Codex/canonical runtime deploy

.claude/prompts/safe-impl.md

@@ -0,0 +1,41 @@
+# Safe Implementation Template
+
+把 Claude Code 从“写代码机器”切换成“受控工程执行系统”。没有证据，不许报喜。
+
+## PHASE 1 · READ-ONLY ANALYSIS (Plan Mode)
+
+请先不要改代码。先进入只读分析模式，完成以下内容：
+
+1. 找出这个功能涉及的入口、调用链、数据结构、配置项、测试文件。
+2. 给出实现计划，必须列出每个要修改的文件和原因。
+3. 给出验收标准：
+   - 哪些测试要跑
+   - 哪些手工场景要验证
+   - 哪些边界情况必须覆盖
+4. 明确指出你不确定的地方，不允许假设。
+5. 等我确认计划后再开始修改。
+
+## PHASE 2 · EXECUTION RULES
+
+执行阶段要求：
+
+- 不允许硬编码业务数据、路径、token、ID、feature flag。
+- 不允许新增孤立模块；新增代码必须接入真实调用链。
+- 每完成一个小阶段必须运行相关测试。
+- 如果测试失败，先修复，不要总结完成。
+- 如果无法运行测试，必须说明原因和未验证风险。
+
+## PHASE 3 · MANDATORY REPORTING FORMAT
+
+最终回复必须包含：
+
+- 已修改文件：file list with one-line purpose
+- 实际运行的命令：commands actually executed
+- 测试结果：pass/fail counts；failing tests verbatim
+- 未验证项：what could not be tested and why
+- 风险：regressions；edge cases；open questions
+- 是否真正完成：yes/no/partial；with evidence
+
+## HARD RULE · 无证据禁止报喜
+
+没有测试或等价验证结果时，禁止使用 “完成” / “已实现” / “done” / “implemented” 等词。

.clawhub/lock.json

@@ -0,0 +1,41 @@
+{
+  "version": 1,
+  "skills": {
+    "apple-calendar": {
+      "version": "1.0.0",
+      "installedAt": 1770801240686
+    },
+    "obsidian-daily": {
+      "version": "1.2.1",
+      "installedAt": 1770801244848
+    },
+    "fast-browser-use": {
+      "version": "1.0.5",
+      "installedAt": 1770801256915
+    },
+    "clawdwork": {
+      "version": "1.6.1",
+      "installedAt": 1770801269229
+    },
+    "email-to-calendar": {
+      "version": "1.13.1",
+      "installedAt": 1770801281496
+    },
+    "obsidian-direct": {
+      "version": "1.0.0",
+      "installedAt": 1770801286584
+    },
+    "a2a-hub": {
+      "version": "1.3.0",
+      "installedAt": 1770801291670
+    },
+    "agent-orchestrator": {
+      "version": "0.1.0",
+      "installedAt": 1770801302100
+    },
+    "browser-automation": {
+      "version": "1.0.1",
+      "installedAt": 1770801314944
+    }
+  }
+}

.gitignore

@@ -0,0 +1,123 @@
+# 密钥和隐私信息
+secrets/
+*.key
+*.pem
+.env
+.env.*
+!.env.template
+!.env.example
+*_secret*
+*_private*
+id_rsa
+id_ed25519
+known_hosts
+
+# 数据库（本地数据，不推送）
+*.db
+*.sqlite
+*.sqlite3
+.solar/
+!.solar/
+!.solar/standards/
+!.solar/standards/**
+
+# 缓存和临时文件
+*.log
+*.tmp
+.DS_Store
+node_modules/
+bun.lockb
+*.cache
+harness/python-packages/browser/playwright/driver/node
+${HARNESS_DIR}/
+${SOLAR_KNOWLEDGE_DIR}/
+harness/${HARNESS_DIR}/
+harness/${SOLAR_KNOWLEDGE_DIR}/
+harness/scripts/${HARNESS_DIR}/
+harness/scripts/${SOLAR_KNOWLEDGE_DIR}/
+
+# 用户私有配置
+harness/config/*.local.*
+harness/config/solar-user-config.json
+harness/config/actor-hosts.local.json
+harness/config/physical-operators.local.json
+harness/config/remote-hosts.local.json
+harness/config/*.lock
+harness/browser-agent-chatgpt-local.json
+model-config.sh
+model-config.sh.*
+settings.json
+debug/
+ide/*.lock
+skills/**/data/browser_state/
+skills/**/browser_state/
+
+# 备份文件
+*.backup
+*.bak
+*~
+
+# IDE
+.vscode/
+.idea/
+
+# 构建产物
+dist/
+build/
+!skills/build/
+!skills/build/SKILL.md
+target/
+*.o
+*.so
+*.dylib
+
+# 测试覆盖
+coverage/
+*.cover
+
+# Solar Harness 运行时/证据产物
+harness/.coverage
+harness/.workdir
+harness/_raw/
+harness/_extracted_knowledge_run/
+harness/audits/
+harness/handovers/
+harness/intents/
+harness/brain/lessons*.jsonl
+harness/com.solar*.plist
+harness/run/
+harness/state/
+harness/logs/
+harness/cache/
+harness/runs/
+harness/runtime-artifacts/
+harness/vendor/
+harness/venvs/
+harness/quarantine/
+harness/workspace/
+harness/workspaces/
+harness/search-index/
+harness/sprints/
+!harness/sprints/examples/
+!harness/sprints/fixtures/
+/reports/
+!/reports/
+!/reports/standards/
+!/reports/standards/.gitignore
+harness/intake-requests/
+harness/intents/intent-*/
+harness/handovers/*.md
+harness/sprints/*-eval.json
+harness/sprints/*-handoff.md
+harness/sprints/*.handoff.md
+harness/sprints/*.traceability.json
+
+# 其他
+paste-cache/
+file-history/
+shell-snapshots/
+
+# OAuth secrets — 防意外提交
+client_secret_*.json
+*.googleusercontent.com.json
+*credentials*.json

.gitleaks.toml

@@ -0,0 +1,14 @@
+title = "Solar release secret scan"
+
+[allowlist]
+description = "Solar false-positive and fixture allowlist"
+paths = [
+  '''^harness/tests/''',
+]
+regexes = [
+  '''key:\s*"(queueSize|failureRate24h|failureRate1h|retryingNodes|repairTasksActive|repairTasks24h|repairBranchTasks24h|handoffFailed)"''',
+  '''api_key=sk-abcdef12345678901234567890123456789012345678''',
+  '''token=ghp_test_redacted_value_only''',
+  '''Authorization:\s*Bearer\s+<[^>]+>''',
+  '''Authorization:\s*Bearer\s+\$[A-Z0-9_]+''',
+]

.gitmodules

@@ -0,0 +1,3 @@
+[submodule "secretary/openclaw"]
+	path = secretary/openclaw
+	url = https://github.com/openclaw/openclaw.git

.solar/standards/genesispod/README.md

@@ -0,0 +1,9 @@
+# GenesisPod Standards Port
+
+This directory is the repo-local source of truth for the Solar Standards Guard.
+
+- `raw/` is an exact copy of GenesisPod `.claude/standards/*.md` plus source metadata.
+- `solar-port/` is the Solar-Harness porting surface. The first version is a machine port and must remain reviewable.
+- `manifest.yaml` is generated by `solar-harness standards compile`.
+
+The Standards Guard compiles these Markdown files into executable rule atoms.

.solar/standards/genesispod/manifest.yaml

@@ -0,0 +1,142 @@
+{
+  "schema_version": "solar.standards.source_manifest.v1",
+  "source": "GenesisPod .claude/standards",
+  "file_count": 27,
+  "files": [
+    {
+      "path": ".solar/standards/genesispod/raw/00-overview.md",
+      "sha256": "39ca0fc91e76426fca2203d9c9b966440262174572287eab0edb762873a98266",
+      "bytes": 10581
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/02-directory-structure.md",
+      "sha256": "699fb728a4e8d9d552b4e158edc0660a0d43e14e3a5ccfafa71ba209462d44a9",
+      "bytes": 22620
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/03-naming-conventions.md",
+      "sha256": "70479b61bf4aacb5165634c2f694c61aed03bbec114ad03b2c9369461e042ffb",
+      "bytes": 14191
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/04-code-style.md",
+      "sha256": "05ce2d570063da3d3505ae504d4d3065ae4538bb9881ae2869b7fa43007857fc",
+      "bytes": 14921
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/05-api-design.md",
+      "sha256": "a4ed22c71dae5bd9268ed0fd29303a228b6c6e184a64d7263d6997ada6386590",
+      "bytes": 15342
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/06-database-design.md",
+      "sha256": "0ca91477374582a38ebeba92f029cf786562c2440d333751768810f268366dc1",
+      "bytes": 19125
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/07-testing-standards.md",
+      "sha256": "a1491abfcaab833fa93bbde653b178fd362b734343eeff618006c0579eeb5498",
+      "bytes": 20340
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/08-git-workflow.md",
+      "sha256": "ad532ffcf62088c50d17dde65855bcbabf3e4b5c17e894da15e6690440d0b14d",
+      "bytes": 7020
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/09-documentation.md",
+      "sha256": "84bfd5becf889249adb33e88fbaeb46732555eacd930899b3f44944ce21bdba4",
+      "bytes": 16253
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/10-documentation-organization.md",
+      "sha256": "f8079f8d5f108c452e4c086d802f123f2950b632b2a054faf14f4a86fa5d9cc9",
+      "bytes": 15817
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/10-security.md",
+      "sha256": "e2263cee8e792cee54b3a265e4e7e1f22d48efdd90ab663c400f5f56b6b52dd0",
+      "bytes": 15602
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/11-logging-standards.md",
+      "sha256": "6960d2288025b3bcef925c8835f48ca6503deb64448defcfbe1462a051afa552",
+      "bytes": 4752
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/12-scripts-management.md",
+      "sha256": "c6e06ef4c01a267924e3c5d8e1dc895ace9329596e97467bf7703e60486ad90a",
+      "bytes": 6791
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/13-module-dependencies.md",
+      "sha256": "6bad118ea8a7b4fe77208f5487856e2ded858d489b32b9afd40c5d13ffa4f7f1",
+      "bytes": 7599
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/14-skills-development.md",
+      "sha256": "69596580a4d9aa3a382af901c181cfc550c12e415da7940fe3a33af3a8e72476",
+      "bytes": 34497
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/15-report-template.md",
+      "sha256": "1094af3131613214d20e43efab4c9ab48677e92a0d3a75481593086421bd1bff",
+      "bytes": 9729
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/16-ai-engine-harness-structure.md",
+      "sha256": "33595cc9b15c1b3f34911767be66396f594baa985a515549d33f6aee2a9d63cc",
+      "bytes": 51692
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/17-extension-governance.md",
+      "sha256": "3a06a6026d3bfcae4e4abad8addce10cc94b1b9dacde8dbcffae3bd61f9f11ea",
+      "bytes": 8833
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/18-base-layer-file-governance.md",
+      "sha256": "d27fb96707788c972131b7cda783acab0a7f419a93a28454628dd8b2c4fdb743",
+      "bytes": 7188
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/19-plugin-system-governance.md",
+      "sha256": "aee5aafd4f4f34843366cce8a57f1562617b591218685b6f55082a9d8302fbfc",
+      "bytes": 25237
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/20-admin-ui-design.md",
+      "sha256": "5ae08d42c9355a515df8623491b49716b1e86720c1db4d4f50864f9dfa659dc4",
+      "bytes": 20394
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/21-agent-teams-presentation.md",
+      "sha256": "7cfbdb1d232a1c0c4db1c0bb594ba22184c32aece2ca965f825fe196f213f145",
+      "bytes": 13633
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/22-frontend-ui-component-governance.md",
+      "sha256": "c422656b3f6b101347f91c34994a4f4068bf51a55fd8aa0c7f65d8643b06bdf8",
+      "bytes": 17457
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/23-business-team-framework-usage.md",
+      "sha256": "fc6d56a322d74185b1374b1ecf7a01600d43e49037539f4cfa9f2754dd2a5494",
+      "bytes": 19640
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/24-open-api-structure.md",
+      "sha256": "a1bce76abab3d36b21f29c034e7d04318cadbd9cf5a795f4e7178df8384d6264",
+      "bytes": 6122
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/27-extension-cookbook.md",
+      "sha256": "92a9ba15b1e3dc11d6e9de9e6cde2b12eaac263ffa5c14facc60a1378eb98e9a",
+      "bytes": 25488
+    },
+    {
+      "path": ".solar/standards/genesispod/raw/99-quick-reference.md",
+      "sha256": "f4a66b0fcbf44c0d39bcdce8b2054b007ecd2926b61a28b2faa313c900126c4e",
+      "bytes": 7442
+    }
+  ]
+}