diff --git a/README.md b/README.md index bf85014..6417ce8 100644 --- a/README.md +++ b/README.md @@ -4,7 +4,7 @@ Shared control-plane repository for coordinating Cursor agents across: - Windows PC workspace: `D:\openclaw` - Control-plane workspace on PC: `D:\openclaw-control-plane` -- VPS service workspace: `/opt/service` +- VPS service workspace: `/opt/services` - Control-plane workspace on VPS: `/home/ubuntu/openclaw-control-plane` ## Start Here @@ -32,7 +32,7 @@ COACH is a guidance role normally carried by the main user-facing chat session. ## Hard Safety Rule -During ICP/public-security filing review, the existing `smartmotor.cloud` website is frozen. Do not change homepage content, linked page content reachable from the homepage, static assets, Nginx routing, Docker bind mounts, container images, or `/opt/services/docker-composite.yml` entries that could alter public website output. +During ICP/public-security filing review, the existing `smartmotor.cloud` website is frozen. Do not change homepage content, linked page content reachable from the homepage, static assets, Nginx routing, Docker bind mounts, container images, `/opt/services/docker-compose.openclaw.yml`, or any equivalent compose/service entries that could alter public website output. ## Secrets diff --git a/docs/G2_RUNBOOK.md b/docs/G2_RUNBOOK.md index 2bb9fab..c5ca813 100644 --- a/docs/G2_RUNBOOK.md +++ b/docs/G2_RUNBOOK.md @@ -51,7 +51,7 @@ G2 does not install a persistent service. G4 covers persistence later. - Sync-health has been confirmed healthy by the user and T7 sync-health blocked state is cleared. - PC baseline shows OpenClaw CLI `OpenClaw 2026.5.7 (eeef486)`, `openclaw node --help` availability, Tailscale availability, outbound TCP 443 success to `openclaw.smartmotor.cloud`, and no PC OpenClaw public port exposure. - VPS baseline shows `openclaw-gateway` running healthy in Docker on `services_appnet`, with Gateway CLI available inside the `openclaw-gateway` container. -- VPS verifier accepted G1 with follow-up observations about `/opt/service` versus `/opt/services`, `docker-composite.yml` versus `docker-compose.openclaw.yml`, and the Nginx route/config anomaly. +- VPS verifier accepted G1 with follow-up observations about historical `/opt/service` references versus the actual `/opt/services` path, obsolete `docker-composite.yml` references versus the actual `/opt/services/docker-compose.openclaw.yml`, and the Nginx route/config anomaly. - Before actual G2 execution, CORRECTION must still do a final freshness check: both heartbeat files must exist, both must be under 5 minutes old, and no `sync-state/error-*.md` may exist. ## Actions Requiring Explicit User Authorization @@ -96,7 +96,7 @@ Forbidden during G2: - Changing static assets. - Changing Nginx routing or route files. - Changing Docker bind mounts or container images. -- Changing `/opt/services/docker-composite.yml` or equivalent service entries that could alter public website output. +- Changing `/opt/services/docker-compose.openclaw.yml` or any equivalent compose/service entries that could alter public website output. - Restarting or reloading public website services unless a later approved rollback plan explicitly authorizes it. ## Role Task Split diff --git a/handoff/CORRECTION.md b/handoff/CORRECTION.md index 1cf51b7..582eede 100644 --- a/handoff/CORRECTION.md +++ b/handoff/CORRECTION.md @@ -9,7 +9,7 @@ Detect drift, unsafe assumptions, missing evidence, sync-health failures, confli - Agents editing outside their role scope. - Executors marking their own work as accepted. - Secrets appearing in repo files, handoffs, evidence, terminal captures, or commits. -- Any attempt to alter the frozen `smartmotor.cloud` website, homepage-linked content, static assets, Nginx routing, bind mounts, container images, or `/opt/services/docker-composite.yml` entries that affect public website output. +- Any attempt to alter the frozen `smartmotor.cloud` website, homepage-linked content, static assets, Nginx routing, bind mounts, container images, `/opt/services/docker-compose.openclaw.yml`, or any equivalent compose/service entries that affect public website output. - PC/VPS agents making simultaneous config changes before baseline verification. - Gitea sync conflicts in `AGENT_BOARD.md` or handoff files. - Stale or missing heartbeat files under `sync-state/`. diff --git a/handoff/VPS_EXECUTOR.md b/handoff/VPS_EXECUTOR.md index 7c11f13..6d71e02 100644 --- a/handoff/VPS_EXECUTOR.md +++ b/handoff/VPS_EXECUTOR.md @@ -2,7 +2,7 @@ ## Role -Operate only on the VPS side: `/opt/service`, OpenClaw Gateway, Docker stack, Nginx, Gitea, Confluence, Postgres, and Gateway-side approval workflows. +Operate only on the VPS side: `/opt/services`, OpenClaw Gateway, Docker stack, Nginx, Gitea, Confluence, Postgres, and Gateway-side approval workflows. ## Allowed Work @@ -15,7 +15,7 @@ Operate only on the VPS side: `/opt/service`, OpenClaw Gateway, Docker stack, Ng - Do not request or store plaintext VPS passwords. - Do not rotate or print secrets unless explicitly authorized by the user. -- Do not change the `smartmotor.cloud` website during filing review: homepage content, linked content reachable from the homepage, static assets, routes, bind mounts, container images, Nginx rules, or `/opt/services/docker-composite.yml` entries that affect public website output are frozen. +- Do not change the `smartmotor.cloud` website during filing review: homepage content, linked content reachable from the homepage, static assets, routes, bind mounts, container images, Nginx rules, `/opt/services/docker-compose.openclaw.yml`, or any equivalent compose/service entries that affect public website output are frozen. - Do not restart production-facing services without an approved rollback note. - Do not mark VPS work as accepted without verifier review. @@ -23,7 +23,7 @@ Operate only on the VPS side: `/opt/service`, OpenClaw Gateway, Docker stack, Ng - VPS public IP: `114.132.222.127`. - OpenClaw Gateway is already deployed and coexists with the existing Docker stack. -- The VPS service workspace path is `/opt/service`. +- The VPS service workspace path is `/opt/services`. - The VPS control-plane path is `/home/ubuntu/openclaw-control-plane`. - Gitea control-plane repository: `https://git.smartmotor.cloud/wangzhendong/openclaw-control-plane.git`. diff --git a/sync-state/heartbeat-vps.json b/sync-state/heartbeat-vps.json index fdffb8a..eea944b 100644 --- a/sync-state/heartbeat-vps.json +++ b/sync-state/heartbeat-vps.json @@ -1,9 +1,9 @@ { "host": "vps", - "time": "2026-05-19T12:11:23+0800", + "time": "2026-05-19T12:12:24+0800", "branch": "main", - "head": "feb6e37", - "status": "clean", + "head": "9712265", + "status": "dirty", "intervalSeconds": 30, "heartbeatEverySeconds": 60 } diff --git a/tasks/T4-VPS-baseline.md b/tasks/T4-VPS-baseline.md index 017af1b..f80b4ce 100644 --- a/tasks/T4-VPS-baseline.md +++ b/tasks/T4-VPS-baseline.md @@ -36,7 +36,7 @@ Collect current VPS baseline evidence for OpenClaw Gateway, Gitea, Docker stack, ## Stop Conditions - Any command requests or prints a secret. -- Any step would modify `/opt/services/docker-composite.yml`, public website files, Nginx routes, Docker bind mounts, container images, or service state. +- Any step would modify `/opt/services/docker-compose.openclaw.yml`, equivalent website-affecting compose/service entries, public website files, Nginx routes, Docker bind mounts, container images, or service state. - Any restart, reload, approval, token rotation, or Gateway configuration change is required. ## Acceptance diff --git a/tasks/T6-VPS-baseline-verify.md b/tasks/T6-VPS-baseline-verify.md index 75c71c7..d3b8c3c 100644 --- a/tasks/T6-VPS-baseline-verify.md +++ b/tasks/T6-VPS-baseline-verify.md @@ -10,7 +10,7 @@ accepted - Accepted the VPS half of G1 with follow-up observations, not blockers. - Confirmed no approval, restart, reload, token rotation, Nginx route edit, Docker compose edit, bind mount change, image change, or service-state mutation was performed. - Confirmed the `smartmotor.cloud` filing-review freeze was not touched during T4/T6 baseline review. -- Follow-up observations to track before future mutation: `/opt/service` versus `/opt/services`, `docker-composite.yml` versus `docker-compose.openclaw.yml`, and the Nginx route/config anomaly where endpoints respond but mounted/generated route output did not show expected server blocks. +- Follow-up observations to track before future mutation: historical `/opt/service` references versus actual `/opt/services`, obsolete `docker-composite.yml` references versus actual `/opt/services/docker-compose.openclaw.yml`, and the Nginx route/config anomaly where endpoints respond but mounted/generated route output did not show expected server blocks. ## Owner @@ -30,7 +30,7 @@ The `smartmotor.cloud` filing-review freeze is a hard constraint throughout veri - VPS baseline evidence reviewed and accepted or returned with findings. - Confirmation that VPS_EXECUTOR did not accept its own work. -- Confirmation that no homepage content, linked page content reachable from the homepage, static assets, Nginx routing, Docker bind mounts, container images, service state, or `/opt/services/docker-composite.yml` entries were changed. +- Confirmation that no homepage content, linked page content reachable from the homepage, static assets, Nginx routing, Docker bind mounts, container images, service state, `/opt/services/docker-compose.openclaw.yml`, or equivalent website-affecting compose/service entries were changed. - Confirmation that Gateway, Nginx, Gitea, Confluence, and Postgres coexistence was only observed, not modified. - Confirmation that evidence contains no secrets.