ProjectClownfish Cluster Workflow

Use this skill for ProjectClownfish operations in this repo. It is not just a one-job worker skill; it is the fast path for running the whole guarded cluster loop.

Hard Stance

• Execute/autonomous gates default on for live ProjectClownfish work. Set CLOWNFISH_ALLOW_EXECUTE=0 or CLOWNFISH_ALLOW_FIX_PR=0 only when intentionally pausing mutations.
• Do not dispatch a broad write-mode batch if the last canary failed, has unreviewed artifacts, or any stale pre-fix run is still active.
• Treat GitHub Actions repository variables as captured at workflow start. Resetting CLOWNFISH_ALLOW_EXECUTE does not revoke already-started runs.
• If a stale run was started with old guardrails and write mode enabled, cancel it before scaling.
• Codex workers never mutate GitHub directly. They emit JSON; scripts/execute-fix-artifact.mjs owns guarded fix PR execution and scripts/apply-result.mjs owns guarded close/merge replay.
• Only the applicator may record executed. Worker output containing executed is a bug.
• Closed historical refs are evidence only. They must not receive close_* actions.
• Security-sensitive refs do not belong in ProjectClownfish mutation. Quarantine vulnerability, advisory, CVE/GHSA, leaked secret, credential/token/API-key, plaintext secret storage, SSRF/XSS/CSRF/RCE, security-class injection, exploitability, or sensitive-data exposure refs with route_security, and keep unrelated non-security work moving.

Recovery Check

Start every session here:

pwd
git rev-parse --show-toplevel
git branch --show-current
git status --short --branch
df -h .
test -e node_modules && { ls -ld node_modules; test -L node_modules && echo node_modules_symlink=yes || echo node_modules_symlink=no; } || echo node_modules_missing

Then check live workflow state and safety vars:

gh run list --repo openclaw/clownfish --workflow cluster-worker.yml --limit 10 \
  --json databaseId,headSha,status,conclusion,createdAt,updatedAt,url \
  --jq '.[] | {databaseId,headSha,status,conclusion,createdAt,updatedAt,url}'

gh variable list --repo openclaw/clownfish --json name,value \
  --jq 'map(select(.name|test("^CLOWNFISH_"))) | sort_by(.name) | .[] | {name,value}'

Review Results

For every completed run that matters:

rm -rf /tmp/clownfish-check-RUN_ID
mkdir -p /tmp/clownfish-check-RUN_ID
gh run download RUN_ID --repo openclaw/clownfish --dir /tmp/clownfish-check-RUN_ID
npm run review-results -- /tmp/clownfish-check-RUN_ID

Summarize artifacts:

find /tmp/clownfish-check-RUN_ID -name result.json -print -quit |
  xargs jq '{status,summary,actions_total:(.actions|length),action_counts:(.actions|group_by(.action)|map({action:.[0].action,count:length}))}'

find /tmp/clownfish-check-RUN_ID -name apply-report.json -print -quit |
  xargs jq '{totals:{executed:([.actions[]? | select(.status=="executed")]|length),blocked:([.actions[]? | select(.status=="blocked")]|length),skipped:([.actions[]? | select(.status=="skipped")]|length),planned:([.actions[]? | select(.status=="planned")]|length)}}'

find /tmp/clownfish-check-RUN_ID -name fix-execution-report.json -print -quit |
  xargs jq '{status,actions}'

If review fails, inspect the failure class before doing anything else:

• executed in worker result: tighten schema, prompts, and scripts/review-results.mjs.
• close action targets closed item: tune prompts and planner so closed context refs are evidence-only; use keep_closed.
• long Run worker: reduce prompt size by hydrating canonical + open candidates only; add/verify CLOWNFISH_CODEX_TIMEOUT_MS.
• applicator blocked because target changed: rerun the job against fresh state, do not force apply.

Tune Engine

Use repo scripts and prompts as the control plane:

• schemas/codex-result.schema.json: what Codex may emit.
• prompts/worker-system.md, prompts/autonomous.md, prompts/execute.md, prompts/plan-only.md: worker behavior.

…