# T10A - G2 VPS Gateway Pending Status Read-Only Check

## Status

done

## Owner

VPS_EXECUTOR

## Dependencies

- T9 is done.
- `evidence/pc-g2-node-run-20260521.md` reports the PC node connected to `openclaw.smartmotor.cloud`.
- No pairing request ID or pending node ID was provided by T9 evidence.
- T10 remains blocked.

## Scope

Perform a read-only Gateway status check to determine whether the intended PC node `desktop-vuor0gs` is pending approval, already online/approved, or not visible.

This task does not authorize approval, restart, reload, token handling, Gateway config mutation, Nginx changes, Docker compose edits, bind mount changes, image changes, service-state mutation, or frozen website output changes.

## Required Evidence

- Confirm target role/workspace: VPS_EXECUTOR in `/home/ubuntu/openclaw-control-plane`.
- Confirm latest `git pull` completed before checking.
- Confirm `docs/G2_RUNBOOK.md`, `tasks/T9-G2-PC-node-run.md`, `tasks/T10-G2-VPS-pairing-approve.md`, and this task were read.
- Exact read-only command shape used, without secrets.
- Non-secret Gateway status for `desktop-vuor0gs`: pending request ID, pending node ID, online/approved node ID, or not found.
- Confirmation that no `devices approve`, `nodes approve`, restart, reload, token rotation, config edit, Nginx edit, Docker compose edit, bind mount change, image change, service-state mutation, or frozen website output change was performed.
- Evidence written to `evidence/vps-g2-pending-status-YYYYMMDD.md`.
- `handoff/VPS_EXECUTOR.md` updated.

## Read-Only Command Templates

These are templates for VPS_EXECUTOR only. ORCHESTRATOR must not run them.

```bash
docker exec openclaw-gateway node openclaw.mjs nodes pending
docker exec openclaw-gateway node openclaw.mjs nodes list
docker exec openclaw-gateway node openclaw.mjs devices list
```

If a listed command is unavailable, VPS_EXECUTOR may use the nearest read-only `--help`, `list`, `status`, or `pending` command exposed by the Gateway CLI. Do not use approve/revoke/remove/update commands.

## Stop Conditions

- A command asks for or prints a token/password/secret.
- The intended PC identity is ambiguous.
- Multiple indistinguishable pending requests exist.
- The check requires approval, restart, reload, token rotation, config mutation, Nginx changes, Docker changes, or any action that could affect frozen `smartmotor.cloud` website output.
- Sync-health is blocked or files are not visible through Git.

## Prompt For VPS_EXECUTOR

```text
目标窗口：VPS_EXECUTOR
当前工作区：/home/ubuntu/openclaw-control-plane

请执行 T10A，只读检查 Gateway pending/online 状态，不 approve。

先 git pull，然后读取 USER_STATUS.md、AGENT_BOARD.md、docs/G2_RUNBOOK.md、tasks/T9-G2-PC-node-run.md、tasks/T10A-G2-VPS-pending-status-check.md、tasks/T10-G2-VPS-pairing-approve.md、handoff/VPS_EXECUTOR.md、sync-state/。

目标：
- 只读查询 openclaw-gateway 中 `desktop-vuor0gs` 是否有 pending request/node ID，或是否已经 online/approved。
- 只记录非 secret request/node ID、node ID、display name、状态摘要。

禁止：
- 不得 approve、restart、reload、rotate token、修改 Gateway/Nginx/Docker/compose/bind mount/image/service state。
- 不得读取、打印、记录任何 token/password/secret。
- 不得改变 frozen smartmotor.cloud 网站输出。

输出 evidence 到 evidence/vps-g2-pending-status-YYYYMMDD.md，并更新 handoff/VPS_EXECUTOR.md。
```

## Acceptance

ORCHESTRATOR uses this read-only evidence to decide whether T10 remains blocked pending a specific non-secret approval target, can be opened for a specific approval, or can be skipped because the intended PC node is already online/approved.

## Completion Notes

- VPS_EXECUTOR completed the read-only Gateway status check on 2026-05-21.
- Evidence: `evidence/vps-g2-pending-status-20260521.md`.
- Handoff updated: `handoff/VPS_EXECUTOR.md`.
- Result: `desktop-vuor0gs` was not visible as pending, paired, online, or approved; no non-secret request ID or node ID was found.
- No approval, restart, reload, token rotation, config edit, Nginx edit, Docker/compose edit, bind mount change, image change, service-state mutation, or frozen website output change was performed.