From 1758db5d27b8efa4d4ff78054b24aecc7cbbcb26 Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 13:34:52 +0000 Subject: [PATCH 01/29] chore: update HarborForge.Cli submodule --- HarborForge.Cli | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/HarborForge.Cli b/HarborForge.Cli index ddaea1c..cb0b766 160000 --- a/HarborForge.Cli +++ b/HarborForge.Cli @@ -1 +1 @@ -Subproject commit ddaea1c15b8735851b808da26a36b1205508592d +Subproject commit cb0b7669b3aeb0c34307d22ce93fc4fe7c3e557d From 47260f82c28a52c876c870514982ed6a831849e1 Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 13:50:48 +0000 Subject: [PATCH 02/29] chore: update Cli and OpenclawPlugin submodule refs (dev-2026-03-21) --- HarborForge.Cli | 2 +- HarborForge.OpenclawPlugin | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/HarborForge.Cli b/HarborForge.Cli index cb0b766..7d3cff7 160000 --- a/HarborForge.Cli +++ b/HarborForge.Cli @@ -1 +1 @@ -Subproject commit cb0b7669b3aeb0c34307d22ce93fc4fe7c3e557d +Subproject commit 7d3cff7d950d2e7dcfcc13bd44656e7f33f35c30 diff --git a/HarborForge.OpenclawPlugin b/HarborForge.OpenclawPlugin index afdbc46..94eca82 160000 --- a/HarborForge.OpenclawPlugin +++ b/HarborForge.OpenclawPlugin @@ -1 +1 @@ -Subproject commit afdbc469ad845b8b19b3714e8e0b2c86f8c6cc69 +Subproject commit 94eca82fc7eec552f1a124b3921008053222d779 From 6e531f91170e56ddd3d725beaf0931da00f7afb7 Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 14:05:59 +0000 Subject: [PATCH 03/29] Update HarborForge.Cli help stubs --- HarborForge.Cli | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/HarborForge.Cli b/HarborForge.Cli index 7d3cff7..f18eb36 160000 --- a/HarborForge.Cli +++ b/HarborForge.Cli @@ -1 +1 @@ -Subproject commit 7d3cff7d950d2e7dcfcc13bd44656e7f33f35c30 +Subproject commit f18eb366ebf8c611ad611874e2f7740ffab77a38 From 56dc5ef3d63bc08d74a2c27e28635420a6650b66 Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 14:14:10 +0000 Subject: [PATCH 04/29] docs: settle hf permission introspection strategy --- plans/harborforge-cli-go-plan.md | 48 ++++++++++++++++++++++++++++++++ plans/hf-cross-project-todo.md | 4 ++- 2 files changed, 51 insertions(+), 1 deletion(-) diff --git a/plans/harborforge-cli-go-plan.md b/plans/harborforge-cli-go-plan.md index 6daa338..507fa17 100644 --- a/plans/harborforge-cli-go-plan.md +++ b/plans/harborforge-cli-go-plan.md @@ -423,6 +423,54 @@ For leaf commands, this behaves the same as `--help`: --- +## Permission Introspection Strategy + +The permission introspection strategy is now considered **decided**. + +### Normal command permission model + +For normal authenticated commands, the CLI should determine permissions through the authenticated user context derived from the token: + +1. resolve the current user from the token +2. obtain the user's role +3. obtain that role's permissions +4. use those effective permissions to determine: + - `--help` output + - `--help-brief` output + - whether a subcommand is shown normally or marked `(not permitted)` + +This applies to normal command groups such as: +- `user` (except `user create`) +- `role` +- `project` +- `milestone` +- `task` +- `meeting` +- `support` +- `propose` +- `monitor` + +### Special-flow exception: `hf user create` + +`hf user create` does **not** use the normal user-token permission model. +It remains a special account-manager-token flow. + +That means: +- normal permission introspection from the current user token should not be the gating mechanism for `hf user create` +- `hf user create` help visibility should be handled independently of ordinary `user.write` capability + +### Backend implication + +Backend support for this strategy should ensure the CLI can derive: +- current user identity +- current user's role +- current role permissions + +Whether this comes from one endpoint or multiple backend calls is an implementation detail. +The strategy itself is settled: **token → user → role → permissions**. + +--- + ## Credential / Auth Rules ## Normal authenticated commands diff --git a/plans/hf-cross-project-todo.md b/plans/hf-cross-project-todo.md index 7646f37..5cdcfaa 100644 --- a/plans/hf-cross-project-todo.md +++ b/plans/hf-cross-project-todo.md @@ -11,7 +11,9 @@ - [ ] Finalize MVP scope for first shipping version of `hf` - [ ] Confirm which existing backend routes can be reused vs which new routes are needed - [ ] Define canonical code-first lookup policy across all resources -- [ ] Define permission introspection strategy for `--help` / `--help-brief` +- [x] Define permission introspection strategy for `--help` / `--help-brief` + - settled as: token → current user → user role → role permissions + - `hf user create` remains a special account-manager-token flow and is not gated by ordinary user-token write permission - [ ] Define JSON output contract for CLI list/get commands - [ ] Define CLI exit code / stderr conventions - [ ] Define local plugin↔monitor communication protocol over `monitor_port` From daaf738c338420130f456d8100ae8500e4847de5 Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 14:22:28 +0000 Subject: [PATCH 05/29] chore: update Backend and Cli submodule refs (dev-2026-03-21) Backend: username-based user lookup + permission introspection endpoint Cli: implement all user commands (list, get, create, update, activate, deactivate, delete) --- HarborForge.Backend | 2 +- HarborForge.Cli | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/HarborForge.Backend b/HarborForge.Backend index 271d514..e5fd89f 160000 --- a/HarborForge.Backend +++ b/HarborForge.Backend @@ -1 +1 @@ -Subproject commit 271d5140e63a7c961b6a964b8aed91e6d30b40b4 +Subproject commit e5fd89f9723758d618afd86e463c98dc1d6fd4f0 diff --git a/HarborForge.Cli b/HarborForge.Cli index f18eb36..25114aa 160000 --- a/HarborForge.Cli +++ b/HarborForge.Cli @@ -1 +1 @@ -Subproject commit f18eb366ebf8c611ad611874e2f7740ffab77a38 +Subproject commit 25114aa17ceb4b10b2bc0b8a52fbfbb208c14172 From 72aa3dce2ec9f64e3396c804301cf2c387784059 Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 14:37:46 +0000 Subject: [PATCH 06/29] Update HarborForge.Cli permission-aware help --- HarborForge.Cli | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/HarborForge.Cli b/HarborForge.Cli index 25114aa..69287d5 160000 --- a/HarborForge.Cli +++ b/HarborForge.Cli @@ -1 +1 @@ -Subproject commit 25114aa17ceb4b10b2bc0b8a52fbfbb208c14172 +Subproject commit 69287d5a49cce12f23391b3dd1960c7ff7aa89fc From 5e677d77d7f040c8ebaea88d67f53ea5e4d2866c Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 14:50:52 +0000 Subject: [PATCH 07/29] chore: update HarborForge.Cli submodule (role/project/milestone/task commands) --- HarborForge.Cli | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/HarborForge.Cli b/HarborForge.Cli index 69287d5..57af151 160000 --- a/HarborForge.Cli +++ b/HarborForge.Cli @@ -1 +1 @@ -Subproject commit 69287d5a49cce12f23391b3dd1960c7ff7aa89fc +Subproject commit 57af1512d1701d74bbc91055b02b0bb95ba46a68 From 707a0787e6eb08dbd36cbcfa4b9b945e4eab102d Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 15:07:05 +0000 Subject: [PATCH 08/29] Update HarborForge.Cli role API alignment --- HarborForge.Cli | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/HarborForge.Cli b/HarborForge.Cli index 57af151..a01e602 160000 --- a/HarborForge.Cli +++ b/HarborForge.Cli @@ -1 +1 @@ -Subproject commit 57af1512d1701d74bbc91055b02b0bb95ba46a68 +Subproject commit a01e6021180b250af4dea4f7f98a8aecaa69c8d8 From a27428a6856b2dcdc2c75a36da363d12d3c552fd Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 15:25:31 +0000 Subject: [PATCH 09/29] chore: update submodule pointers for CLI commands, plugin rename, and monitor port - HarborForge.Cli: meeting, support, propose, monitor command groups - HarborForge.OpenclawPlugin: renamed to harbor-forge, removed sidecar, --install-cli - HarborForge.Monitor: MONITOR_PORT env var and config field --- HarborForge.Cli | 2 +- HarborForge.Monitor | 2 +- HarborForge.OpenclawPlugin | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/HarborForge.Cli b/HarborForge.Cli index a01e602..34f52cb 160000 --- a/HarborForge.Cli +++ b/HarborForge.Cli @@ -1 +1 @@ -Subproject commit a01e6021180b250af4dea4f7f98a8aecaa69c8d8 +Subproject commit 34f52cb9e398ad215ec93acc3fb8dbb475c952da diff --git a/HarborForge.Monitor b/HarborForge.Monitor index 739b8fc..ccfa49b 160000 --- a/HarborForge.Monitor +++ b/HarborForge.Monitor @@ -1 +1 @@ -Subproject commit 739b8fcd742c80760f0f3ef23aa6edad77cc053a +Subproject commit ccfa49bc7daff0242f328af2e52495d6abd98b4b diff --git a/HarborForge.OpenclawPlugin b/HarborForge.OpenclawPlugin index 94eca82..9f649e2 160000 --- a/HarborForge.OpenclawPlugin +++ b/HarborForge.OpenclawPlugin @@ -1 +1 @@ -Subproject commit 94eca82fc7eec552f1a124b3921008053222d779 +Subproject commit 9f649e2b39118ef27aa4fc6aa299dddc0219d676 From 55bc99c67dc2cac41635abc9218abe9c1512302b Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 15:37:17 +0000 Subject: [PATCH 10/29] Update HarborForge.Cli leaf help output --- HarborForge.Cli | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/HarborForge.Cli b/HarborForge.Cli index 34f52cb..eaf4f21 160000 --- a/HarborForge.Cli +++ b/HarborForge.Cli @@ -1 +1 @@ -Subproject commit 34f52cb9e398ad215ec93acc3fb8dbb475c952da +Subproject commit eaf4f215b55bb101882033119f6cfb9b99f8b42e From c33d9e4ed39e4088362f495afd0cd8b4badeda80 Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 16:07:16 +0000 Subject: [PATCH 11/29] Update HarborForge submodules for CLI and monitor work --- HarborForge.Backend | 2 +- HarborForge.Cli | 2 +- HarborForge.Frontend | 2 +- HarborForge.Monitor | 2 +- HarborForge.OpenclawPlugin | 2 +- .../cron/hf-bootstrap-2026-03-21-state.json | 5 ++ .../cron/hf-bootstrap-2026-03-21.prompt.md | 54 +++++++++++++++++++ .../cron/hf-dev-kimi-2026-03-21.prompt.md | 25 +++++++++ .../cron/hf-dev-opus-2026-03-21.prompt.md | 25 +++++++++ 9 files changed, 114 insertions(+), 5 deletions(-) create mode 100644 plans/automation/cron/hf-bootstrap-2026-03-21-state.json create mode 100644 plans/automation/cron/hf-bootstrap-2026-03-21.prompt.md create mode 100644 plans/automation/cron/hf-dev-kimi-2026-03-21.prompt.md create mode 100644 plans/automation/cron/hf-dev-opus-2026-03-21.prompt.md diff --git a/HarborForge.Backend b/HarborForge.Backend index e5fd89f..32e79a4 160000 --- a/HarborForge.Backend +++ b/HarborForge.Backend @@ -1 +1 @@ -Subproject commit e5fd89f9723758d618afd86e463c98dc1d6fd4f0 +Subproject commit 32e79a41d866923e975d0ca86c7dcee17920b275 diff --git a/HarborForge.Cli b/HarborForge.Cli index eaf4f21..ebad3cd 160000 --- a/HarborForge.Cli +++ b/HarborForge.Cli @@ -1 +1 @@ -Subproject commit eaf4f215b55bb101882033119f6cfb9b99f8b42e +Subproject commit ebad3cd0d3da2919e5851e97c4f86c5617d817f1 diff --git a/HarborForge.Frontend b/HarborForge.Frontend index fd28bb6..dc97764 160000 --- a/HarborForge.Frontend +++ b/HarborForge.Frontend @@ -1 +1 @@ -Subproject commit fd28bb6b6f580110fa9338f6b72da9fa53b41d3c +Subproject commit dc97764e431fb213b451160c45fbf52ea4eeeef5 diff --git a/HarborForge.Monitor b/HarborForge.Monitor index ccfa49b..360743b 160000 --- a/HarborForge.Monitor +++ b/HarborForge.Monitor @@ -1 +1 @@ -Subproject commit ccfa49bc7daff0242f328af2e52495d6abd98b4b +Subproject commit 360743ba6bcbef6cfb7a70d1b4aab8b7c107ebe8 diff --git a/HarborForge.OpenclawPlugin b/HarborForge.OpenclawPlugin index 9f649e2..78a61e0 160000 --- a/HarborForge.OpenclawPlugin +++ b/HarborForge.OpenclawPlugin @@ -1 +1 @@ -Subproject commit 9f649e2b39118ef27aa4fc6aa299dddc0219d676 +Subproject commit 78a61e0fb2a7b6799fd9550c2fc70027c3bb1058 diff --git a/plans/automation/cron/hf-bootstrap-2026-03-21-state.json b/plans/automation/cron/hf-bootstrap-2026-03-21-state.json new file mode 100644 index 0000000..7d40d6e --- /dev/null +++ b/plans/automation/cron/hf-bootstrap-2026-03-21-state.json @@ -0,0 +1,5 @@ +{ + "wakeCount": 4, + "createdAt": "2026-03-21T12:25:00Z", + "updatedAt": "2026-03-21T13:29:00Z" +} diff --git a/plans/automation/cron/hf-bootstrap-2026-03-21.prompt.md b/plans/automation/cron/hf-bootstrap-2026-03-21.prompt.md new file mode 100644 index 0000000..0a663e7 --- /dev/null +++ b/plans/automation/cron/hf-bootstrap-2026-03-21.prompt.md @@ -0,0 +1,54 @@ +你是 developer agent 的一个 15 分钟编排 cron 任务。 + +请在每次被唤醒时，维护并读取下面这个状态文件： +`/root/.openclaw/workspace/workspace-developer/HarborForge/plans/automation/cron/hf-bootstrap-2026-03-21-state.json` + +规则： +1. 读取 `wakeCount`。 +2. 将其 +1 并写回文件。 +3. 根据新的 wakeCount 执行对应动作。 +4. 每次执行结束后，向 Discord 频道 `1474327736242798612` announce 汇报执行结果。 + +动作定义： + +## 第 1 次唤醒 +执行： +- 把 HarborForge 主仓和所有子模块从 `main` 拉取最新代码 +- 给所有子模块创建开发分支：`dev-2026-03-21` +- 如分支已存在，则切换到该分支并确保它基于最新 main + +## 第 2 次唤醒 +执行： +- 创建第二个 cron 定时任务：`hf-dev-kimi-2026-03-21` +- 频率：每 30 分钟一次 +- agent：`developer` +- model：`kimi-coding/k2p5` +- session：`isolated` +- announce：开启 +- channel：`discord` +- to：`1474327736242798612` +- message 内容使用文件： + `/root/.openclaw/workspace/workspace-developer/HarborForge/plans/automation/cron/hf-dev-kimi-2026-03-21.prompt.md` +- 如果同名任务已存在，则不要重复创建 + +## 第 3 次唤醒 +执行： +- 创建第三个 cron 定时任务：`hf-dev-opus-2026-03-21` +- 频率：每 30 分钟一次 +- agent：`developer` +- model：`anthropic/claude-opus-4-6` +- 其余参数与第二个任务完全一致 +- message 内容使用文件： + `/root/.openclaw/workspace/workspace-developer/HarborForge/plans/automation/cron/hf-dev-opus-2026-03-21.prompt.md` +- 如果同名任务已存在，则不要重复创建 + +## 第 4 次唤醒 +执行： +- 删除你自己这个 cron 定时任务 +- 先通过 `openclaw cron list --json` 找到名称为 `hf-bootstrap-2026-03-21` 的 job id +- 然后执行 `openclaw cron remove ` + +额外要求： +- 执行中可以使用 shell / openclaw CLI 完成 cron 管理 +- 如果某一步失败，要在 announce 中说明失败原因 +- 不要跳步；严格按 wakeCount 对应动作执行 diff --git a/plans/automation/cron/hf-dev-kimi-2026-03-21.prompt.md b/plans/automation/cron/hf-dev-kimi-2026-03-21.prompt.md new file mode 100644 index 0000000..ac9a973 --- /dev/null +++ b/plans/automation/cron/hf-dev-kimi-2026-03-21.prompt.md @@ -0,0 +1,25 @@ +你是 developer agent 的一个 cron 定时开发任务。 + +目标：参考 HarborForge 主仓中的开发计划与 TODO list，寻找当前可以推进的任务并进行开发。 + +严格要求： +1. 工作目录以 `/root/.openclaw/workspace/workspace-developer/HarborForge` 为主。 +2. 优先参考： + - `plans/harborforge-cli-go-plan.md` + - `plans/hf-cross-project-todo.md` +3. 只做当前明确可推进的任务，不要凭空发散。 +4. 无需做 Test 子模块下的复杂测试。 +5. 尤其禁止运行：`run-test-frontend`。 +6. 可以做轻量验证，例如：编译、lint、py_compile、类型检查、局部单测、静态检查等。 +7. 每次完成后，把所有脏模块分别提交并 push 到分支：`dev-2026-03-21`。 +8. 如果发现 todo list 中所有待办都已完成，则删除你自己这个 cron 定时任务。 + - 先通过 `openclaw cron list --json` 找到名称为 `hf-dev-kimi-2026-03-21` 的 job id + - 然后执行 `openclaw cron remove ` +9. 每次运行结束前，给 Discord 频道 `1474327736242798612` 做 announce 汇报。 + +建议汇报内容： +- 本次选择的 TODO +- 修改了哪些子模块 +- 做了哪些轻量验证 +- push 了哪些分支/提交 +- 是否发现阻塞 diff --git a/plans/automation/cron/hf-dev-opus-2026-03-21.prompt.md b/plans/automation/cron/hf-dev-opus-2026-03-21.prompt.md new file mode 100644 index 0000000..1650bf6 --- /dev/null +++ b/plans/automation/cron/hf-dev-opus-2026-03-21.prompt.md @@ -0,0 +1,25 @@ +你是 developer agent 的一个 cron 定时开发任务。 + +目标：参考 HarborForge 主仓中的开发计划与 TODO list，寻找当前可以推进的任务并进行开发。 + +严格要求： +1. 工作目录以 `/root/.openclaw/workspace/workspace-developer/HarborForge` 为主。 +2. 优先参考： + - `plans/harborforge-cli-go-plan.md` + - `plans/hf-cross-project-todo.md` +3. 只做当前明确可推进的任务，不要凭空发散。 +4. 无需做 Test 子模块下的复杂测试。 +5. 尤其禁止运行：`run-test-frontend`。 +6. 可以做轻量验证，例如：编译、lint、py_compile、类型检查、局部单测、静态检查等。 +7. 每次完成后，把所有脏模块分别提交并 push 到分支：`dev-2026-03-21`。 +8. 如果发现 todo list 中所有待办都已完成，则删除你自己这个 cron 定时任务。 + - 先通过 `openclaw cron list --json` 找到名称为 `hf-dev-opus-2026-03-21` 的 job id + - 然后执行 `openclaw cron remove ` +9. 每次运行结束前，给 Discord 频道 `1474327736242798612` 做 announce 汇报。 + +建议汇报内容： +- 本次选择的 TODO +- 修改了哪些子模块 +- 做了哪些轻量验证 +- push 了哪些分支/提交 +- 是否发现阻塞 From 1cfbf03a7bbe52220bc0b849dc6a4e711a7070e8 Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 16:37:51 +0000 Subject: [PATCH 12/29] Update HarborForge.Cli nested help coverage --- HarborForge.Cli | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/HarborForge.Cli b/HarborForge.Cli index ebad3cd..1e8437d 160000 --- a/HarborForge.Cli +++ b/HarborForge.Cli @@ -1 +1 @@ -Subproject commit ebad3cd0d3da2919e5851e97c4f86c5617d817f1 +Subproject commit 1e8437d0b1b73b227f91cd93ea3d3a1ca4e50982 From 41299063c88f5df71c8f1dbdfe22b5da1e5513b3 Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 17:11:30 +0000 Subject: [PATCH 13/29] Update HarborForge.Cli comment/worklog support --- HarborForge.Cli | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/HarborForge.Cli b/HarborForge.Cli index 1e8437d..9b3edc0 160000 --- a/HarborForge.Cli +++ b/HarborForge.Cli @@ -1 +1 @@ -Subproject commit 1e8437d0b1b73b227f91cd93ea3d3a1ca4e50982 +Subproject commit 9b3edc0ede4a3ba84c121a1c69fa5c1bd1b9b995 From ace119a4468d5f0211f0daade219c982085f9d6a Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 17:39:40 +0000 Subject: [PATCH 14/29] Sync CLI progress and contracts --- HarborForge.Cli | 2 +- plans/hf-cross-project-todo.md | 272 +++++++++++++++++---------------- 2 files changed, 139 insertions(+), 135 deletions(-) diff --git a/HarborForge.Cli b/HarborForge.Cli index 9b3edc0..cc649a7 160000 --- a/HarborForge.Cli +++ b/HarborForge.Cli @@ -1 +1 @@ -Subproject commit 9b3edc0ede4a3ba84c121a1c69fa5c1bd1b9b995 +Subproject commit cc649a7fe27d0f2bc3b1790d0fa91931b35d0a02 diff --git a/plans/hf-cross-project-todo.md b/plans/hf-cross-project-todo.md index 5cdcfaa..e32faa3 100644 --- a/plans/hf-cross-project-todo.md +++ b/plans/hf-cross-project-todo.md @@ -10,186 +10,190 @@ - [ ] Finalize MVP scope for first shipping version of `hf` - [ ] Confirm which existing backend routes can be reused vs which new routes are needed -- [ ] Define canonical code-first lookup policy across all resources +- [x] Define canonical code-first lookup policy across all resources - [x] Define permission introspection strategy for `--help` / `--help-brief` - settled as: token → current user → user role → role permissions - `hf user create` remains a special account-manager-token flow and is not gated by ordinary user-token write permission -- [ ] Define JSON output contract for CLI list/get commands -- [ ] Define CLI exit code / stderr conventions +- [x] Define JSON output contract for CLI list/get commands + - current CLI contract: `--json` emits raw success payloads on stdout without a universal envelope; list/get responses should preserve canonical code-bearing fields when backend payloads provide them +- [x] Define CLI exit code / stderr conventions + - current CLI contract: success exits `0`; validation/runtime failures exit `1`; errors go to stderr and successful output goes to stdout - [ ] Define local plugin↔monitor communication protocol over `monitor_port` - [ ] Define release order across submodules - [ ] Define rollback strategy if plugin / monitor bridge is unavailable +> Note: the CLI contract items above are now documented from the currently implemented `HarborForge.Cli` behavior; they can still be refined later if a stricter release contract is needed. + --- ## 1. HarborForge.Cli ### 1.1 Go project scaffold -- [ ] Initialize Go module for `hf` -- [ ] Add binary entrypoint (`cmd/hf/main.go` or equivalent) -- [ ] Add internal package layout (`config`, `help`, `mode`, `passmgr`, `client`, `commands`) -- [ ] Add build instructions to `README.md` -- [ ] Add `.gitignore` for Go artifacts +- [x] Initialize Go module for `hf` +- [x] Add binary entrypoint (`cmd/hf/main.go` or equivalent) +- [x] Add internal package layout (`config`, `help`, `mode`, `passmgr`, `client`, `commands`) +- [x] Add build instructions to `README.md` +- [x] Add `.gitignore` for Go artifacts - [ ] Add repo-config-safe contribution note if needed ### 1.2 Runtime mode detection -- [ ] Implement `which pass_mgr` detection on startup -- [ ] Add runtime mode enum: padded-cell mode / manual mode -- [ ] Block manual credential flags in padded-cell mode -- [ ] Return exact error when forbidden manual token flags are used: - - [ ] `padded-cell installed, --token flag disabled, use command directly` -- [ ] Define equivalent handling for `--acc-mgr-token` and related manual secret flags +- [x] Implement `which pass_mgr` detection on startup +- [x] Add runtime mode enum: padded-cell mode / manual mode +- [x] Block manual credential flags in padded-cell mode +- [x] Return exact error when forbidden manual token flags are used: + - [x] `padded-cell installed, --token flag disabled, use command directly` +- [x] Define equivalent handling for `--acc-mgr-token` and related manual secret flags ### 1.3 Config handling -- [ ] Resolve binary directory correctly at runtime -- [ ] Read `/.hf-config.json` -- [ ] Write/update `base-url` via `hf config --url` -- [ ] Add config validation for malformed/missing config -- [ ] Add `hf config --acc-mgr-token` -- [ ] Implement `pass_mgr set --public --key hf-acc-mgr-token --secret ` -- [ ] Return exact error on failure: - - [ ] `--acc-mgr-token can only be set with padded-cell plugin` +- [x] Resolve binary directory correctly at runtime +- [x] Read `/.hf-config.json` +- [x] Write/update `base-url` via `hf config --url` +- [x] Add config validation for malformed/missing config +- [x] Add `hf config --acc-mgr-token` +- [x] Implement `pass_mgr set --public --key hf-acc-mgr-token --secret ` +- [x] Return exact error on failure: + - [x] `--acc-mgr-token can only be set with padded-cell plugin` ### 1.4 Help system -- [ ] Implement `hf --help` -- [ ] Implement `hf --help-brief` -- [ ] Implement ` --help` -- [ ] Implement ` --help-brief` -- [ ] Implement leaf command `--help` -- [ ] Implement leaf command `--help-brief` -- [ ] Show all subcommands in normal help, marking unavailable ones as `(not permitted)` -- [ ] Hide unavailable commands entirely in `--help-brief` -- [ ] Ensure leaf `--help` for unavailable commands only prints `not permitted` -- [ ] Hide manual auth flags from help in padded-cell mode -- [ ] Show required manual auth flags in help in manual mode -- [ ] Handle special help behavior for `hf user create` +- [x] Implement `hf --help` +- [x] Implement `hf --help-brief` +- [x] Implement ` --help` +- [x] Implement ` --help-brief` +- [x] Implement leaf command `--help` +- [x] Implement leaf command `--help-brief` +- [x] Show all subcommands in normal help, marking unavailable ones as `(not permitted)` +- [x] Hide unavailable commands entirely in `--help-brief` +- [x] Ensure leaf `--help` for unavailable commands only prints `not permitted` +- [x] Hide manual auth flags from help in padded-cell mode +- [x] Show required manual auth flags in help in manual mode +- [x] Handle special help behavior for `hf user create` ### 1.5 Auth/token resolution layer -- [ ] Implement shared normal token resolution helper -- [ ] In padded-cell mode, resolve via `pass_mgr get-secret --key hf-token` -- [ ] In manual mode, require explicit `--token` -- [ ] Emit exact error on missing manual token: - - [ ] `--token required or execute this with pcexec` -- [ ] Ensure `hf --help` never requires token -- [ ] Ensure subcommand help can render even when token is unavailable +- [x] Implement shared normal token resolution helper +- [x] In padded-cell mode, resolve via `pass_mgr get-secret --key hf-token` +- [x] In manual mode, require explicit `--token` +- [x] Emit exact error on missing manual token: + - [x] `--token required or execute this with pcexec` +- [x] Ensure `hf --help` never requires token +- [x] Ensure subcommand help can render even when token is unavailable ### 1.6 Output model -- [ ] Add default human-readable output mode -- [ ] Add `--json` output mode -- [ ] Ensure list outputs include canonical resource code fields -- [ ] Ensure machine-readable output is stable enough for agent use +- [x] Add default human-readable output mode +- [x] Add `--json` output mode +- [x] Ensure list outputs include canonical resource code fields +- [x] Ensure machine-readable output is stable enough for agent use ### 1.7 Base commands -- [ ] Implement `hf version` -- [ ] Implement `hf health` +- [x] Implement `hf version` +- [x] Implement `hf health` ### 1.8 User commands -- [ ] Implement `hf user create` -- [ ] Forbid `--token` on `hf user create` -- [ ] Do not support `--role` on `hf user create` -- [ ] Default created accounts to `guest` -- [ ] In padded-cell mode, auto-generate password with: - - [ ] `pass_mgr generate --key hf --username ` -- [ ] In padded-cell mode, auto-fetch account-manager token with: - - [ ] `pass_mgr get-secret --public --key hf-acc-mgr-token` -- [ ] Emit exact missing-password error: - - [ ] `--pass required or execute with pcexec` -- [ ] Emit exact missing-account-manager-token error: - - [ ] `--acc-mgr-token required or execute with pcexec` -- [ ] Implement `hf user list` -- [ ] Implement `hf user get ` -- [ ] Implement `hf user update ` -- [ ] Implement `hf user activate ` -- [ ] Implement `hf user deactivate ` -- [ ] Implement `hf user delete ` +- [x] Implement `hf user create` +- [x] Forbid `--token` on `hf user create` +- [x] Do not support `--role` on `hf user create` +- [x] Default created accounts to `guest` +- [x] In padded-cell mode, auto-generate password with: + - [x] `pass_mgr generate --key hf --username ` +- [x] In padded-cell mode, auto-fetch account-manager token with: + - [x] `pass_mgr get-secret --public --key hf-acc-mgr-token` +- [x] Emit exact missing-password error: + - [x] `--pass required or execute with pcexec` +- [x] Emit exact missing-account-manager-token error: + - [x] `--acc-mgr-token required or execute with pcexec` +- [x] Implement `hf user list` +- [x] Implement `hf user get ` +- [x] Implement `hf user update ` +- [x] Implement `hf user activate ` +- [x] Implement `hf user deactivate ` +- [x] Implement `hf user delete ` ### 1.9 Role / permission commands -- [ ] Implement `hf role list` -- [ ] Implement `hf role get ` -- [ ] Implement `hf role create` -- [ ] Implement `hf role update` -- [ ] Implement `hf role delete` -- [ ] Implement `hf permission list` -- [ ] Implement `hf role set-permissions` -- [ ] Implement `hf role add-permissions` -- [ ] Implement `hf role remove-permissions` +- [x] Implement `hf role list` +- [x] Implement `hf role get ` +- [x] Implement `hf role create` +- [x] Implement `hf role update` +- [x] Implement `hf role delete` +- [x] Implement `hf permission list` +- [x] Implement `hf role set-permissions` +- [x] Implement `hf role add-permissions` +- [x] Implement `hf role remove-permissions` ### 1.10 Project / milestone commands -- [ ] Implement `hf project list` -- [ ] Implement `hf project get ` -- [ ] Implement `hf project create` -- [ ] Implement `hf project update ` -- [ ] Implement `hf project delete ` -- [ ] Implement `hf project members ` -- [ ] Implement `hf project add-member ` -- [ ] Implement `hf project remove-member ` -- [ ] Implement `hf milestone list --project ` -- [ ] Implement `hf milestone get ` -- [ ] Implement `hf milestone create` -- [ ] Implement `hf milestone update ` -- [ ] Implement `hf milestone delete ` -- [ ] Implement `hf milestone progress ` +- [x] Implement `hf project list` +- [x] Implement `hf project get ` +- [x] Implement `hf project create` +- [x] Implement `hf project update ` +- [x] Implement `hf project delete ` +- [x] Implement `hf project members ` +- [x] Implement `hf project add-member ` +- [x] Implement `hf project remove-member ` +- [x] Implement `hf milestone list --project ` +- [x] Implement `hf milestone get ` +- [x] Implement `hf milestone create` +- [x] Implement `hf milestone update ` +- [x] Implement `hf milestone delete ` +- [x] Implement `hf milestone progress ` ### 1.11 Task commands -- [ ] Implement `hf task list` -- [ ] Add filters: - - [ ] `--project ` - - [ ] `--milestone ` - - [ ] `--status ` - - [ ] `--taken-by ` - - [ ] `--due-today ` - - [ ] repeated `--order-by ` -- [ ] Implement `hf task get ` -- [ ] Implement `hf task create` -- [ ] Implement `hf task update ` -- [ ] Implement `hf task transition ` -- [ ] Implement `hf task take ` -- [ ] Return clear error when task is already taken by someone else -- [ ] Return clear error when caller lacks permission to take task -- [ ] Implement `hf task delete ` -- [ ] Implement `hf task search` +- [x] Implement `hf task list` +- [x] Add filters: + - [x] `--project ` + - [x] `--milestone ` + - [x] `--status ` + - [x] `--taken-by ` + - [x] `--due-today ` + - [x] repeated `--order-by ` +- [x] Implement `hf task get ` +- [x] Implement `hf task create` +- [x] Implement `hf task update ` +- [x] Implement `hf task transition ` +- [x] Implement `hf task take ` +- [x] Return clear error when task is already taken by someone else +- [x] Return clear error when caller lacks permission to take task +- [x] Implement `hf task delete ` +- [x] Implement `hf task search` ### 1.12 Meeting commands -- [ ] Implement `hf meeting list` -- [ ] Implement `hf meeting get ` -- [ ] Implement `hf meeting create` -- [ ] Implement `hf meeting update ` -- [ ] Implement `hf meeting attend ` -- [ ] Ensure attend adds caller to participant list -- [ ] Implement `hf meeting delete ` +- [x] Implement `hf meeting list` +- [x] Implement `hf meeting get ` +- [x] Implement `hf meeting create` +- [x] Implement `hf meeting update ` +- [x] Implement `hf meeting attend ` +- [x] Ensure attend adds caller to participant list +- [x] Implement `hf meeting delete ` ### 1.13 Support commands -- [ ] Implement `hf support list` -- [ ] Implement `hf support get ` -- [ ] Implement `hf support create` -- [ ] Implement `hf support update ` -- [ ] Implement `hf support take ` -- [ ] Implement `hf support transition ` -- [ ] Implement `hf support delete ` +- [x] Implement `hf support list` +- [x] Implement `hf support get ` +- [x] Implement `hf support create` +- [x] Implement `hf support update ` +- [x] Implement `hf support take ` +- [x] Implement `hf support transition ` +- [x] Implement `hf support delete ` ### 1.14 Propose commands -- [ ] Implement `hf propose list --project ` -- [ ] Implement `hf propose get ` -- [ ] Implement `hf propose create` -- [ ] Implement `hf propose update ` -- [ ] Implement `hf propose accept --milestone ` -- [ ] Implement `hf propose reject ` -- [ ] Implement `hf propose reopen ` +- [x] Implement `hf propose list --project ` +- [x] Implement `hf propose get ` +- [x] Implement `hf propose create` +- [x] Implement `hf propose update ` +- [x] Implement `hf propose accept --milestone ` +- [x] Implement `hf propose reject ` +- [x] Implement `hf propose reopen ` ### 1.15 Monitor commands -- [ ] Implement `hf monitor overview` -- [ ] Implement `hf monitor server list` -- [ ] Implement `hf monitor server get ` -- [ ] Implement `hf monitor server create --identifier ` -- [ ] Implement `hf monitor server delete ` -- [ ] Implement `hf monitor api-key generate ` -- [ ] Implement `hf monitor api-key revoke ` +- [x] Implement `hf monitor overview` +- [x] Implement `hf monitor server list` +- [x] Implement `hf monitor server get ` +- [x] Implement `hf monitor server create --identifier ` +- [x] Implement `hf monitor server delete ` +- [x] Implement `hf monitor api-key generate ` +- [x] Implement `hf monitor api-key revoke ` ### 1.16 CLI packaging / release - [ ] Add cross-platform build targets if needed - [ ] Add release artifact naming for `hf` - [ ] Add install documentation -- [ ] Add shell examples for padded-cell and manual mode +- [x] Add shell examples for padded-cell and manual mode --- From 99be72d6031640646faa7234ac48bf55eb6a4b8d Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 18:12:11 +0000 Subject: [PATCH 15/29] chore: update Backend submodule (code-first API support) --- HarborForge.Backend | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/HarborForge.Backend b/HarborForge.Backend index 32e79a4..43af5b2 160000 --- a/HarborForge.Backend +++ b/HarborForge.Backend @@ -1 +1 @@ -Subproject commit 32e79a41d866923e975d0ca86c7dcee17920b275 +Subproject commit 43af5b29f6ce5e9bbd99732efa959c761885f765 From 90e92da4f200dde7ed97b8eb28a59973d71b77a1 Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 18:12:30 +0000 Subject: [PATCH 16/29] docs: update TODO - mark completed code-first API items --- plans/hf-cross-project-todo.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/plans/hf-cross-project-todo.md b/plans/hf-cross-project-todo.md index e32faa3..1548c81 100644 --- a/plans/hf-cross-project-todo.md +++ b/plans/hf-cross-project-todo.md @@ -200,15 +200,15 @@ ## 2. HarborForge.Backend ### 2.1 Code-first API support -- [ ] Audit all CLI-targeted resources for code availability -- [ ] Ensure `project-code` is accepted in get/update/delete/member APIs -- [ ] Ensure `milestone-code` is accepted in get/update/delete/progress APIs -- [ ] Ensure `task-code` is accepted in get/update/delete/transition APIs +- [x] Audit all CLI-targeted resources for code availability +- [x] Ensure `project-code` is accepted in get/update/delete/member APIs +- [x] Ensure `milestone-code` is accepted in get/update/delete/progress APIs +- [x] Ensure `task-code` is accepted in get/update/delete/transition APIs - [ ] Ensure `meeting-code` is accepted in get/update/delete/attend APIs - [ ] Ensure `support-code` is accepted in get/update/delete/take/transition APIs -- [ ] Ensure `propose-code` is accepted in get/update/delete/accept/reject/reopen APIs -- [ ] Add code-based list filters where missing -- [ ] Ensure CLI-related list payloads always include canonical code fields +- [x] Ensure `propose-code` is accepted in get/update/delete/accept/reject/reopen APIs +- [x] Add code-based list filters where missing +- [x] Ensure CLI-related list payloads always include canonical code fields ### 2.2 User / account-manager flow - [ ] Review current `account-manager` permission implementation @@ -224,8 +224,8 @@ - [ ] Support permission-aware help rendering without excessive API chattiness ### 2.4 Task / meeting / support actions -- [ ] Add/confirm backend route for task self-assignment (`task take`) -- [ ] Add/confirm conflict behavior when task already has a different assignee +- [x] Add/confirm backend route for task self-assignment (`task take`) +- [x] Add/confirm conflict behavior when task already has a different assignee - [ ] Add/confirm backend route for meeting attendance (`meeting attend`) - [ ] Ensure meeting attendance updates participant list - [ ] Add/confirm backend route for support self-assignment (`support take`) From a111411fd1072c91a7d2a36c21cae40297d1678d Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 18:17:15 +0000 Subject: [PATCH 17/29] Update support API todo progress --- HarborForge.Backend | 2 +- plans/hf-cross-project-todo.md | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/HarborForge.Backend b/HarborForge.Backend index 43af5b2..96cbe10 160000 --- a/HarborForge.Backend +++ b/HarborForge.Backend @@ -1 +1 @@ -Subproject commit 43af5b29f6ce5e9bbd99732efa959c761885f765 +Subproject commit 96cbe109ece349a275bde12612c293fcfac8969e diff --git a/plans/hf-cross-project-todo.md b/plans/hf-cross-project-todo.md index 1548c81..265177d 100644 --- a/plans/hf-cross-project-todo.md +++ b/plans/hf-cross-project-todo.md @@ -205,7 +205,7 @@ - [x] Ensure `milestone-code` is accepted in get/update/delete/progress APIs - [x] Ensure `task-code` is accepted in get/update/delete/transition APIs - [ ] Ensure `meeting-code` is accepted in get/update/delete/attend APIs -- [ ] Ensure `support-code` is accepted in get/update/delete/take/transition APIs +- [x] Ensure `support-code` is accepted in get/update/delete/take/transition APIs - [x] Ensure `propose-code` is accepted in get/update/delete/accept/reject/reopen APIs - [x] Add code-based list filters where missing - [x] Ensure CLI-related list payloads always include canonical code fields @@ -228,7 +228,7 @@ - [x] Add/confirm conflict behavior when task already has a different assignee - [ ] Add/confirm backend route for meeting attendance (`meeting attend`) - [ ] Ensure meeting attendance updates participant list -- [ ] Add/confirm backend route for support self-assignment (`support take`) +- [x] Add/confirm backend route for support self-assignment (`support take`) ### 2.5 Frontend-facing code migration support - [ ] Add code-based detail endpoints or code query support for frontend routing From ff47b1c971f83f395774dc230c9a9b7f4be9b781 Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 18:44:26 +0000 Subject: [PATCH 18/29] Document HarborForge.Cli install flow --- HarborForge.Cli | 2 +- plans/hf-cross-project-todo.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/HarborForge.Cli b/HarborForge.Cli index cc649a7..49b54be 160000 --- a/HarborForge.Cli +++ b/HarborForge.Cli @@ -1 +1 @@ -Subproject commit cc649a7fe27d0f2bc3b1790d0fa91931b35d0a02 +Subproject commit 49b54beace1916fd99e5d841a316efebfd3b30fb diff --git a/plans/hf-cross-project-todo.md b/plans/hf-cross-project-todo.md index 265177d..5cf5302 100644 --- a/plans/hf-cross-project-todo.md +++ b/plans/hf-cross-project-todo.md @@ -192,7 +192,7 @@ ### 1.16 CLI packaging / release - [ ] Add cross-platform build targets if needed - [ ] Add release artifact naming for `hf` -- [ ] Add install documentation +- [x] Add install documentation - [x] Add shell examples for padded-cell and manual mode --- From 044a0a33680f01622ce80648c9c10aed7ca4fa66 Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 19:18:32 +0000 Subject: [PATCH 19/29] feat: meetings code-based API + TODO updates - Backend: added meetings router with code-first CRUD + attend/participant model - TODO: mark meeting-code API and attend route as completed --- HarborForge.Backend | 2 +- plans/hf-cross-project-todo.md | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/HarborForge.Backend b/HarborForge.Backend index 96cbe10..8691128 160000 --- a/HarborForge.Backend +++ b/HarborForge.Backend @@ -1 +1 @@ -Subproject commit 96cbe109ece349a275bde12612c293fcfac8969e +Subproject commit 86911286c08cc053ee5e52fa5520f16cf7fac481 diff --git a/plans/hf-cross-project-todo.md b/plans/hf-cross-project-todo.md index 5cf5302..1bd8e6d 100644 --- a/plans/hf-cross-project-todo.md +++ b/plans/hf-cross-project-todo.md @@ -204,7 +204,7 @@ - [x] Ensure `project-code` is accepted in get/update/delete/member APIs - [x] Ensure `milestone-code` is accepted in get/update/delete/progress APIs - [x] Ensure `task-code` is accepted in get/update/delete/transition APIs -- [ ] Ensure `meeting-code` is accepted in get/update/delete/attend APIs +- [x] Ensure `meeting-code` is accepted in get/update/delete/attend APIs - [x] Ensure `support-code` is accepted in get/update/delete/take/transition APIs - [x] Ensure `propose-code` is accepted in get/update/delete/accept/reject/reopen APIs - [x] Add code-based list filters where missing @@ -226,8 +226,8 @@ ### 2.4 Task / meeting / support actions - [x] Add/confirm backend route for task self-assignment (`task take`) - [x] Add/confirm conflict behavior when task already has a different assignee -- [ ] Add/confirm backend route for meeting attendance (`meeting attend`) -- [ ] Ensure meeting attendance updates participant list +- [x] Add/confirm backend route for meeting attendance (`meeting attend`) +- [x] Ensure meeting attendance updates participant list - [x] Add/confirm backend route for support self-assignment (`support take`) ### 2.5 Frontend-facing code migration support From f0a267b6f239e54587a511f3db2e062bab96049d Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 19:23:01 +0000 Subject: [PATCH 20/29] Advance plugin monitor_port alignment --- HarborForge.OpenclawPlugin | 2 +- plans/hf-cross-project-todo.md | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/HarborForge.OpenclawPlugin b/HarborForge.OpenclawPlugin index 78a61e0..27b8b74 160000 --- a/HarborForge.OpenclawPlugin +++ b/HarborForge.OpenclawPlugin @@ -1 +1 @@ -Subproject commit 78a61e0fb2a7b6799fd9550c2fc70027c3bb1058 +Subproject commit 27b8b74d390ad011b34c4697116c5473a513ea82 diff --git a/plans/hf-cross-project-todo.md b/plans/hf-cross-project-todo.md index 1bd8e6d..3787d18 100644 --- a/plans/hf-cross-project-todo.md +++ b/plans/hf-cross-project-todo.md @@ -289,9 +289,9 @@ - [ ] Replace old OpenClaw telemetry flow with direct plugin-exposed data path ### 4.3 Plugin config updates -- [ ] Add `monitor_port` to plugin config schema -- [ ] Document `monitor_port` in plugin README/docs/examples -- [ ] Ensure runtime reads and validates `monitor_port` +- [x] Add `monitor_port` to plugin config schema +- [x] Document `monitor_port` in plugin README/docs/examples +- [x] Ensure runtime reads and validates `monitor_port` ### 4.4 CLI install support - [ ] Add install script flag `--install-cli` From 3d9ddfad00f4cacaa9e6e7cc58632021d1cc58e4 Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 19:52:09 +0000 Subject: [PATCH 21/29] docs: sync harbor-forge plugin planning notes --- DEVELOPMENT_PLAN.md | 16 +++++++++---- HarborForge.Backend | 2 +- plans/hf-cross-project-todo.md | 44 +++++++++++++++++----------------- 3 files changed, 34 insertions(+), 28 deletions(-) diff --git a/DEVELOPMENT_PLAN.md b/DEVELOPMENT_PLAN.md index baa9b13..81ecff9 100644 --- a/DEVELOPMENT_PLAN.md +++ b/DEVELOPMENT_PLAN.md @@ -279,7 +279,7 @@ POST /monitor/server/heartbeat-v2 Body: identifier: string openclaw_version: string # 远程主机上的 OpenClaw 版本 - plugin_version: string # harborforge-monitor 插件版本 + plugin_version: string # harbor-forge 插件版本 cpu_pct: float mem_pct: float disk_pct: float @@ -602,16 +602,22 @@ services: ### 9.2 监控插件部署 ```bash -# 1. 在 Monitor 注册服务器，获取 challenge_uuid +# 1. 在 Monitor 注册服务器并生成 API Key # 2. 在服务器安装插件 node scripts/install.mjs # 3. 配置 ~/.openclaw/openclaw.json { "plugins": { - "harborforge-monitor": { - "enabled": true, - "challengeUuid": "YOUR_CHALLENGE_UUID" + "entries": { + "harbor-forge": { + "enabled": true, + "config": { + "enabled": true, + "apiKey": "YOUR_API_KEY", + "monitor_port": 9100 + } + } } } } diff --git a/HarborForge.Backend b/HarborForge.Backend index 8691128..f45f595 160000 --- a/HarborForge.Backend +++ b/HarborForge.Backend @@ -1 +1 @@ -Subproject commit 86911286c08cc053ee5e52fa5520f16cf7fac481 +Subproject commit f45f5957f4291cb6ed2a6f015064a78e61157086 diff --git a/plans/hf-cross-project-todo.md b/plans/hf-cross-project-todo.md index 3787d18..dda69c7 100644 --- a/plans/hf-cross-project-todo.md +++ b/plans/hf-cross-project-todo.md @@ -278,15 +278,15 @@ ## 4. HarborForge.OpenclawPlugin ### 4.1 Plugin identity and packaging -- [ ] Rename plugin registration name to `harbor-forge` -- [ ] Audit all docs/config/install references to old plugin name -- [ ] Ensure plugin config keys and examples reflect the new registration name +- [x] Rename plugin registration name to `harbor-forge` +- [x] Audit all docs/config/install references to old plugin name +- [x] Ensure plugin config keys and examples reflect the new registration name ### 4.2 Remove sidecar architecture -- [ ] Remove plugin-side `server/` telemetry sidecar -- [ ] Remove sidecar startup/shutdown lifecycle logic -- [ ] Remove sidecar-specific docs and examples -- [ ] Replace old OpenClaw telemetry flow with direct plugin-exposed data path +- [x] Remove plugin-side `server/` telemetry sidecar +- [x] Remove sidecar startup/shutdown lifecycle logic +- [x] Remove sidecar-specific docs and examples +- [x] Replace old OpenClaw telemetry flow with direct plugin-exposed data path ### 4.3 Plugin config updates - [x] Add `monitor_port` to plugin config schema @@ -294,23 +294,23 @@ - [x] Ensure runtime reads and validates `monitor_port` ### 4.4 CLI install support -- [ ] Add install script flag `--install-cli` -- [ ] Resolve OpenClaw profile bin directory (default `~/.openclaw/bin`) -- [ ] Build `HarborForge.Cli` -- [ ] Install compiled `hf` binary to profile `bin/` -- [ ] `chmod +x` installed binary -- [ ] Handle failure cases cleanly if CLI build/install fails +- [x] Add install script flag `--install-cli` +- [x] Resolve OpenClaw profile bin directory (default `~/.openclaw/bin`) +- [x] Build `HarborForge.Cli` +- [x] Install compiled `hf` binary to profile `bin/` +- [x] `chmod +x` installed binary +- [x] Handle failure cases cleanly if CLI build/install fails ### 4.5 Skills deployment -- [ ] Add plugin `skills/` directory -- [ ] Add `skills/hf/` -- [ ] Add `skills/hf/SKILL.md` -- [ ] In `SKILL.md`, explain basic `hf` usage -- [ ] In `SKILL.md`, encourage agents to use `hf --help-brief` -- [ ] In `SKILL.md`, point to normal `--help` for full command tree -- [ ] Installer should copy normal plugin skills into profile `skills/` -- [ ] Installer should **not** copy `skills/hf/` unless `--install-cli` is present -- [ ] Installer should copy `skills/hf/` when `--install-cli` is present +- [x] Add plugin `skills/` directory +- [x] Add `skills/hf/` +- [x] Add `skills/hf/SKILL.md` +- [x] In `SKILL.md`, explain basic `hf` usage +- [x] In `SKILL.md`, encourage agents to use `hf --help-brief` +- [x] In `SKILL.md`, point to normal `--help` for full command tree +- [x] Installer should copy normal plugin skills into profile `skills/` +- [x] Installer should **not** copy `skills/hf/` unless `--install-cli` is present +- [x] Installer should copy `skills/hf/` when `--install-cli` is present ### 4.6 Monitor bridge endpoint - [ ] Define how plugin exposes OpenClaw metadata to Monitor over local port From d70774f32557706ef46b4b67352a327e7d8db428 Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 20:28:48 +0000 Subject: [PATCH 22/29] Update Backend + Frontend submodules (code-first migration) --- HarborForge.Backend | 2 +- HarborForge.Frontend | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/HarborForge.Backend b/HarborForge.Backend index f45f595..3ff9132 160000 --- a/HarborForge.Backend +++ b/HarborForge.Backend @@ -1 +1 @@ -Subproject commit f45f5957f4291cb6ed2a6f015064a78e61157086 +Subproject commit 3ff9132596858402f9845c7eea7da1009606515d diff --git a/HarborForge.Frontend b/HarborForge.Frontend index dc97764..fb56587 160000 --- a/HarborForge.Frontend +++ b/HarborForge.Frontend @@ -1 +1 @@ -Subproject commit dc97764e431fb213b451160c45fbf52ea4eeeef5 +Subproject commit fb5658739b5bb8c1c62a3b6464e258e203556ec3 From d6312c15c8f8335b8ef1517e389a45c59ceb03fe Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 20:32:31 +0000 Subject: [PATCH 23/29] Update HarborForge.Cli release packaging status --- HarborForge.Cli | 2 +- plans/hf-cross-project-todo.md | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/HarborForge.Cli b/HarborForge.Cli index 49b54be..b306373 160000 --- a/HarborForge.Cli +++ b/HarborForge.Cli @@ -1 +1 @@ -Subproject commit 49b54beace1916fd99e5d841a316efebfd3b30fb +Subproject commit b3063733a9f8130ef13de24297c1daa98cf7cce2 diff --git a/plans/hf-cross-project-todo.md b/plans/hf-cross-project-todo.md index dda69c7..457a65d 100644 --- a/plans/hf-cross-project-todo.md +++ b/plans/hf-cross-project-todo.md @@ -190,8 +190,8 @@ - [x] Implement `hf monitor api-key revoke ` ### 1.16 CLI packaging / release -- [ ] Add cross-platform build targets if needed -- [ ] Add release artifact naming for `hf` +- [x] Add cross-platform build targets if needed +- [x] Add release artifact naming for `hf` - [x] Add install documentation - [x] Add shell examples for padded-cell and manual mode @@ -252,8 +252,8 @@ - [ ] Move meeting detail lookup toward `meeting-code` - [ ] Move support detail lookup toward `support-code` - [ ] Move propose detail lookup toward `propose-code` -- [ ] Stop surfacing raw ids as the main visible identifier in lists/details -- [ ] Display codes consistently in relevant list and detail views +- [x] Stop surfacing raw ids as the main visible identifier in lists/details +- [x] Display codes consistently in relevant list and detail views ### 3.2 User / role UX alignment - [ ] Review current user management page against final backend behavior From 5a3edb763beec65dcd45f41f36024dff7b751591 Mon Sep 17 00:00:00 2001 From: zhi Date: Sat, 21 Mar 2026 21:38:29 +0000 Subject: [PATCH 24/29] chore: update submodules and mark completed TODO items - Backend: remove legacy Python CLI, update docs - Frontend: code-first navigation across all pages - TODO: mark sections 2.2, 2.3, 2.6, 3.1 as completed --- HarborForge.Backend | 2 +- HarborForge.Frontend | 2 +- plans/hf-cross-project-todo.md | 38 +++++++++++++++++----------------- 3 files changed, 21 insertions(+), 21 deletions(-) diff --git a/HarborForge.Backend b/HarborForge.Backend index 3ff9132..b351075 160000 --- a/HarborForge.Backend +++ b/HarborForge.Backend @@ -1 +1 @@ -Subproject commit 3ff9132596858402f9845c7eea7da1009606515d +Subproject commit b351075561fdff999f38bea6925e6daf600405df diff --git a/HarborForge.Frontend b/HarborForge.Frontend index fb56587..41ebd36 160000 --- a/HarborForge.Frontend +++ b/HarborForge.Frontend @@ -1 +1 @@ -Subproject commit fb5658739b5bb8c1c62a3b6464e258e203556ec3 +Subproject commit 41ebd3621829280b85c5702bce891a3a5fd7b8e1 diff --git a/plans/hf-cross-project-todo.md b/plans/hf-cross-project-todo.md index 457a65d..d94f3e6 100644 --- a/plans/hf-cross-project-todo.md +++ b/plans/hf-cross-project-todo.md @@ -211,17 +211,17 @@ - [x] Ensure CLI-related list payloads always include canonical code fields ### 2.2 User / account-manager flow -- [ ] Review current `account-manager` permission implementation -- [ ] Add dedicated backend flow for account-manager-based account creation if current `/users` route is insufficient -- [ ] Ensure `hf user create` maps cleanly to backend account-manager permission model -- [ ] Ensure new accounts default to `guest` -- [ ] Ensure admin role cannot be assigned through normal user management APIs +- [x] Review current `account-manager` permission implementation +- [x] Add dedicated backend flow for account-manager-based account creation if current `/users` route is insufficient +- [x] Ensure `hf user create` maps cleanly to backend account-manager permission model +- [x] Ensure new accounts default to `guest` +- [x] Ensure admin role cannot be assigned through normal user management APIs ### 2.3 Permission introspection for CLI help -- [ ] Decide how CLI will query effective permissions -- [ ] Add/extend backend endpoint(s) for current-user permission introspection if needed -- [ ] Ensure CLI can cheaply determine whether a subcommand is permitted -- [ ] Support permission-aware help rendering without excessive API chattiness +- [x] Decide how CLI will query effective permissions +- [x] Add/extend backend endpoint(s) for current-user permission introspection if needed +- [x] Ensure CLI can cheaply determine whether a subcommand is permitted +- [x] Support permission-aware help rendering without excessive API chattiness ### 2.4 Task / meeting / support actions - [x] Add/confirm backend route for task self-assignment (`task take`) @@ -236,22 +236,22 @@ - [ ] Update serializers to expose code prominently wherever applicable ### 2.6 Legacy Python CLI retirement -- [ ] Track parity between new `hf` CLI and old backend Python CLI -- [ ] Once parity is acceptable, remove legacy Python CLI from backend repo -- [ ] Remove backend docs referencing the old Python CLI +- [x] Track parity between new `hf` CLI and old backend Python CLI +- [x] Once parity is acceptable, remove legacy Python CLI from backend repo +- [x] Remove backend docs referencing the old Python CLI --- ## 3. HarborForge.Frontend ### 3.1 Code-first UI migration -- [ ] Audit current routes and identify every place still using raw ids -- [ ] Move project detail lookup toward `project-code` -- [ ] Move milestone detail lookup toward `milestone-code` -- [ ] Move task detail lookup toward `task-code` -- [ ] Move meeting detail lookup toward `meeting-code` -- [ ] Move support detail lookup toward `support-code` -- [ ] Move propose detail lookup toward `propose-code` +- [x] Audit current routes and identify every place still using raw ids +- [x] Move project detail lookup toward `project-code` +- [x] Move milestone detail lookup toward `milestone-code` +- [x] Move task detail lookup toward `task-code` +- [x] Move meeting detail lookup toward `meeting-code` +- [x] Move support detail lookup toward `support-code` +- [x] Move propose detail lookup toward `propose-code` - [x] Stop surfacing raw ids as the main visible identifier in lists/details - [x] Display codes consistently in relevant list and detail views From 38884a75557948478c0431f364c0ea5dca7a6ebc Mon Sep 17 00:00:00 2001 From: zhi Date: Sun, 22 Mar 2026 00:18:01 +0000 Subject: [PATCH 25/29] chore: mark completed TODO items (sections 2.5, 3.2, 3.3) and update submodule pointers - Section 2.5: code-based detail endpoints confirmed complete - Section 3.2: user/role UX alignment confirmed complete - Section 3.3: meeting/support UI wired and complete - Update Frontend submodule: meeting/support detail pages + routes - Update Backend submodule: general /supports list endpoint --- HarborForge.Backend | 2 +- HarborForge.Frontend | 2 +- plans/hf-cross-project-todo.md | 18 +++++++++--------- 3 files changed, 11 insertions(+), 11 deletions(-) diff --git a/HarborForge.Backend b/HarborForge.Backend index b351075..d170728 160000 --- a/HarborForge.Backend +++ b/HarborForge.Backend @@ -1 +1 @@ -Subproject commit b351075561fdff999f38bea6925e6daf600405df +Subproject commit d17072881b0f8abf9775e40861666175976afb1a diff --git a/HarborForge.Frontend b/HarborForge.Frontend index 41ebd36..a654292 160000 --- a/HarborForge.Frontend +++ b/HarborForge.Frontend @@ -1 +1 @@ -Subproject commit 41ebd3621829280b85c5702bce891a3a5fd7b8e1 +Subproject commit a65429250a61ee54aac37a984fe67169121c0f4a diff --git a/plans/hf-cross-project-todo.md b/plans/hf-cross-project-todo.md index d94f3e6..c09e53b 100644 --- a/plans/hf-cross-project-todo.md +++ b/plans/hf-cross-project-todo.md @@ -231,9 +231,9 @@ - [x] Add/confirm backend route for support self-assignment (`support take`) ### 2.5 Frontend-facing code migration support -- [ ] Add code-based detail endpoints or code query support for frontend routing -- [ ] Ensure frontend can resolve resources by code without fallback to id-only APIs -- [ ] Update serializers to expose code prominently wherever applicable +- [x] Add code-based detail endpoints or code query support for frontend routing +- [x] Ensure frontend can resolve resources by code without fallback to id-only APIs +- [x] Update serializers to expose code prominently wherever applicable ### 2.6 Legacy Python CLI retirement - [x] Track parity between new `hf` CLI and old backend Python CLI @@ -256,14 +256,14 @@ - [x] Display codes consistently in relevant list and detail views ### 3.2 User / role UX alignment -- [ ] Review current user management page against final backend behavior -- [ ] Ensure only code/name-first identifiers are shown where relevant -- [ ] Ensure account role display matches single-role model everywhere +- [x] Review current user management page against final backend behavior +- [x] Ensure only code/name-first identifiers are shown where relevant +- [x] Ensure account role display matches single-role model everywhere ### 3.3 Meeting / support UI -- [ ] Audit current frontend support for meeting resources -- [ ] Add/adjust UI for meeting participant state if needed -- [ ] Add/adjust UI for support take/ownership state if needed +- [x] Audit current frontend support for meeting resources +- [x] Add/adjust UI for meeting participant state if needed +- [x] Add/adjust UI for support take/ownership state if needed ### 3.4 Monitor UI alignment - [ ] Ensure monitor views expose server identifier/code cleanly From e24b317ce58a055bf53d015bd72b3200d2648513 Mon Sep 17 00:00:00 2001 From: zhi Date: Sun, 22 Mar 2026 00:22:44 +0000 Subject: [PATCH 26/29] chore: mark sections 3.4, 3.5 complete; update Frontend submodule - Section 3.4: monitor UI identifier display confirmed clean - Section 3.5: copyable resource codes added to all detail pages - Phase tracking items updated to reflect actual completion state --- HarborForge.Frontend | 2 +- plans/hf-cross-project-todo.md | 44 +++++++++++++++++----------------- 2 files changed, 23 insertions(+), 23 deletions(-) diff --git a/HarborForge.Frontend b/HarborForge.Frontend index a654292..4fc120f 160000 --- a/HarborForge.Frontend +++ b/HarborForge.Frontend @@ -1 +1 @@ -Subproject commit a65429250a61ee54aac37a984fe67169121c0f4a +Subproject commit 4fc120f5958bff6fcf306c7dbbf0473a6aeb2e1f diff --git a/plans/hf-cross-project-todo.md b/plans/hf-cross-project-todo.md index c09e53b..967032f 100644 --- a/plans/hf-cross-project-todo.md +++ b/plans/hf-cross-project-todo.md @@ -9,7 +9,7 @@ ## 0. Cross-cutting / coordination - [ ] Finalize MVP scope for first shipping version of `hf` -- [ ] Confirm which existing backend routes can be reused vs which new routes are needed +- [x] Confirm which existing backend routes can be reused vs which new routes are needed - [x] Define canonical code-first lookup policy across all resources - [x] Define permission introspection strategy for `--help` / `--help-brief` - settled as: token → current user → user role → role permissions @@ -266,12 +266,12 @@ - [x] Add/adjust UI for support take/ownership state if needed ### 3.4 Monitor UI alignment -- [ ] Ensure monitor views expose server identifier/code cleanly +- [x] Ensure monitor views expose server identifier/code cleanly - [ ] Review display of OpenClaw/plugin metadata once Monitor bridge is implemented ### 3.5 Future CLI alignment aids -- [ ] Consider showing canonical codes more prominently to help users map UI↔CLI -- [ ] Ensure copyable resource codes are easy to find from the UI +- [x] Consider showing canonical codes more prominently to help users map UI↔CLI +- [x] Ensure copyable resource codes are easy to find from the UI --- @@ -378,34 +378,34 @@ ## 7. Suggested implementation order ### Phase A — Foundations -- [ ] Finalize CLI help / mode / output model -- [ ] Finalize backend permission introspection approach +- [x] Finalize CLI help / mode / output model +- [x] Finalize backend permission introspection approach - [ ] Finalize plugin↔monitor local protocol ### Phase B — Backend first -- [ ] Add/finish code-based backend support -- [ ] Add/finish task take / meeting attend / support take -- [ ] Add any missing account-manager creation behavior +- [x] Add/finish code-based backend support +- [x] Add/finish task take / meeting attend / support take +- [x] Add any missing account-manager creation behavior ### Phase C — CLI MVP -- [ ] Build `hf` scaffold -- [ ] Ship `version`, `health`, `config` -- [ ] Ship `user create`, `user list`, `user get` -- [ ] Ship `task list`, `task get`, `task take` -- [ ] Ship initial `monitor` commands +- [x] Build `hf` scaffold +- [x] Ship `version`, `health`, `config` +- [x] Ship `user create`, `user list`, `user get` +- [x] Ship `task list`, `task get`, `task take` +- [x] Ship initial `monitor` commands ### Phase D — Frontend alignment -- [ ] Move frontend to code-first lookup/display -- [ ] Surface canonical codes consistently in UI +- [x] Move frontend to code-first lookup/display +- [x] Surface canonical codes consistently in UI ### Phase E — Plugin / Monitor integration -- [ ] Rename plugin to `harbor-forge` -- [ ] Remove plugin sidecar -- [ ] Add `--install-cli` -- [ ] Add `skills/hf` +- [x] Rename plugin to `harbor-forge` +- [x] Remove plugin sidecar +- [x] Add `--install-cli` +- [x] Add `skills/hf` - [ ] Add `monitor_port` / `MONITOR_PORT` bridge ### Phase F — Cleanup / retirement -- [ ] Remove legacy backend Python CLI -- [ ] Update all docs to point to `hf` +- [x] Remove legacy backend Python CLI +- [x] Update all docs to point to `hf` - [ ] Add final tests and packaging flow From 44f5d50261cc7e6fdbd00e04bac9a441221c7936 Mon Sep 17 00:00:00 2001 From: zhi Date: Sun, 22 Mar 2026 01:37:25 +0000 Subject: [PATCH 27/29] =?UTF-8?q?feat:=20complete=20plugin=E2=86=94monitor?= =?UTF-8?q?=20bridge=20integration?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Update submodule refs for Monitor and Plugin - Mark plugin↔monitor bridge TODO items as complete in cross-project todo - Sections 4.6, 5.1-5.4, Phase A/E bridge items all done --- HarborForge.Monitor | 2 +- HarborForge.OpenclawPlugin | 2 +- plans/hf-cross-project-todo.md | 69 +++++++++++++++++++--------------- 3 files changed, 40 insertions(+), 33 deletions(-) diff --git a/HarborForge.Monitor b/HarborForge.Monitor index 360743b..dc05fa0 160000 --- a/HarborForge.Monitor +++ b/HarborForge.Monitor @@ -1 +1 @@ -Subproject commit 360743ba6bcbef6cfb7a70d1b4aab8b7c107ebe8 +Subproject commit dc05fa01d11a9b13d537bf0361dac1e56b6b7f87 diff --git a/HarborForge.OpenclawPlugin b/HarborForge.OpenclawPlugin index 27b8b74..e7ba982 160000 --- a/HarborForge.OpenclawPlugin +++ b/HarborForge.OpenclawPlugin @@ -1 +1 @@ -Subproject commit 27b8b74d390ad011b34c4697116c5473a513ea82 +Subproject commit e7ba98212827010ab459a656c7cf142d2ef0c056 diff --git a/plans/hf-cross-project-todo.md b/plans/hf-cross-project-todo.md index 967032f..66b764e 100644 --- a/plans/hf-cross-project-todo.md +++ b/plans/hf-cross-project-todo.md @@ -18,7 +18,10 @@ - current CLI contract: `--json` emits raw success payloads on stdout without a universal envelope; list/get responses should preserve canonical code-bearing fields when backend payloads provide them - [x] Define CLI exit code / stderr conventions - current CLI contract: success exits `0`; validation/runtime failures exit `1`; errors go to stderr and successful output goes to stdout -- [ ] Define local plugin↔monitor communication protocol over `monitor_port` +- [x] Define local plugin↔monitor communication protocol over `monitor_port` + - Monitor exposes `GET /health`, `GET /telemetry`, `POST /openclaw` on 127.0.0.1:MONITOR_PORT + - Plugin pushes OpenClaw metadata via POST /openclaw; Monitor enriches heartbeats with received data + - All communication is optional/degradable — both sides function independently - [ ] Define release order across submodules - [ ] Define rollback strategy if plugin / monitor bridge is unavailable @@ -267,7 +270,7 @@ ### 3.4 Monitor UI alignment - [x] Ensure monitor views expose server identifier/code cleanly -- [ ] Review display of OpenClaw/plugin metadata once Monitor bridge is implemented +- [ ] Review display of OpenClaw/plugin metadata once Monitor bridge is deployed ### 3.5 Future CLI alignment aids - [x] Consider showing canonical codes more prominently to help users map UI↔CLI @@ -313,45 +316,49 @@ - [x] Installer should copy `skills/hf/` when `--install-cli` is present ### 4.6 Monitor bridge endpoint -- [ ] Define how plugin exposes OpenClaw metadata to Monitor over local port -- [ ] Decide HTTP endpoint structure / payload schema -- [ ] Expose OpenClaw version -- [ ] Expose plugin version -- [ ] Expose agent list / agent metadata -- [ ] Ensure plugin remains functional even if Monitor never connects +- [x] Define how plugin exposes OpenClaw metadata to Monitor over local port + - Plugin periodically POSTs metadata to Monitor bridge `POST /openclaw` +- [x] Decide HTTP endpoint structure / payload schema + - `POST /openclaw` with `{ version, plugin_version, agents }` +- [x] Expose OpenClaw version +- [x] Expose plugin version +- [x] Expose agent list / agent metadata +- [x] Ensure plugin remains functional even if Monitor never connects --- ## 5. HarborForge.Monitor ### 5.1 Docker/runtime changes -- [ ] Add `MONITOR_PORT` env var -- [ ] Ensure Monitor listens on `127.0.0.1:` -- [ ] Update Docker runtime docs/examples -- [ ] Update docker-compose to expose that port to host `127.0.0.1` +- [x] Add `MONITOR_PORT` env var +- [x] Ensure Monitor listens on `127.0.0.1:` +- [x] Update Docker runtime docs/examples +- [x] Update docker-compose to expose that port to host `127.0.0.1` ### 5.2 Plugin communication -- [ ] Implement local communication client to query plugin over `MONITOR_PORT` -- [ ] Define request timeout / retry / fallback policy -- [ ] Keep startup independent of plugin communication success -- [ ] Keep heartbeat/telemetry upload independent of plugin communication success -- [ ] If plugin is reachable, enrich telemetry with: - - [ ] OpenClaw version - - [ ] plugin version - - [ ] agent info -- [ ] If plugin is unreachable, continue current behavior unchanged +- [x] Implement local communication client to query plugin over `MONITOR_PORT` + - Note: the architecture is reversed — Monitor hosts the bridge, plugin pushes via POST /openclaw +- [x] Define request timeout / retry / fallback policy + - Plugin uses 3s timeout; Monitor bridge uses 5s read/write timeouts +- [x] Keep startup independent of plugin communication success +- [x] Keep heartbeat/telemetry upload independent of plugin communication success +- [x] If plugin is reachable, enrich telemetry with: + - [x] OpenClaw version + - [x] plugin version + - [x] agent info +- [x] If plugin is unreachable, continue current behavior unchanged ### 5.3 Telemetry model alignment -- [ ] Ensure backend-facing telemetry payloads can carry optional OpenClaw metadata -- [ ] Avoid making plugin-derived fields mandatory -- [ ] Ensure monitor data model cleanly distinguishes: - - [ ] host/hardware telemetry - - [ ] optional OpenClaw metadata +- [x] Ensure backend-facing telemetry payloads can carry optional OpenClaw metadata +- [x] Avoid making plugin-derived fields mandatory +- [x] Ensure monitor data model cleanly distinguishes: + - [x] host/hardware telemetry + - [x] optional OpenClaw metadata ### 5.4 Docs / examples -- [ ] Update Monitor README to explain `MONITOR_PORT` -- [ ] Explain degraded mode when plugin bridge is absent -- [ ] Provide example Docker run / compose snippet with host loopback exposure +- [x] Update Monitor README to explain `MONITOR_PORT` +- [x] Explain degraded mode when plugin bridge is absent +- [x] Provide example Docker run / compose snippet with host loopback exposure --- @@ -380,7 +387,7 @@ ### Phase A — Foundations - [x] Finalize CLI help / mode / output model - [x] Finalize backend permission introspection approach -- [ ] Finalize plugin↔monitor local protocol +- [x] Finalize plugin↔monitor local protocol ### Phase B — Backend first - [x] Add/finish code-based backend support @@ -403,7 +410,7 @@ - [x] Remove plugin sidecar - [x] Add `--install-cli` - [x] Add `skills/hf` -- [ ] Add `monitor_port` / `MONITOR_PORT` bridge +- [x] Add `monitor_port` / `MONITOR_PORT` bridge ### Phase F — Cleanup / retirement - [x] Remove legacy backend Python CLI From 62ac7453a57fd61dabe8bd900f26cbe49e148959 Mon Sep 17 00:00:00 2001 From: zhi Date: Sun, 22 Mar 2026 01:38:17 +0000 Subject: [PATCH 28/29] docs: finalize cross-project planning items - Mark MVP scope as finalized - Define release order across submodules - Document rollback/degradation strategy - Close CLI contribution note item - Close repo-config-safe note --- plans/hf-cross-project-todo.md | 20 ++++++++++++++++---- 1 file changed, 16 insertions(+), 4 deletions(-) diff --git a/plans/hf-cross-project-todo.md b/plans/hf-cross-project-todo.md index 66b764e..27df715 100644 --- a/plans/hf-cross-project-todo.md +++ b/plans/hf-cross-project-todo.md @@ -8,7 +8,10 @@ ## 0. Cross-cutting / coordination -- [ ] Finalize MVP scope for first shipping version of `hf` +- [x] Finalize MVP scope for first shipping version of `hf` + - MVP includes: all CRUD commands for users, roles, projects, milestones, tasks, meetings, support, proposals, monitor + - Permission-aware help system, padded-cell/manual mode, code-first resource addressing + - Plugin installer `--install-cli` for automated deployment - [x] Confirm which existing backend routes can be reused vs which new routes are needed - [x] Define canonical code-first lookup policy across all resources - [x] Define permission introspection strategy for `--help` / `--help-brief` @@ -22,8 +25,16 @@ - Monitor exposes `GET /health`, `GET /telemetry`, `POST /openclaw` on 127.0.0.1:MONITOR_PORT - Plugin pushes OpenClaw metadata via POST /openclaw; Monitor enriches heartbeats with received data - All communication is optional/degradable — both sides function independently -- [ ] Define release order across submodules -- [ ] Define rollback strategy if plugin / monitor bridge is unavailable +- [x] Define release order across submodules + - 1. Backend (code-first APIs, permission introspection) + - 2. CLI (depends on backend API surface) + - 3. Frontend (code-first UI, independent of CLI) + - 4. Monitor (standalone, bridge is optional) + - 5. Plugin (depends on CLI build for --install-cli, depends on Monitor for bridge) +- [x] Define rollback strategy if plugin / monitor bridge is unavailable + - Graceful degradation: Monitor operates normally without plugin data + - Plugin operates normally without Monitor bridge + - No hard dependency in either direction — bridge is optional enrichment > Note: the CLI contract items above are now documented from the currently implemented `HarborForge.Cli` behavior; they can still be refined later if a stricter release contract is needed. @@ -37,7 +48,8 @@ - [x] Add internal package layout (`config`, `help`, `mode`, `passmgr`, `client`, `commands`) - [x] Add build instructions to `README.md` - [x] Add `.gitignore` for Go artifacts -- [ ] Add repo-config-safe contribution note if needed +- [x] Add repo-config-safe contribution note if needed + - CLI README already contains build/run/install docs; no separate contribution note needed for current scope ### 1.2 Runtime mode detection - [x] Implement `which pass_mgr` detection on startup From 8289a56019f2b6157c62ef18f6e4aa06bd9244d5 Mon Sep 17 00:00:00 2001 From: zhi Date: Sun, 22 Mar 2026 05:39:15 +0000 Subject: [PATCH 29/29] Update Backend + Frontend submodules for milestones fix, acc-mgr, reset-apikey --- HarborForge.Backend | 2 +- HarborForge.Frontend | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/HarborForge.Backend b/HarborForge.Backend index d170728..88931d8 160000 --- a/HarborForge.Backend +++ b/HarborForge.Backend @@ -1 +1 @@ -Subproject commit d17072881b0f8abf9775e40861666175976afb1a +Subproject commit 88931d822dbf595ea34f430202973f62c02caa90 diff --git a/HarborForge.Frontend b/HarborForge.Frontend index 4fc120f..ce07ee9 160000 --- a/HarborForge.Frontend +++ b/HarborForge.Frontend @@ -1 +1 @@ -Subproject commit 4fc120f5958bff6fcf306c7dbbf0473a6aeb2e1f +Subproject commit ce07ee902135748f99bc5b4337eb153f91acdbfd