completed"
+exit 0