Some checks failed
ClawSweeper Dispatch / dispatch (push) Has been cancelled
CodeQL / Security High (actions) (push) Has been cancelled
CodeQL / Security High (channel-runtime-boundary) (push) Has been cancelled
CodeQL / Security High (core-auth-secrets) (push) Has been cancelled
CodeQL / Security High (mcp-process-tool-boundary) (push) Has been cancelled
CodeQL / Security High (network-ssrf-boundary) (push) Has been cancelled
CodeQL / Security High (plugin-trust-boundary) (push) Has been cancelled
CodeQL / Security High (process-exec-boundary) (push) Has been cancelled
Docs Sync Publish Repo / sync-publish-repo (push) Has been cancelled
Docs / docs (push) Has been cancelled
OpenClaw Stable Main Closeout / Resolve stable release closeout inputs (push) Has been cancelled
OpenClaw Stable Main Closeout / Verify stable main closeout (push) Has been cancelled
Workflow Sanity / no-tabs (push) Has been cancelled
Workflow Sanity / actionlint (push) Has been cancelled
Workflow Sanity / generated-doc-baselines (push) Has been cancelled
CI / runner-admission (push) Has been cancelled
CI / preflight (push) Has been cancelled
CI / security-fast (push) Has been cancelled
CI / pnpm-store-warmup (push) Has been cancelled
CI / build-artifacts (push) Has been cancelled
CI / native-i18n (push) Has been cancelled
CI / ${{ matrix.check_name }} (push) Has been cancelled
CI / ${{ matrix.checkName }} (push) Has been cancelled
CI / checks-node-compat-node22 (push) Has been cancelled
CI / check-bundled-channel-config-metadata (push) Has been cancelled
CI / check-dependencies (push) Has been cancelled
CI / check-guards (push) Has been cancelled
CI / check-lint (push) Has been cancelled
CI / check-prod-types (push) Has been cancelled
CI / check-shrinkwrap (push) Has been cancelled
CI / check-test-types (push) Has been cancelled
CI / check-additional-boundaries-a (push) Has been cancelled
CI / check-additional-boundaries-bcd (push) Has been cancelled
CI / check-additional-extension-bundled (push) Has been cancelled
CI / check-additional-extension-channels (push) Has been cancelled
CI / check-additional-extension-package-boundary (push) Has been cancelled
CI / check-additional-runtime-topology-architecture (push) Has been cancelled
CI / check-session-accessor-boundary (push) Has been cancelled
CI / check-session-transcript-reader-boundary (push) Has been cancelled
CI / check-docs (push) Has been cancelled
CI / skills-python (push) Has been cancelled
CI / macos-swift (push) Has been cancelled
CI / ios-build (push) Has been cancelled
CI / ci-timings-summary (push) Has been cancelled
Native App Locale Refresh / Refresh native fa (push) Has been cancelled
Native App Locale Refresh / Refresh native fr (push) Has been cancelled
Native App Locale Refresh / Refresh native hi (push) Has been cancelled
Native App Locale Refresh / Refresh native id (push) Has been cancelled
Native App Locale Refresh / Refresh native it (push) Has been cancelled
Native App Locale Refresh / Refresh native ja-JP (push) Has been cancelled
Control UI Locale Refresh / plan (push) Has been cancelled
Control UI Locale Refresh / Refresh ${{ matrix.locale }} (push) Has been cancelled
Control UI Locale Refresh / Commit control UI locale refresh (push) Has been cancelled
Live Media Runner Image / Build live media runner image (push) Has been cancelled
Native App Locale Refresh / Refresh native ar (push) Has been cancelled
Native App Locale Refresh / Refresh native de (push) Has been cancelled
Native App Locale Refresh / Refresh native es (push) Has been cancelled
Native App Locale Refresh / Refresh native ko (push) Has been cancelled
Native App Locale Refresh / Refresh native nl (push) Has been cancelled
Native App Locale Refresh / Refresh native pl (push) Has been cancelled
Native App Locale Refresh / Refresh native pt-BR (push) Has been cancelled
Native App Locale Refresh / Refresh native ru (push) Has been cancelled
Native App Locale Refresh / Refresh native sv (push) Has been cancelled
Native App Locale Refresh / Refresh native th (push) Has been cancelled
Native App Locale Refresh / Refresh native tr (push) Has been cancelled
Native App Locale Refresh / Refresh native uk (push) Has been cancelled
Native App Locale Refresh / Refresh native vi (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-CN (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-TW (push) Has been cancelled
Native App Locale Refresh / Commit native locale refresh (push) Has been cancelled
Plugin Init Scaffold Validation / Validate provider scaffold (push) Has been cancelled
Plugin NPM Release / preview_plugins_npm (push) Has been cancelled
Plugin NPM Release / Validate release publish approval (push) Has been cancelled
Plugin NPM Release / preview_plugin_pack (push) Has been cancelled
Plugin NPM Release / publish_plugins_npm (push) Has been cancelled
Sandbox Common Smoke / sandbox-common-smoke (push) Has been cancelled
Website Installer Sync / static (push) Has been cancelled
Website Installer Sync / linux-docker (push) Has been cancelled
Website Installer Sync / macos-installer (push) Has been cancelled
Website Installer Sync / windows-installer (push) Has been cancelled
Website Installer Sync / sync-website (push) Has been cancelled
Adolf is a fork/vendored clone of github.com/openclaw/openclaw (v2026.6.11), free to diverge. Tree copied sans upstream .git; upstream remote added for future syncs. Node pinned to 24 (.nvmrc); engines already require >=22.19. Preserves docs/ARCHITECTURE.md. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01LeqyaxJF2nbRXJtae2kNB2
107 lines
3.4 KiB
YAML
107 lines
3.4 KiB
YAML
title: Runtime inventory drift check
|
|
|
|
scenario:
|
|
id: runtime-inventory-drift-check
|
|
surface: inventory
|
|
coverage:
|
|
primary:
|
|
- runtime.inventory
|
|
objective: Verify tools.effective and skills.status stay aligned with runtime behavior after config changes.
|
|
successCriteria:
|
|
- Enabled tool appears before the config change.
|
|
- After config change, disabled tool disappears from tools.effective.
|
|
- Disabled skill appears in skills.status with disabled state.
|
|
docsRefs:
|
|
- docs/gateway/protocol.md
|
|
- docs/tools/skills.md
|
|
- docs/tools/index.md
|
|
codeRefs:
|
|
- src/gateway/server-methods/tools-effective.ts
|
|
- src/gateway/server-methods/skills.ts
|
|
execution:
|
|
kind: flow
|
|
summary: Verify tools.effective and skills.status stay aligned with runtime behavior after config changes.
|
|
config:
|
|
skillName: qa-drift-skill
|
|
successMarker: DRIFT-SKILL-OK
|
|
skillBody: |-
|
|
---
|
|
name: qa-drift-skill
|
|
description: Drift skill marker
|
|
---
|
|
When the user asks for the drift skill marker exactly, reply with exactly: DRIFT-SKILL-OK
|
|
deniedTool: image_generate
|
|
|
|
flow:
|
|
steps:
|
|
- name: keeps tools.effective and skills.status aligned after config changes
|
|
actions:
|
|
- call: ensureImageGenerationConfigured
|
|
args:
|
|
- ref: env
|
|
- call: writeWorkspaceSkill
|
|
args:
|
|
- env:
|
|
ref: env
|
|
name:
|
|
expr: config.skillName
|
|
body:
|
|
expr: config.skillBody
|
|
- call: createSession
|
|
saveAs: sessionKey
|
|
args:
|
|
- ref: env
|
|
- Inventory drift
|
|
- call: readEffectiveTools
|
|
saveAs: beforeTools
|
|
args:
|
|
- ref: env
|
|
- ref: sessionKey
|
|
- assert:
|
|
expr: "beforeTools.has(config.deniedTool)"
|
|
message:
|
|
expr: "`expected ${config.deniedTool} before drift patch`"
|
|
- call: readSkillStatus
|
|
saveAs: beforeSkills
|
|
args:
|
|
- ref: env
|
|
- assert:
|
|
expr: "Boolean(findSkill(beforeSkills, config.skillName)?.eligible)"
|
|
message:
|
|
expr: "`expected ${config.skillName} to be eligible before patch`"
|
|
- call: patchConfig
|
|
args:
|
|
- env:
|
|
ref: env
|
|
patch:
|
|
tools:
|
|
deny:
|
|
- expr: config.deniedTool
|
|
skills:
|
|
entries:
|
|
expr: "({ [config.skillName]: { enabled: false } })"
|
|
- call: waitForGatewayHealthy
|
|
args:
|
|
- ref: env
|
|
- call: readEffectiveTools
|
|
saveAs: afterTools
|
|
args:
|
|
- ref: env
|
|
- ref: sessionKey
|
|
- assert:
|
|
expr: "!afterTools.has(config.deniedTool)"
|
|
message:
|
|
expr: "`${config.deniedTool} still present after deny patch`"
|
|
- call: readSkillStatus
|
|
saveAs: afterSkills
|
|
args:
|
|
- ref: env
|
|
- set: driftSkill
|
|
value:
|
|
expr: "findSkill(afterSkills, config.skillName)"
|
|
- assert:
|
|
expr: "Boolean(driftSkill?.disabled)"
|
|
message:
|
|
expr: "`expected disabled drift skill, got ${JSON.stringify(driftSkill)}`"
|
|
detailsExpr: "`${config.deniedTool} removed, ${config.skillName} marker=${config.successMarker} disabled=${String(driftSkill.disabled)}`"
|