fix(cli): make mirror status report canonical runtime truth only

.github/workflows/mirror-runtime-ci.yml

@@ -14,10 +14,13 @@ on:
       - "tsdown.mirror.config.ts"
       - "vitest.mirror.config.ts"
       - "scripts/ci-mirror-smoke.ts"
+      - "scripts/test-mirror-runtime-boundary-smoke.mjs"
       - "scripts/assemble-mirror-runtime-dist.ts"
       - "scripts/copy-mirror-runtime-assets.ts"
       - "scripts/verify-mirror-runtime-dist.ts"
       - "packaging/mirror-runtime/**"
+      - "src/compat/openclaw/shim-boundary.test.ts"
+      - "src/runtime/compat-legacy-boundary.test.ts"
       - "test/mirror-package-boundary.test.ts"
       - "docs/debug/mirror-runtime-canonical-entrypoints.md"
       - ".github/workflows/mirror-runtime-ci.yml"
@@ -79,6 +82,9 @@ jobs:
         with:
           install-bun: "false"
 
+      - name: Run Mirror runtime boundary smoke target
+        run: pnpm test:mirror:smoke
+
       - name: Download Mirror runtime dist artifact
         uses: actions/download-artifact@v4
         with:
@@ -94,5 +100,8 @@ jobs:
       - name: Smoke packaged Mirror CLI entry
         run: /tmp/mirror-runtime-smoke/mirror-runtime-linux/rootfs/opt/mirror-runtime/bin/mirror help
 
+      - name: Smoke packaged Mirror runtime service
+        run: node --import tsx scripts/ci-mirror-smoke.ts --runtime-root /tmp/mirror-runtime-smoke/mirror-runtime-linux/rootfs/opt/mirror-runtime
+
       - name: Smoke built Mirror runtime service
         run: pnpm smoke:mirror && pnpm verify:mirror-runtime-dist

docs/architecture/mirror-runtime-split-readiness-checklist.md

@@ -59,49 +59,58 @@ Current score: `yellow`
 Current reality:
 
 - Service runtime state is real and daemon-backed.
-- Console and CLI parity improved materially, but should still be treated as a seam until one runtime truth is clearly universal.
+- CLI parity improved materially for status, sync summary, and key operator-truth flows.
+- Daemon-side runtime, debug, and health websocket truth is now covered with focused tests.
+- Console execution and a few remaining compatibility edges should still be treated as the next ownership seam until one runtime truth is clearly universal.
 
 ### 2. Service and operator surfaces
 
 Current score: `yellow`
 
-- [ ] Canonical read-only operator surfaces are present and stable.
-- [ ] Health, runtime, debug, actions, providers, and sync surfaces are consistent in style and ownership.
+- [x] Canonical read-only operator surfaces are present and stable.
+- [x] Health, runtime, debug, actions, providers, and sync surfaces are consistent in style and ownership.
 - [ ] Operator-facing surfaces do not depend on legacy `src/runtime/**` wrappers.
-- [ ] Additive runtime/status endpoints are covered by service-level tests.
+- [x] Additive runtime/status endpoints are covered by service-level tests.
 
 Current reality:
 
 - `/mirror/health`, `/mirror/status`, `/mirror/runtime`, `/mirror/runtime/debug`, `/mirror/actions`, `/mirror/providers`, and `/mirror/sync` are real.
-- This area is close, but operator truth is still uneven in CLI status and verify-lore flows.
+- `mirror status` is daemon-backed and limited to runtime truth only on the canonical Mirror path.
+- Websocket transport/control/summary truth is now materially covered at both service and daemon state layers.
+- This area is materially improved, but should remain yellow until compatibility-only wrappers stop competing with the canonical operator path and console/runtime ownership is tighter.
 
 ### 3. Sync and runtime state visibility
 
 Current score: `yellow`
 
-- [ ] Sync peer state is available on a canonical read-only runtime surface.
-- [ ] `/mirror-sync/peers` and `/mirror-sync/updates` have focused service-level regression coverage.
+- [x] Sync peer state is available on a canonical read-only runtime surface.
+- [x] `/mirror-sync/peers` and `/mirror-sync/updates` have focused service-level regression coverage.
 - [ ] Runtime event surfaces expose enough state to understand sync activity without reading internal modules.
-- [ ] Sync state is summarized consistently between operator surfaces and runtime state.
+- [x] Sync state is summarized consistently between operator surfaces and runtime state.
 
 Current reality:
 
 - Sync read surfaces are real.
 - `/mirror/sync` now exposes read-only peer state from the live registry.
+- CLI status parity now covers the daemon-backed sync summary.
 - Sync is still a seam because execution state is not fully daemon-owned beyond the current registry and event stream summaries.
+- The remaining small gap here is narrower now: understanding sync activity from daemon-owned inspection without reading internal execution modules.
 
 ### 4. CLI and service parity
 
 Current score: `yellow`
 
 - [ ] `mirror` CLI commands execute through the same canonical runtime plane used by service ingress.
 - [ ] Read operations and mutable operations report the same runtime truth regardless of surface.
-- [ ] Focused parity tests exist for status, sync, and key tool flows.
+- [x] Focused parity tests exist for status, sync, and key tool flows.
 - [ ] Operator commands do not silently fall back to stale or compatibility-only logic.
 
 Current reality:
 
-- CLI coverage is much better than before, but this should not be treated as fully green until parity is explicit for all critical operator surfaces.
+- `mirror status` and sync summary parity are now explicit and tested.
+- The canonical `mirror verify-lore` path is aligned on `MIRROR_LORE_DIR`.
+- CLI/operator-truth seams are materially improved and now included in the dedicated Mirror smoke lane.
+- This should not be treated as fully green until parity is explicit for all critical operator surfaces and compatibility-only entrypoints are no longer misleading.
 
 ### 5. Observability ownership
 
@@ -115,61 +124,65 @@ Current score: `red`
 Current reality:
 
 - Observability surfaces exist and are useful.
-- Ownership is still process-global enough that this remains a pre-split blocker.
+- Ownership is still process-global enough that this remains the clearest technical pre-split blocker.
 
 ### 6. Compatibility quarantine
 
-Current score: `red`
+Current score: `yellow`
 
-- [ ] `src/runtime/server.ts`, `src/runtime/brain-chat.ts`, `src/runtime/health.ts`, and `src/cli/mirror-cli.ts` are either quarantined clearly or removed.
-- [ ] Mirror-owned runtime modules do not read `OPENCLAW_*` env vars except in explicit compatibility files.
-- [ ] Canonical operator docs and entrypoints point to Mirror-native paths first.
+- [x] `src/runtime/server.ts`, `src/runtime/brain-chat.ts`, `src/runtime/health.ts`, and `src/cli/mirror-cli.ts` are clearly marked as compatibility shims.
+- [x] Mirror-owned runtime modules do not read `OPENCLAW_*` env vars except in explicit compatibility files.
+- [x] Focused guardrail coverage exists for the main shims and the remaining legacy runtime entrypoints.
+- [x] Canonical operator docs and entrypoints point to Mirror-native paths first.
 - [ ] Compatibility code is not the hidden owner of any required runtime behavior.
 
 Current reality:
 
-- Compatibility edges are still materially present at entrypoint and env-boundary level.
-- This is still one of the clearest blockers to a clean split.
+- Canonical Mirror-owned source no longer reads `OPENCLAW_*` directly outside tests and explicit compatibility paths.
+- Canonical entrypoint, operator, and JSON automation docs now point to Mirror-native paths first and describe `openclaw mirror ...` as compatibility-only.
+- Compatibility edges are still materially present at entrypoint and wrapper level, but they are now better quarantined and guarded.
+- This should remain yellow until the remaining compat entrypoints stop competing with canonical ownership in practice and compatibility code stops owning any required behavior.
 
 ### 7. Packaging and build boundary
 
-Current score: `red`
+Current score: `yellow`
 
-- [ ] Mirror has a first-class package and build boundary inside the repo.
-- [ ] Mirror artifacts can be built and tested without treating OpenClaw as the primary product identity.
-- [ ] Release and packaging paths for Mirror are explicit enough to survive a repo split.
+- [x] Mirror has a first-class package and build boundary inside the repo.
+- [x] Mirror artifacts can be built and tested without treating OpenClaw as the primary product identity.
+- [x] Release and packaging paths for Mirror are explicit enough to survive a repo split.
 
 Current reality:
 
-- Mirror runtime behavior is increasingly standalone.
-- Package, bin, and release identity are still shared enough that splitting now would be premature.
+- Mirror now has an explicit package boundary, standalone Linux runtime artifact, extracted-artifact smoke, dist verification, and bootstrap verification.
+- Package, bin, and release identity are materially more explicit and guarded than they were before the recent split-readiness PRs.
+- This area should remain yellow because the package/build boundary is now real, but the remaining blockers are runtime ownership and observability rather than packaging viability.
 
 ### 8. CI gates before split
 
-Current score: `red`
+Current score: `yellow`
 
-- [ ] A dedicated Mirror runtime smoke lane exists.
-- [ ] A boundary gate prevents new OpenClaw-specific env/config coupling inside Mirror-owned runtime modules.
-- [ ] Split-critical runtime tests are visible without depending on the full repo matrix.
+- [x] A dedicated Mirror runtime smoke lane exists.
+- [x] Split-critical runtime-boundary and daemon-truth tests are visible without depending on the full repo matrix.
+- [x] Boundary gates prevent new OpenClaw-specific env/config and import/package coupling inside Mirror-owned runtime modules.
+- [x] Mirror-specific checks are isolated enough to serve as a true split gate rather than an early smoke lane.
 
 Current reality:
 
-- Runtime tests exist.
-- Dedicated split-readiness gates are still missing.
+- A dedicated Mirror-owned smoke target now exists and is wired into the dedicated Mirror runtime workflow.
+- Runtime-boundary, daemon-truth, websocket, CLI/operator-truth, compatibility-quarantine, packaged-runtime truth, and OpenClaw env/import boundary seams are now visible in a narrow CI lane.
+- Dedicated split-readiness gates now include first-class boundary enforcement for new OpenClaw-specific env/config and import/package coupling inside Mirror-owned modules.
+- macOS shard-order instability should be treated as a CI lane, not as a product seam in this checklist.
 
 ## Current known gaps
 
 The next small, high-signal gaps remain:
 
-1. Make any remaining console and CLI execution seams explicitly daemon-backed where they are still partial.
-2. Continue enriching daemon-owned runtime events where operator/runtime inspection is still thin.
-3. Move observability ownership under daemon/runtime control.
-4. Remove OpenClaw env usage from canonical Mirror runtime modules.
-5. Fix operator truth for `mirror status`.
-6. Fix operator truth for `mirror verify-lore`.
-7. Quarantine or retire compatibility-only runtime wrappers.
-8. Create a Mirror-native package/build boundary.
-9. Add dedicated Mirror runtime CI gates.
+1. Move observability ownership under daemon/runtime control.
+2. Make any remaining console execution seams explicitly daemon-backed where they are still partial.
+3. Continue enriching daemon-owned runtime inspection only where sync/runtime understanding is still thin.
+4. Keep parity coverage growing only where a canonical operator/runtime seam is still weak.
+5. Continue shrinking compatibility entrypoints from “guarded” to “non-owning in practice.”
+6. Keep package/release verification narrow and trustworthy while the remaining runtime seams are closed.
 
 ## Do Not Split Before
 

package.json

@@ -140,6 +140,7 @@
     "test:live": "OPENCLAW_LIVE_TEST=1 CLAWDBOT_LIVE_TEST=1 vitest run --config vitest.live.config.ts",
     "test:macmini": "OPENCLAW_TEST_VM_FORKS=0 OPENCLAW_TEST_PROFILE=serial node scripts/test-parallel.mjs",
     "test:mirror": "vitest run --config vitest.mirror.config.ts",
+    "test:mirror:smoke": "node scripts/test-mirror-runtime-boundary-smoke.mjs",
     "test:ui": "pnpm lint:ui:no-raw-window-open && pnpm --dir ui test",
     "test:voicecall:closedloop": "vitest run extensions/voice-call/src/manager.test.ts extensions/voice-call/src/media-stream.test.ts src/plugins/voice-call.plugin.test.ts --maxWorkers=1",
     "test:watch": "vitest",

packaging/mirror-runtime/README.md

@@ -37,7 +37,7 @@ The package boundary intentionally excludes repository-only content:
 
 ## Linux-first Distribution Shape
 
-The generated distribution tree is:
+The generated distribution tree inside `mirror-runtime-linux.tar.gz` is:
 
 ```text
 dist/mirror-runtime-linux/

scripts/ci-mirror-smoke.ts

@@ -1,6 +1,7 @@
 import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
+import { pathToFileURL } from "node:url";
 
 type MirrorService = {
   app: { handle: (req: unknown, res: unknown) => void };
@@ -17,6 +18,36 @@ type MirrorPackageModule = {
   ) => Promise<MirrorService>;
 };
 
+type SmokeOptions = {
+  runtimeRoot?: string;
+};
+
+function parseArgs(argv: string[]): SmokeOptions {
+  const options: SmokeOptions = {};
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (arg === "--runtime-root") {
+      const value = argv[index + 1];
+      if (!value) {
+        throw new Error("Missing value for --runtime-root");
+      }
+      options.runtimeRoot = path.resolve(value);
+      index += 1;
+      continue;
+    }
+    throw new Error(`Unsupported argument: ${arg}`);
+  }
+  return options;
+}
+
+async function loadMirrorPackageModule(runtimeRoot?: string): Promise<MirrorPackageModule> {
+  if (!runtimeRoot) {
+    return (await import("../dist/mirror-package.js")) as MirrorPackageModule;
+  }
+  const modulePath = path.join(runtimeRoot, "dist", "mirror-package.js");
+  return (await import(pathToFileURL(modulePath).href)) as MirrorPackageModule;
+}
+
 async function seedLoreCorpus(loreDir: string): Promise<void> {
   const indexDir = path.join(loreDir, "_index");
   await fs.mkdir(indexDir, { recursive: true });
@@ -116,6 +147,7 @@ async function requestJsonFromApp(
 }
 
 async function main(): Promise<void> {
+  const options = parseArgs(process.argv.slice(2));
   const tempRoot = await fs.mkdtemp(path.join(os.tmpdir(), "mirror-ci-smoke-"));
   const loreDir = path.join(tempRoot, "lore-scrolls");
   const memoryDbPath = path.join(tempRoot, "mirror-memory.sqlite");
@@ -126,7 +158,7 @@ async function main(): Promise<void> {
     process.env.MIRROR_LORE_DIR = loreDir;
     process.env.MIRROR_MEMORY_DB_PATH = memoryDbPath;
 
-    const mirrorPackage = (await import("../dist/mirror-package.js")) as MirrorPackageModule;
+    const mirrorPackage = await loadMirrorPackageModule(options.runtimeRoot);
     const fetchImpl: typeof fetch = async (_url, _init) =>
       ({
         ok: true,

scripts/test-mirror-runtime-boundary-smoke.mjs

@@ -0,0 +1,87 @@
+import { spawnSync } from "node:child_process";
+
+const steps = [
+  {
+    name: "daemon/runtime-state truth",
+    command: "pnpm",
+    args: [
+      "vitest",
+      "run",
+      "src/mirrordaemon/mirrordaemon.test.ts",
+      "src/mirrordaemon/runtime_state.test.ts",
+    ],
+  },
+  {
+    name: "Mirror-owned OpenClaw env/import boundary gates",
+    command: "pnpm",
+    args: [
+      "vitest",
+      "run",
+      "src/mirror/openclaw-env-boundary.test.ts",
+      "src/mirror/openclaw-import-boundary.test.ts",
+    ],
+  },
+  {
+    name: "compatibility-quarantine guardrails",
+    command: "pnpm",
+    args: [
+      "vitest",
+      "run",
+      "src/compat/openclaw/shim-boundary.test.ts",
+      "src/runtime/compat-legacy-boundary.test.ts",
+    ],
+  },
+  {
+    name: "websocket transport/control/summary truth",
+    command: "pnpm",
+    args: [
+      "vitest",
+      "run",
+      "src/mirror-service/mirror_service.test.ts",
+      "-t",
+      [
+        "exposes canonical runtime state and debug endpoints",
+        "emits daemon runtime events for chat, tool, provider, and sync lifecycle",
+        "streams /mirror/runtime/ws with backlog, live events, and protocol messages",
+        "surfaces runtime websocket connect and disconnect events to live subscribers",
+        "replays prior websocket transport events from backlog to reconnecting subscribers",
+        "replays backlog only when explicitly requested by subscribe control messages",
+        "returns websocket error envelopes for unsupported control messages",
+        "returns websocket error envelopes for invalid control payloads",
+        "reflects websocket connection counts on the runtime summary as sockets connect and disconnect",
+        "keeps service, console, daemon, observability, and status surfaces in sync",
+      ].join("|"),
+    ],
+  },
+  {
+    name: "Mirror CLI/operator truth",
+    command: "pnpm",
+    args: [
+      "vitest",
+      "run",
+      "src/mirror-cli/mirror_cli.test.ts",
+      "-t",
+      [
+        "supports standalone status and verify-lore commands",
+        "uses MIRROR_LORE_DIR defaults for verify-lore against the current lore root",
+        "supports sync commands in human-readable mode",
+        "returns stable JSON shapes for sync commands",
+        "reports CLI status from the same daemon-backed runtime truth after command execution",
+        "keeps mirror status limited to canonical runtime truth after sync announce",
+      ].join("|"),
+    ],
+  },
+];
+
+for (const step of steps) {
+  process.stdout.write(`\n[mirror-smoke] ${step.name}\n`);
+  const result = spawnSync(step.command, step.args, {
+    stdio: "inherit",
+    shell: process.platform === "win32",
+  });
+  if (result.status !== 0) {
+    process.exit(result.status ?? 1);
+  }
+}
+
+process.stdout.write(`\n[mirror-smoke] completed: ${steps.map((step) => step.name).join(" | ")}\n`);

src/cli/program/register.subclis.ts

@@ -78,7 +78,7 @@ const entries: SubCliEntry[] = [
     description: "Mirror compatibility commands (standalone runtime ships as `mirror`)",
     hasSubcommands: true,
     register: async (program) => {
-      const mod = await import("../../mirror/telemetry_tail/cli.js");
+      const mod = await import("../../mirror/telemetry_tail/index.js");
       mod.registerMirrorTelemetryCli(program);
     },
   },

src/compat/openclaw/cli/mirror-cli.ts

@@ -5,7 +5,7 @@
  */
 
 import type { Command } from "commander";
-import { runMirrorTelemetryTailCli } from "../../../mirror/telemetry_tail/cli.js";
+import { runMirrorTelemetryTailCli } from "../../../mirror/telemetry_tail/index.js";
 
 function parseLimit(raw: string): number {
   const value = Number.parseInt(raw, 10);