Vendor OpenClaw source as Adolf fork baseline

Adolf is a fork/vendored clone of github.com/openclaw/openclaw (v2026.6.11),
free to diverge. Tree copied sans upstream .git; upstream remote added for
future syncs. Node pinned to 24 (.nvmrc); engines already require >=22.19.
Preserves docs/ARCHITECTURE.md.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LeqyaxJF2nbRXJtae2kNB2

qa/scenarios/models/codex-harness-no-meta-leak.yaml

@@ -0,0 +1,136 @@
+title: Codex harness no meta leak
+
+scenario:
+  id: codex-harness-no-meta-leak
+  surface: dm
+  coverage:
+    primary:
+      - models.codex-cli
+    secondary:
+      - runtime.no-meta-leak
+  objective: Verify the Codex app-server harness keeps coordination/meta chatter out of the visible reply.
+  successCriteria:
+    - The scenario forces the Codex embedded harness.
+    - The final visible reply includes the requested confirmation token.
+    - The visible reply does not include internal coordination or progress chatter.
+  docsRefs:
+    - docs/plugins/sdk-agent-harness.md
+    - docs/concepts/qa-e2e-automation.md
+    - docs/help/testing.md
+  codeRefs:
+    - extensions/codex/src/app-server/event-projector.ts
+    - extensions/qa-lab/src/reply-failure.ts
+    - extensions/qa-lab/src/suite.ts
+  execution:
+    kind: flow
+    summary: Run with `pnpm openclaw qa suite --provider-mode live-frontier --model openai/gpt-5.5 --alt-model openai/gpt-5.5 --fast --thinking medium --scenario codex-harness-no-meta-leak`.
+    config:
+      requiredProvider: codex
+      requiredModel: gpt-5.5
+      harnessRuntime: codex
+      expectedReply: QA_LEAK_OK
+      prompt: |-
+        Think through your answer privately, but do not expose any internal planning, thread-context checks, or progress narration.
+
+        Reply with exactly one line:
+        QA_LEAK_OK
+      forbiddenReplySubstrings:
+        - checking thread context
+        - thread context thin
+        - post a tight progress reply here
+        - posting a coordination nudge
+        - posted a short coordination reply
+        - not inventing status
+
+flow:
+  steps:
+    - name: confirms GPT-5.5 Codex harness target
+      actions:
+        - set: selected
+          value:
+            expr: splitModelRef(env.primaryModel)
+        - assert:
+            expr: "env.providerMode !== 'live-frontier' || selected?.provider === config.requiredProvider"
+            message:
+              expr: "`expected live primary provider ${config.requiredProvider}, got ${env.primaryModel}`"
+        - assert:
+            expr: "env.providerMode !== 'live-frontier' || selected?.model === config.requiredModel"
+            message:
+              expr: "`expected live primary model ${config.requiredModel}, got ${env.primaryModel}`"
+        - if:
+            expr: "env.providerMode !== 'live-frontier'"
+            then:
+              - assert: "true"
+            else:
+              - call: patchConfig
+                saveAs: patchResult
+                args:
+                  - env:
+                      ref: env
+                    patch:
+                      agents:
+                        defaults:
+                          models:
+                            expr: "({ [env.primaryModel]: { agentRuntime: { id: config.harnessRuntime } } })"
+              - call: waitForGatewayHealthy
+                args:
+                  - ref: env
+                  - 60000
+              - call: waitForQaChannelReady
+                args:
+                  - ref: env
+                  - 60000
+              - call: readConfigSnapshot
+                saveAs: snapshot
+                args:
+                  - ref: env
+              - assert:
+                  expr: "snapshot.config.agents?.defaults?.models?.[env.primaryModel]?.agentRuntime?.id === config.harnessRuntime"
+                  message:
+                    expr: "`expected ${env.primaryModel} agentRuntime.id=${config.harnessRuntime}, got ${JSON.stringify(snapshot.config.agents?.defaults?.models?.[env.primaryModel]?.agentRuntime)}`"
+      detailsExpr: "env.providerMode === 'live-frontier' ? `provider=${selected?.provider} model=${selected?.model} runtime=${snapshot.config.agents?.defaults?.models?.[env.primaryModel]?.agentRuntime?.id}` : `mock mode: parsed ${scenario.id}`"
+    - name: keeps codex coordination chatter out of the visible reply
+      actions:
+        - if:
+            expr: "env.providerMode !== 'live-frontier'"
+            then:
+              - assert: "true"
+            else:
+              - call: reset
+              - call: runAgentPrompt
+                args:
+                  - ref: env
+                  - sessionKey: agent:qa:codex-meta-leak
+                    message:
+                      expr: config.prompt
+                    provider:
+                      expr: selected?.provider
+                    model:
+                      expr: selected?.model
+                    timeoutMs:
+                      expr: resolveQaLiveTurnTimeoutMs(env, 180000, env.primaryModel)
+              - call: waitForOutboundMessage
+                saveAs: outbound
+                args:
+                  - ref: state
+                  - lambda:
+                      params: [candidate]
+                      expr: "candidate.conversation.id === 'qa-operator' && candidate.text.includes(config.expectedReply)"
+                  - expr: resolveQaLiveTurnTimeoutMs(env, 60000, env.primaryModel)
+              - set: outboundLower
+                value:
+                  expr: normalizeLowercaseStringOrEmpty(outbound.text)
+              - assert:
+                  expr: "outbound.text.trim() === config.expectedReply"
+                  message:
+                    expr: "`expected exact visible reply ${config.expectedReply}, got ${outbound.text}`"
+              - forEach:
+                  items:
+                    expr: "config.forbiddenReplySubstrings ?? []"
+                  item: forbidden
+                  actions:
+                    - assert:
+                        expr: "!outboundLower.includes(normalizeLowercaseStringOrEmpty(forbidden))"
+                        message:
+                          expr: "`visible reply leaked internal meta text (${forbidden}): ${outbound.text}`"
+      detailsExpr: "env.providerMode !== 'live-frontier' ? 'mock mode: skipped live codex leak check' : outbound.text"