From bdb25ee6bea3584e0e6f623e1ddbb470ce4057e1 Mon Sep 17 00:00:00 2001
From: zap <zap@local>
Date: Sat, 7 Mar 2026 19:59:37 +0000
Subject: [PATCH] feat(ops): include openclaw update status in infra sentinel

---
 scripts/ops-sentinel.sh | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/scripts/ops-sentinel.sh b/scripts/ops-sentinel.sh
index a1e0f98..7c8c121 100755
--- a/scripts/ops-sentinel.sh
+++ b/scripts/ops-sentinel.sh
@@ -98,6 +98,19 @@ else
   add_next "Run: openclaw security audit --json"
 fi
 
+if "$OPENCLAW_BIN" update status >"$ARTIFACT_DIR/openclaw-update-status.txt" 2>"$ARTIFACT_DIR/openclaw-update-status.err"; then
+  if grep -Eqi 'update available|outdated|new version|available:' "$ARTIFACT_DIR/openclaw-update-status.txt"; then
+    add_watch "P2 OpenClaw update available"
+    mark_p2
+    add_next "Review release notes, then run safe update workflow"
+  else
+    add_watch "P4 OpenClaw update status checked"
+  fi
+else
+  add_watch "P3 OpenClaw update status check failed"
+  add_next "Run: openclaw update status"
+fi
+
 # 2) Backup freshness from minio backup log
 if [[ -f "$BACKUP_LOG" ]]; then
   last_key="$(grep 'Backup complete:' "$BACKUP_LOG" | tail -n1 | sed -E 's#.*workspace-backups/([0-9]{8}T[0-9]{6}Z).*#\1#' || true)"