wangzhendong/openclaw-control-plane
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Sync agent state from VPS at 2026-05-19 12:12:25

Browse Source
This commit is contained in:
ubuntu
2026-05-19 12:12:25 +08:00
parent 9712265ad2
commit b12393b7a9
7 changed files with 14 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
README.md
View File

@@ -4,7 +4,7 @@ Shared control-plane repository for coordinating Cursor agents across:
- Windows PC workspace: `D:\openclaw`
- Control-plane workspace on PC: `D:\openclaw-control-plane`
- VPS service workspace: `/opt/service`
- VPS service workspace: `/opt/services`
- Control-plane workspace on VPS: `/home/ubuntu/openclaw-control-plane`
## Start Here
@@ -32,7 +32,7 @@ COACH is a guidance role normally carried by the main user-facing chat session.
## Hard Safety Rule
During ICP/public-security filing review, the existing `smartmotor.cloud` website is frozen. Do not change homepage content, linked page content reachable from the homepage, static assets, Nginx routing, Docker bind mounts, container images, or `/opt/services/docker-composite.yml` entries that could alter public website output.
During ICP/public-security filing review, the existing `smartmotor.cloud` website is frozen. Do not change homepage content, linked page content reachable from the homepage, static assets, Nginx routing, Docker bind mounts, container images, `/opt/services/docker-compose.openclaw.yml`, or any equivalent compose/service entries that could alter public website output.
## Secrets

4
docs/G2_RUNBOOK.md
View File

@@ -51,7 +51,7 @@ G2 does not install a persistent service. G4 covers persistence later.
- Sync-health has been confirmed healthy by the user and T7 sync-health blocked state is cleared.
- PC baseline shows OpenClaw CLI `OpenClaw 2026.5.7 (eeef486)`, `openclaw node --help` availability, Tailscale availability, outbound TCP 443 success to `openclaw.smartmotor.cloud`, and no PC OpenClaw public port exposure.
- VPS baseline shows `openclaw-gateway` running healthy in Docker on `services_appnet`, with Gateway CLI available inside the `openclaw-gateway` container.
- VPS verifier accepted G1 with follow-up observations about `/opt/service` versus `/opt/services`, `docker-composite.yml` versus `docker-compose.openclaw.yml`, and the Nginx route/config anomaly.
- VPS verifier accepted G1 with follow-up observations about historical `/opt/service` references versus the actual `/opt/services` path, obsolete `docker-composite.yml` references versus the actual `/opt/services/docker-compose.openclaw.yml`, and the Nginx route/config anomaly.
- Before actual G2 execution, CORRECTION must still do a final freshness check: both heartbeat files must exist, both must be under 5 minutes old, and no `sync-state/error-*.md` may exist.
## Actions Requiring Explicit User Authorization
@@ -96,7 +96,7 @@ Forbidden during G2:
- Changing static assets.
- Changing Nginx routing or route files.
- Changing Docker bind mounts or container images.
- Changing `/opt/services/docker-composite.yml` or equivalent service entries that could alter public website output.
- Changing `/opt/services/docker-compose.openclaw.yml` or any equivalent compose/service entries that could alter public website output.
- Restarting or reloading public website services unless a later approved rollback plan explicitly authorizes it.
## Role Task Split

2
handoff/CORRECTION.md
View File

@@ -9,7 +9,7 @@ Detect drift, unsafe assumptions, missing evidence, sync-health failures, confli
- Agents editing outside their role scope.
- Executors marking their own work as accepted.
- Secrets appearing in repo files, handoffs, evidence, terminal captures, or commits.
- Any attempt to alter the frozen `smartmotor.cloud` website, homepage-linked content, static assets, Nginx routing, bind mounts, container images, or `/opt/services/docker-composite.yml` entries that affect public website output.
- Any attempt to alter the frozen `smartmotor.cloud` website, homepage-linked content, static assets, Nginx routing, bind mounts, container images, `/opt/services/docker-compose.openclaw.yml`, or any equivalent compose/service entries that affect public website output.
- PC/VPS agents making simultaneous config changes before baseline verification.
- Gitea sync conflicts in `AGENT_BOARD.md` or handoff files.
- Stale or missing heartbeat files under `sync-state/`.

6
handoff/VPS_EXECUTOR.md
View File

@@ -2,7 +2,7 @@
## Role
Operate only on the VPS side: `/opt/service`, OpenClaw Gateway, Docker stack, Nginx, Gitea, Confluence, Postgres, and Gateway-side approval workflows.
Operate only on the VPS side: `/opt/services`, OpenClaw Gateway, Docker stack, Nginx, Gitea, Confluence, Postgres, and Gateway-side approval workflows.
## Allowed Work
@@ -15,7 +15,7 @@ Operate only on the VPS side: `/opt/service`, OpenClaw Gateway, Docker stack, Ng
- Do not request or store plaintext VPS passwords.
- Do not rotate or print secrets unless explicitly authorized by the user.
- Do not change the `smartmotor.cloud` website during filing review: homepage content, linked content reachable from the homepage, static assets, routes, bind mounts, container images, Nginx rules, or `/opt/services/docker-composite.yml` entries that affect public website output are frozen.
- Do not change the `smartmotor.cloud` website during filing review: homepage content, linked content reachable from the homepage, static assets, routes, bind mounts, container images, Nginx rules, `/opt/services/docker-compose.openclaw.yml`, or any equivalent compose/service entries that affect public website output are frozen.
- Do not restart production-facing services without an approved rollback note.
- Do not mark VPS work as accepted without verifier review.
@@ -23,7 +23,7 @@ Operate only on the VPS side: `/opt/service`, OpenClaw Gateway, Docker stack, Ng
- VPS public IP: `114.132.222.127`.
- OpenClaw Gateway is already deployed and coexists with the existing Docker stack.
- The VPS service workspace path is `/opt/service`.
- The VPS service workspace path is `/opt/services`.
- The VPS control-plane path is `/home/ubuntu/openclaw-control-plane`.
- Gitea control-plane repository: `https://git.smartmotor.cloud/wangzhendong/openclaw-control-plane.git`.

6
sync-state/heartbeat-vps.json
View File

@@ -1,9 +1,9 @@
{
"host": "vps",
"time": "2026-05-19T12:11:23+0800",
"time": "2026-05-19T12:12:24+0800",
"branch": "main",
"head": "feb6e37",
"status": "clean",
"head": "9712265",
"status": "dirty",
"intervalSeconds": 30,
"heartbeatEverySeconds": 60
}

2
tasks/T4-VPS-baseline.md
View File

@@ -36,7 +36,7 @@ Collect current VPS baseline evidence for OpenClaw Gateway, Gitea, Docker stack,
## Stop Conditions
- Any command requests or prints a secret.
- Any step would modify `/opt/services/docker-composite.yml`, public website files, Nginx routes, Docker bind mounts, container images, or service state.
- Any step would modify `/opt/services/docker-compose.openclaw.yml`, equivalent website-affecting compose/service entries, public website files, Nginx routes, Docker bind mounts, container images, or service state.
- Any restart, reload, approval, token rotation, or Gateway configuration change is required.
## Acceptance

4
tasks/T6-VPS-baseline-verify.md
View File

@@ -10,7 +10,7 @@ accepted
- Accepted the VPS half of G1 with follow-up observations, not blockers.
- Confirmed no approval, restart, reload, token rotation, Nginx route edit, Docker compose edit, bind mount change, image change, or service-state mutation was performed.
- Confirmed the `smartmotor.cloud` filing-review freeze was not touched during T4/T6 baseline review.
- Follow-up observations to track before future mutation: `/opt/service` versus `/opt/services`, `docker-composite.yml` versus `docker-compose.openclaw.yml`, and the Nginx route/config anomaly where endpoints respond but mounted/generated route output did not show expected server blocks.
- Follow-up observations to track before future mutation: historical `/opt/service` references versus actual `/opt/services`, obsolete `docker-composite.yml` references versus actual `/opt/services/docker-compose.openclaw.yml`, and the Nginx route/config anomaly where endpoints respond but mounted/generated route output did not show expected server blocks.
## Owner
@@ -30,7 +30,7 @@ The `smartmotor.cloud` filing-review freeze is a hard constraint throughout veri
- VPS baseline evidence reviewed and accepted or returned with findings.
- Confirmation that VPS_EXECUTOR did not accept its own work.
- Confirmation that no homepage content, linked page content reachable from the homepage, static assets, Nginx routing, Docker bind mounts, container images, service state, or `/opt/services/docker-composite.yml` entries were changed.
- Confirmation that no homepage content, linked page content reachable from the homepage, static assets, Nginx routing, Docker bind mounts, container images, service state, `/opt/services/docker-compose.openclaw.yml`, or equivalent website-affecting compose/service entries were changed.
- Confirmation that Gateway, Nginx, Gitea, Confluence, and Postgres coexistence was only observed, not modified.
- Confirmation that evidence contains no secrets.