From 0d88cf632156b7bace8589affaf09a9acae5f43f Mon Sep 17 00:00:00 2001 From: wangzhendong Date: Thu, 21 May 2026 16:54:31 +0800 Subject: [PATCH] Sync agent state from PC at 2026-05-21 16:54:31 --- sync-state/heartbeat-pc.json | 6 +- tasks/T10-G2-VPS-pairing-approve.md | 8 +++ tasks/T10A-G2-VPS-pending-status-check.md | 79 +++++++++++++++++++++++ 3 files changed, 90 insertions(+), 3 deletions(-) create mode 100644 tasks/T10A-G2-VPS-pending-status-check.md diff --git a/sync-state/heartbeat-pc.json b/sync-state/heartbeat-pc.json index e6893d2..212da19 100644 --- a/sync-state/heartbeat-pc.json +++ b/sync-state/heartbeat-pc.json @@ -1,9 +1,9 @@ { "host": "pc", - "time": "2026-05-21T16:53:27+08:00", + "time": "2026-05-21T16:54:31+08:00", "branch": "main", - "head": "1c53a46", - "status": "clean", + "head": "59622af", + "status": "dirty", "intervalSeconds": 30, "heartbeatEverySeconds": 60 } diff --git a/tasks/T10-G2-VPS-pairing-approve.md b/tasks/T10-G2-VPS-pairing-approve.md index e0dfe6c..6a58a89 100644 --- a/tasks/T10-G2-VPS-pairing-approve.md +++ b/tasks/T10-G2-VPS-pairing-approve.md @@ -28,6 +28,14 @@ This task does not authorize service restarts, reloads, token rotation, Gateway - This task remains blocked until T9 produces a matching non-secret request/node ID. - Authorization covers only the corresponding VPS pairing approval after T9 evidence exists; it does not authorize service restarts/reloads, token rotation, Gateway config mutation, Nginx changes, Docker changes, or frozen website changes. +## Blocker Update - 2026-05-21 + +- T9 is done and `evidence/pc-g2-node-run-20260521.md` reports the PC node connected to `openclaw.smartmotor.cloud`. +- T9 evidence does not provide a pairing request ID or pending node ID. +- T10 remains blocked because there is no specific non-secret approval target. +- ORCHESTRATOR opened `tasks/T10A-G2-VPS-pending-status-check.md` for VPS_EXECUTOR to perform a read-only Gateway pending/online status check. +- Do not approve until ORCHESTRATOR opens T10 with one matching non-secret request/node ID, unless T10A proves the intended PC node is already online/approved and ORCHESTRATOR routes to G2 verification instead. + ## Required Evidence - `rollback/vps-g2-approve-YYYYMMDD.md` written before approval action. diff --git a/tasks/T10A-G2-VPS-pending-status-check.md b/tasks/T10A-G2-VPS-pending-status-check.md new file mode 100644 index 0000000..2bd2cb1 --- /dev/null +++ b/tasks/T10A-G2-VPS-pending-status-check.md @@ -0,0 +1,79 @@ +# T10A - G2 VPS Gateway Pending Status Read-Only Check + +## Status + +ready + +## Owner + +VPS_EXECUTOR + +## Dependencies + +- T9 is done. +- `evidence/pc-g2-node-run-20260521.md` reports the PC node connected to `openclaw.smartmotor.cloud`. +- No pairing request ID or pending node ID was provided by T9 evidence. +- T10 remains blocked. + +## Scope + +Perform a read-only Gateway status check to determine whether the intended PC node `desktop-vuor0gs` is pending approval, already online/approved, or not visible. + +This task does not authorize approval, restart, reload, token handling, Gateway config mutation, Nginx changes, Docker compose edits, bind mount changes, image changes, service-state mutation, or frozen website output changes. + +## Required Evidence + +- Confirm target role/workspace: VPS_EXECUTOR in `/home/ubuntu/openclaw-control-plane`. +- Confirm latest `git pull` completed before checking. +- Confirm `docs/G2_RUNBOOK.md`, `tasks/T9-G2-PC-node-run.md`, `tasks/T10-G2-VPS-pairing-approve.md`, and this task were read. +- Exact read-only command shape used, without secrets. +- Non-secret Gateway status for `desktop-vuor0gs`: pending request ID, pending node ID, online/approved node ID, or not found. +- Confirmation that no `devices approve`, `nodes approve`, restart, reload, token rotation, config edit, Nginx edit, Docker compose edit, bind mount change, image change, service-state mutation, or frozen website output change was performed. +- Evidence written to `evidence/vps-g2-pending-status-YYYYMMDD.md`. +- `handoff/VPS_EXECUTOR.md` updated. + +## Read-Only Command Templates + +These are templates for VPS_EXECUTOR only. ORCHESTRATOR must not run them. + +```bash +docker exec openclaw-gateway node openclaw.mjs nodes pending +docker exec openclaw-gateway node openclaw.mjs nodes list +docker exec openclaw-gateway node openclaw.mjs devices list +``` + +If a listed command is unavailable, VPS_EXECUTOR may use the nearest read-only `--help`, `list`, `status`, or `pending` command exposed by the Gateway CLI. Do not use approve/revoke/remove/update commands. + +## Stop Conditions + +- A command asks for or prints a token/password/secret. +- The intended PC identity is ambiguous. +- Multiple indistinguishable pending requests exist. +- The check requires approval, restart, reload, token rotation, config mutation, Nginx changes, Docker changes, or any action that could affect frozen `smartmotor.cloud` website output. +- Sync-health is blocked or files are not visible through Git. + +## Prompt For VPS_EXECUTOR + +```text +目标窗口：VPS_EXECUTOR +当前工作区：/home/ubuntu/openclaw-control-plane + +请执行 T10A，只读检查 Gateway pending/online 状态，不 approve。 + +先 git pull，然后读取 USER_STATUS.md、AGENT_BOARD.md、docs/G2_RUNBOOK.md、tasks/T9-G2-PC-node-run.md、tasks/T10A-G2-VPS-pending-status-check.md、tasks/T10-G2-VPS-pairing-approve.md、handoff/VPS_EXECUTOR.md、sync-state/。 + +目标： +- 只读查询 openclaw-gateway 中 `desktop-vuor0gs` 是否有 pending request/node ID，或是否已经 online/approved。 +- 只记录非 secret request/node ID、node ID、display name、状态摘要。 + +禁止： +- 不得 approve、restart、reload、rotate token、修改 Gateway/Nginx/Docker/compose/bind mount/image/service state。 +- 不得读取、打印、记录任何 token/password/secret。 +- 不得改变 frozen smartmotor.cloud 网站输出。 + +输出 evidence 到 evidence/vps-g2-pending-status-YYYYMMDD.md，并更新 handoff/VPS_EXECUTOR.md。 +``` + +## Acceptance + +ORCHESTRATOR uses this read-only evidence to decide whether T10 remains blocked pending a specific non-secret approval target, can be opened for a specific approval, or can be skipped because the intended PC node is already online/approved.