Human-gated AI development workflows

Worker dispatch ready

KAN-18QA gate

Progress change in Jira to match active step

Repository

danubii/openclaw-orchestrator

ai/KAN-18-progress-change-in-jira-to-match-active-step

Created

Apr 26, 12:35 PM UTC

Updated Apr 26, 02:26 PM UTC

Owner

dev-user

Manual Qa / QA approval

Mode

Feature

PlanWaitForApproval

Run timeline

12/14 steps complete

Ticket Intake

Apr 26, 12:35 PM UTCDuration 2s

Completed

Context Build

Apr 26, 12:38 PM UTCDuration 2m 39s

Completed

Codex Plan

Apr 26, 12:38 PM UTCDuration 2m 39s

Completed

Plan Approval

Apr 26, 12:48 PM UTCDuration 10m 21s

Completed

Codex Implementation

Apr 26, 12:58 PM UTCDuration 10m 04s

Completed

Test Run

Apr 26, 01:01 PM UTCDuration 2m 12s

Completed

Cross Repository Integration Test

Apr 26, 12:35 PM UTCDuration 0s

Completed

Smoke Test

Apr 26, 01:03 PM UTCDuration 2m 43s

Completed

Claude Review

Apr 26, 01:06 PM UTCDuration 2m 56s

Completed

Review Approval

Apr 26, 02:09 PM UTCDuration 1h 02m 50s

Completed

Git Push Branch

Apr 26, 02:09 PM UTCDuration 12s

Completed

Test Deploy

Apr 26, 02:26 PM UTCDuration 16m 51s

Completed

Manual Qa

Apr 26, 02:26 PM UTCElapsed 1h 26m 05s

Pending

Pull Request

Queued

Pending

Artifact viewer

qa-checklist.md · v1

Loading artifact

Lifecycle

Active workflow

Gate control

Manual Qa

PlanningImplementation

QA Sandbox

https://qa.example.local/workflows/KAN-18

Duration 0s

QA approval commentManual QA notes

Approval history

TestDeployApproved

dev-user / Apr 26, 02:26 PM UTC

ReviewApproved

dev-user / Apr 26, 02:09 PM UTC

QualityGateOverrideApproved

dev-user / Apr 26, 02:09 PM UTC

ReviewApproval: overrode 2 unresolved medium finding(s).

PlanApproved

dev-user / Apr 26, 12:48 PM UTC

Repositories

1 target

danubii/openclaw-orchestrator

ai/KAN-18-progress-change-in-jira-to-match-active-step

Completed

Target: main

QA checklist

0/4 complete

Smoke test critical user pathRequired

Verify deployment health endpointRequired

Check generated release notesRequired

Capture manual regression notesOptional

Review findings

7 total / 2 priority

logStreamer.AppendAsync inside catch block breaks best-effort Jira isolation

Medium

src/OpenClaw.Orchestrator.Infrastructure/Services/JiraWorkflowProgressService.cs:55-63

In JiraWorkflowProgressService.SyncWorkflowProgressAsync, the catch block calls `await logStreamer.AppendAsync(...)`. If AppendAsync throws, the new exception escapes the catch boundary and propagates through WorkflowOrchestrator and WorkerJobProcessor call sites that do not themselves catch it. This means a transient log-streamer failure during a Jira warning could fail an otherwise successful workflow operation, violating the best-effort isolation guarantee.

Wrap the logStreamer.AppendAsync call inside the catch block in its own inner try-catch that logs and swallows further exceptions, ensuring no exception can escape SyncWorkflowProgressAsync.

QA approval sync call missing from WorkflowOrchestrator

Medium

src/OpenClaw.Orchestrator.Infrastructure/Services/WorkflowOrchestrator.cs

The acceptance criteria explicitly requires QA approval to trigger a Jira transition. The diff adds sync calls for all other human-gated transitions (plan approval, review approval, review return, stop, rerun, smoke test skip, test deploy, PR handoff) but the method handling QA approval does not include a sync call. After QA approval Jira remains in its previous state until the PR worker job starts (or indefinitely if there is no PR step).

Add `await jiraWorkflowProgress.SyncWorkflowProgressAsync(workflowRunId, "qa approved", cancellationToken);` after the database save in ApproveQaAsync (or equivalent) and add a corresponding test assertion.

ActiveStepAsync makes two sequential DB round-trips

Low

src/OpenClaw.Orchestrator.Infrastructure/Services/JiraWorkflowProgressService.cs:70-91

ActiveStepAsync first queries WorkerJobs, then on miss queries WorkflowSteps — two consecutive database round-trips per sync call. Under heavy concurrent load this adds latency. A single query with a join would be more efficient.

Consolidate into a single EF query joining WorkerJobs and WorkflowSteps, or at minimum load both in parallel.

ContainsNormalized bidirectional match can produce overly broad fallback matches

Low

src/OpenClaw.Orchestrator.Infrastructure/Services/JiraWorkflowStepMapper.cs:90-95

The fallback matching checks `candidate.Contains(normalized)` in addition to `normalized.Contains(candidate)`. Very short normalized status names (e.g., 'qa', 'pr') can match unrelated Jira statuses whose normalized names happen to contain those substrings, potentially triggering incorrect transitions.

Enforce a minimum token length (e.g., 3 characters) before applying the bidirectional contains branch, or restrict the reverse direction to exact whole-word matching.

JiraRestClient JiraOptions overloads unnecessarily public

Low

src/OpenClaw.Orchestrator.Infrastructure/Services/JiraRestClient.cs:69-130

The overloads GetTransitionsAsync(string, JiraOptions, CancellationToken) and TransitionIssueAsync(string, string, JiraOptions, CancellationToken) are public but are only called by RuntimeJiraClient. Public visibility leaks the internal configuration bypass contract.

Change access modifier from public to internal on both JiraOptions overloads.

No test for best-effort isolation when logStreamer fails in catch block

Suggestion

tests/OpenClaw.Orchestrator.Application.Tests/Services/JiraRestClientTests.cs

There is no test verifying that SyncWorkflowProgressAsync does not propagate exceptions when the logStreamer raises during the warning log write. This is the scenario described in M2.

Add a unit test that injects a failing logStreamer stub and asserts SyncWorkflowProgressAsync completes without throwing.

Several orchestrator sync call points not verified in tests

Suggestion

tests/OpenClaw.Orchestrator.Application.Tests/WorkflowOrchestratorTests.cs

The test suite does not assert sync calls for ApproveReviewAsync (review approved), ReturnReviewFindingsAsync (review findings returned), PR handoff (pull request handoff), or the EnqueueStepJobAsync queued-step path. These transitions exist in the implementation but are untested.

Add Assert.Contains assertions for the missing reason strings in existing integration tests that exercise those code paths.

Live logs

100 entries / offline

13:02:43smokelibcups2t64 is already the newest version (2.4.7-1.2ubuntu7.9).

13:02:43smokelibdbus-1-3 is already the newest version (1.14.10-4ubuntu4.1).

13:02:43smokelibdrm2 is already the newest version (2.4.125-1ubuntu0.1~24.04.1).

13:02:43smokelibgbm1 is already the newest version (25.2.8-0ubuntu0.24.04.1).

13:02:43smokelibglib2.0-0t64 is already the newest version (2.80.0-6ubuntu3.8).

13:02:43smokelibnspr4 is already the newest version (2:4.35-1.1build1).

13:02:43smokelibnss3 is already the newest version (2:3.98-1ubuntu0.1).

13:02:43smokelibpango-1.0-0 is already the newest version (1.52.1+ds-1build1).

13:02:43smokelibx11-6 is already the newest version (2:1.8.7-1build1).

13:02:43smokelibxcb1 is already the newest version (1.15-1ubuntu2).

13:02:43smokelibxcomposite1 is already the newest version (1:0.4.5-1build3).

13:02:43smokelibxdamage1 is already the newest version (1:1.1.6-1build1).

13:02:43smokelibxext6 is already the newest version (2:1.3.4-1build2).

13:02:43smokelibxfixes3 is already the newest version (1:6.0.0-2build1).

13:02:43smokelibxkbcommon0 is already the newest version (1.6.0-1build1).

13:02:43smokelibxrandr2 is already the newest version (2:1.5.2-2build1).

13:02:43smokexvfb is already the newest version (2:21.1.12-1ubuntu1.5).

13:02:43smokefonts-noto-color-emoji is already the newest version (2.047-0ubuntu0.24.04.1).

13:02:43smokefonts-unifont is already the newest version (1:15.1.01-1build1).

13:02:43smokelibfontconfig1 is already the newest version (2.15.0-1.1ubuntu2).

13:02:43smokelibfreetype6 is already the newest version (2.13.2+dfsg-1ubuntu0.1).

13:02:43smokexfonts-cyrillic is already the newest version (1:1.0.5+nmu1).

13:02:43smokexfonts-scalable is already the newest version (1:1.0.3-1.3).

13:02:43smokefonts-liberation is already the newest version (1:2.1.5-3).

13:02:43smokefonts-ipafont-gothic is already the newest version (00303-21ubuntu1).

13:02:43smokefonts-wqy-zenhei is already the newest version (0.9.45-8).

13:02:43smokefonts-tlwg-loma-otf is already the newest version (1:0.7.3-1).

13:02:43smokefonts-freefont-ttf is already the newest version (20211204+svn4273-2).

13:02:43smoke0 upgraded, 0 newly installed, 0 to remove and 1 not upgraded.

13:02:43smokeDownloading Chrome for Testing 147.0.7727.15 (playwright chromium v1217) from https://cdn.playwright.dev/builds/cft/147.0.7727.15/linux64/chrome-linux64.zip

13:02:50smoke| | 0% of 170.4 MiB

13:02:51smoke|■■■■■■■■ | 10% of 170.4 MiB

13:02:52smoke|■■■■■■■■■■■■■■■■ | 20% of 170.4 MiB

13:02:52smoke|■■■■■■■■■■■■■■■■■■■■■■■■ | 30% of 170.4 MiB

13:02:53smoke|■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■ | 40% of 170.4 MiB

13:02:53smoke|■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■ | 50% of 170.4 MiB

13:02:54smoke|■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■ | 60% of 170.4 MiB

13:02:54smoke|■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■ | 70% of 170.4 MiB

13:02:55smoke|■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■ | 80% of 170.4 MiB

13:02:55smoke|■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■ | 90% of 170.4 MiB

13:02:56smoke|■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■| 100% of 170.4 MiB

13:02:57smokeChrome for Testing 147.0.7727.15 (playwright chromium v1217) downloaded to /workspace/repo-10-danubii-openclaw-orchestrator/web/node_modules/playwright-core/.local-browsers/chromium-1217

13:02:57smokeDownloading FFmpeg (playwright ffmpeg v1011) from https://cdn.playwright.dev/dbazure/download/playwright/builds/ffmpeg/1011/ffmpeg-linux.zip

13:03:04smoke| | 0% of 2.3 MiB

13:03:04smoke|■■■■■■■■ | 10% of 2.3 MiB

13:03:04smoke|■■■■■■■■■■■■■■■■ | 20% of 2.3 MiB

13:03:04smoke|■■■■■■■■■■■■■■■■■■■■■■■■ | 30% of 2.3 MiB

13:03:04smoke|■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■ | 40% of 2.3 MiB

13:03:04smoke|■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■ | 50% of 2.3 MiB

13:03:04smoke|■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■ | 60% of 2.3 MiB

13:03:04smoke|■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■ | 70% of 2.3 MiB

13:03:04smoke|■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■ | 80% of 2.3 MiB

13:03:04smoke|■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■ | 90% of 2.3 MiB

13:03:04smoke|■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■| 100% of 2.3 MiB

13:03:04smokeFFmpeg (playwright ffmpeg v1011) downloaded to /workspace/repo-10-danubii-openclaw-orchestrator/web/node_modules/playwright-core/.local-browsers/ffmpeg-1011

13:03:04smokeDownloading Chrome Headless Shell 147.0.7727.15 (playwright chromium-headless-shell v1217) from https://cdn.playwright.dev/builds/cft/147.0.7727.15/linux64/chrome-headless-shell-linux64.zip

13:03:12smoke| | 0% of 112 MiB

13:03:13smoke|■■■■■■■■ | 10% of 112 MiB

13:03:13smoke|■■■■■■■■■■■■■■■■ | 20% of 112 MiB

13:03:13smoke|■■■■■■■■■■■■■■■■■■■■■■■■ | 30% of 112 MiB

13:03:14smoke|■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■ | 40% of 112 MiB

13:03:14smoke|■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■ | 50% of 112 MiB

13:03:14smoke|■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■ | 60% of 112 MiB

13:03:14smoke|■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■ | 70% of 112 MiB

13:03:15smoke|■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■ | 80% of 112 MiB

13:03:15smoke|■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■ | 90% of 112 MiB

13:03:15smoke|■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■■| 100% of 112 MiB

13:03:17smokeChrome Headless Shell 147.0.7727.15 (playwright chromium-headless-shell v1217) downloaded to /workspace/repo-10-danubii-openclaw-orchestrator/web/node_modules/playwright-core/.local-browsers/chromium_headless_shell-1217

13:03:17smoke> /workspace/repo-10-danubii-openclaw-orchestrator/web/node_modules/.bin/playwright test

13:03:27smokeRunning 5 tests using 2 workers

13:03:43smoke·····

13:03:43smoke 5 passed (25.5s)

13:03:44smokeSmokeTest completed with exit code 0.

13:03:44workerQueued ClaudeReview.

13:03:45workerWorker claimed ClaudeReview job cd008162-79c9-44a0-840f-9d64115c7f6b.

13:06:41claudeClaudeReview completed with exit code 0.

14:09:32gitReview approved. Queued branch push for 1 repository.

14:09:33workerWorker claimed GitPushBranch job 4fa2daec-2e1e-48ba-807f-e8c35fc7929b.

14:09:33gitstderr: Cloning into 'repository'...

14:09:37gitstderr: HEAD is now at e420ac1 Add automated quality gate remediation

14:09:38gitstderr: Switched to a new branch 'ai/KAN-18-progress-change-in-jira-to-match-active-step'

14:09:38git[ai/KAN-18-progress-change-in-jira-to-match-active-step a5639f5] KAN-18: automated implementation

14:09:38git 16 files changed, 690 insertions(+), 8 deletions(-)

14:09:38git create mode 100644 src/OpenClaw.Orchestrator.Application/Abstractions/IJiraWorkflowProgressService.cs

14:09:38git create mode 100644 src/OpenClaw.Orchestrator.Infrastructure/Services/JiraWorkflowProgressService.cs

14:09:38git create mode 100644 src/OpenClaw.Orchestrator.Infrastructure/Services/JiraWorkflowStepMapper.cs

14:09:38git create mode 100644 tests/OpenClaw.Orchestrator.Application.Tests/Services/JiraWorkflowStepMapperTests.cs

14:09:45gitstderr: remote:

14:09:45gitstderr: remote: Create a pull request for 'ai/KAN-18-progress-change-in-jira-to-match-active-step' on GitHub by visiting:

14:09:45gitstderr: remote: https://github.com/Danubii/openclaw-orchestrator/pull/new/ai/KAN-18-progress-change-in-jira-to-match-active-step

14:09:45gitstderr: remote:

14:09:45gitstderr: To https://github.com/Danubii/openclaw-orchestrator.git

14:09:45gitstderr: * [new branch] HEAD -> ai/KAN-18-progress-change-in-jira-to-match-active-step

14:09:45gitbranch 'ai/KAN-18-progress-change-in-jira-to-match-active-step' set up to track 'origin/ai/KAN-18-progress-change-in-jira-to-match-active-step'.

14:09:46gitGitPushBranch completed with exit code 0.

14:26:36systemQueued test deployment to QA Sandbox.

14:26:36workerWorker claimed MockTestDeploy job 9640b9ed-1ba7-4e01-8cc8-55d53a510417.

14:26:37deploy10.0.202

14:26:37deploy10.9.7

14:26:37deployMockTestDeploy completed with exit code 0.