Vendor OpenClaw source as Adolf fork baseline

Adolf is a fork/vendored clone of github.com/openclaw/openclaw (v2026.6.11),
free to diverge. Tree copied sans upstream .git; upstream remote added for
future syncs. Node pinned to 24 (.nvmrc); engines already require >=22.19.
Preserves docs/ARCHITECTURE.md.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LeqyaxJF2nbRXJtae2kNB2

extensions/zalouser/src/doctor.test.ts

@@ -0,0 +1,88 @@
+// Zalouser tests cover doctor plugin behavior.
+import { describe, expect, it } from "vitest";
+import { zalouserDoctor } from "./doctor.js";
+
+function getZaloUserCompatibilityNormalizer(): NonNullable<
+  typeof zalouserDoctor.normalizeCompatibilityConfig
+> {
+  const normalize = zalouserDoctor.normalizeCompatibilityConfig;
+  if (!normalize) {
+    throw new Error("Expected zalouser doctor to expose normalizeCompatibilityConfig");
+  }
+  return normalize;
+}
+
+describe("zalouser doctor", () => {
+  it("warns when mutable group names rely on disabled name matching", async () => {
+    const warnings = await Promise.resolve(
+      zalouserDoctor.collectMutableAllowlistWarnings?.({
+        cfg: {
+          channels: {
+            zalouser: {
+              groups: {
+                "group:trusted": {
+                  enabled: true,
+                },
+              },
+            },
+          },
+        } as never,
+      }) ?? [],
+    );
+
+    expect(
+      warnings.some((warning: string) =>
+        warning.includes("mutable allowlist entry across zalouser"),
+      ),
+    ).toBe(true);
+    expect(
+      warnings.some((warning: string) =>
+        warning.includes("channels.zalouser.groups: group:trusted"),
+      ),
+    ).toBe(true);
+  });
+
+  it("normalizes legacy group allow aliases to enabled", () => {
+    const normalize = getZaloUserCompatibilityNormalizer();
+
+    const result = normalize({
+      cfg: {
+        channels: {
+          zalouser: {
+            groups: {
+              "group:trusted": {
+                allow: true,
+              },
+            },
+            accounts: {
+              work: {
+                groups: {
+                  "group:legacy": {
+                    allow: false,
+                  },
+                },
+              },
+            },
+          },
+        },
+      } as never,
+    });
+
+    expect(result.config.channels?.zalouser?.groups?.["group:trusted"]).toEqual({
+      enabled: true,
+    });
+    expect(
+      (
+        result.config.channels?.zalouser?.accounts?.work as
+          | { groups?: Record<string, unknown> }
+          | undefined
+      )?.groups?.["group:legacy"],
+    ).toEqual({
+      enabled: false,
+    });
+    expect(result.changes).toEqual([
+      "Moved channels.zalouser.groups.group:trusted.allow → channels.zalouser.groups.group:trusted.enabled (true).",
+      "Moved channels.zalouser.accounts.work.groups.group:legacy.allow → channels.zalouser.accounts.work.groups.group:legacy.enabled (false).",
+    ]);
+  });
+});