{

"schemaVersion": 1,

"sources": {}

}

- npm

- ref

- url

- trusted-url

- artifact

package_ref:

description: Trusted package source ref when source=ref

default: openclaw@beta

type: string

package_url:

description: HTTPS .tgz URL when source=url

description: HTTPS .tgz URL when source=url or source=trusted-url

required: false

default: ""

type: string

package_sha256:

description: Expected package SHA-256; required for source=url

description: Expected package SHA-256; required for source=url or source=trusted-url

required: false

default: ""

type: string

trusted_source_id:

description: Named trusted source policy when source=trusted-url

required: false

default: ""

type: string

default: main

type: string

source:

description: "Package candidate source: npm, ref, url, or artifact"

description: "Package candidate source: npm, ref, url, trusted-url, or artifact"

required: true

type: string

package_ref:

default: openclaw@beta

type: string

package_url:

description: HTTPS .tgz URL when source=url

description: HTTPS .tgz URL when source=url or source=trusted-url

required: false

default: ""

type: string

package_sha256:

description: Expected package SHA-256; required for source=url

description: Expected package SHA-256; required for source=url or source=trusted-url

required: false

default: ""

type: string

trusted_source_id:

description: Named trusted source policy when source=trusted-url

required: false

default: ""

type: string

default: ""

type: string

secrets:

OPENCLAW_TRUSTED_PACKAGE_TOKEN:

required: false

OPENAI_API_KEY:

required: false

OPENAI_BASE_URL:

PACKAGE_SPEC: ${{ inputs.package_spec }}

PACKAGE_URL: ${{ inputs.package_url }}

PACKAGE_SHA256: ${{ inputs.package_sha256 }}

TRUSTED_SOURCE_ID: ${{ inputs.trusted_source_id }}

OPENCLAW_TRUSTED_PACKAGE_TOKEN: ${{ secrets.OPENCLAW_TRUSTED_PACKAGE_TOKEN }}

shell: bash

run: |

set -euo pipefail

--package-spec "$PACKAGE_SPEC" \

--package-url "$PACKAGE_URL" \

--package-sha256 "$PACKAGE_SHA256" \

--trusted-source-id "$TRUSTED_SOURCE_ID" \

--artifact-dir "${artifact_dir:-.}" \

--output-dir .artifacts/docker-e2e-package \

--output-name openclaw-current.tgz \

PACKAGE_SHA256: ${{ steps.resolve.outputs.sha256 }}

PACKAGE_VERSION: ${{ steps.resolve.outputs.package_version }}

PACKAGE_REF: ${{ inputs.package_ref }}

TRUSTED_SOURCE_ID: ${{ inputs.trusted_source_id }}

SOURCE: ${{ inputs.source }}

SUITE_PROFILE: ${{ inputs.suite_profile }}

WORKFLOW_REF: ${{ inputs.workflow_ref }}

if [[ "${SOURCE}" == "ref" ]]; then

echo "- Package ref: \`${PACKAGE_REF}\`"

fi

if [[ "${SOURCE}" == "trusted-url" ]]; then

echo "- Trusted source: \`${TRUSTED_SOURCE_ID}\`"

fi

echo "- Version: \`${PACKAGE_VERSION}\`"

echo "- SHA-256: \`${PACKAGE_SHA256}\`"

echo "- Profile: \`${SUITE_PROFILE}\`"

- `source=npm` accepts only `openclaw@beta`, `openclaw@latest`, or an exact OpenClaw release version such as `openclaw@2026.4.27-beta.2`. Use this for published prerelease/stable acceptance.

- `source=ref` packs a trusted `package_ref` branch, tag, or full commit SHA. The resolver fetches OpenClaw branches/tags, verifies the selected commit is reachable from repository branch history or a release tag, installs deps in a detached worktree, and packs it with `scripts/package-openclaw-for-docker.mjs`.

- `source=url` downloads an HTTPS `.tgz`; `package_sha256` is required.

- `source=url` downloads a public HTTPS `.tgz`; `package_sha256` is required. This path rejects URL credentials, non-default HTTPS ports, private/internal/special-use hostnames or resolved IPs, and redirects outside the same public safety policy.

- `source=trusted-url` downloads an HTTPS `.tgz` from a named trusted-source policy in `.github/package-trusted-sources.json`; `package_sha256` and `trusted_source_id` are required. Use this only for maintainer-owned enterprise mirrors or private package repositories that need configured hosts, ports, path prefixes, redirect hosts, or private-network resolution. If the policy declares bearer auth, the workflow uses the fixed `OPENCLAW_TRUSTED_PACKAGE_TOKEN` secret; URL-embedded credentials are still rejected.

- `source=artifact` downloads one `.tgz` from `artifact_run_id` and `artifact_name`; `package_sha256` is optional but should be supplied for externally shared artifacts.

Keep `workflow_ref` and `package_ref` separate. `workflow_ref` is the trusted workflow/harness code that runs the test. `package_ref` is the source commit that gets packed when `source=ref`. This lets the current test harness validate older trusted source commits without running old workflow logic.

-f package_sha256=<64-char-sha256> \

-f suite_profile=smoke

# Validate a tarball from a named trusted private mirror policy.

gh workflow run package-acceptance.yml \

--ref main \

-f workflow_ref=main \

-f source=trusted-url \

-f trusted_source_id=enterprise-artifactory \

-f package_url=https://packages.example.internal:8443/artifactory/openclaw/openclaw-current.tgz \

-f package_sha256=<64-char-sha256> \

-f suite_profile=smoke

# Reuse a tarball uploaded by another Actions run.

gh workflow run package-acceptance.yml \

--ref main \

published version.

- `source=ref`: pack a trusted branch, tag, or commit with the selected current

harness.

- `source=url`: validate an HTTPS tarball with required `package_sha256`.

- `source=url`: validate a public HTTPS tarball with required `package_sha256`.

This path rejects URL credentials, non-default HTTPS ports, private/internal

hostnames or DNS/IP results, special-use IP space, and unsafe redirects.

- `source=trusted-url`: validate an HTTPS tarball with required

`package_sha256` and `trusted_source_id` against the maintainer-owned policy

in `.github/package-trusted-sources.json`. Use this for enterprise/private

mirrors instead of weakening `source=url` with an input-level allow-private

switch. Bearer auth, when configured by policy, uses the fixed

`OPENCLAW_TRUSTED_PACKAGE_TOKEN` secret.

- `source=artifact`: reuse a tarball uploaded by another Actions run.

Full Release Validation uses `source=artifact` by default, built from the

-f telegram_mode=mock-openai

```

- Exact tarball URL proof requires a digest:

- Exact tarball URL proof requires a digest and uses the public URL safety policy:

```bash

gh workflow run package-acceptance.yml --ref main \

-f suite_profile=package

```

- Enterprise/private tarball mirrors use an explicit trusted-source policy:

```bash

gh workflow run package-acceptance.yml --ref main \

-f source=trusted-url \

-f trusted_source_id=enterprise-artifactory \

-f package_url=https://packages.example.internal:8443/artifactory/openclaw/openclaw-VERSION.tgz \

-f package_sha256=<sha256> \

-f suite_profile=package

```

`source=trusted-url` reads `.github/package-trusted-sources.json` from the trusted workflow ref and does not accept URL credentials or a workflow-input private-network bypass. If the named policy declares bearer auth, configure the fixed `OPENCLAW_TRUSTED_PACKAGE_TOKEN` secret.

- Artifact proof downloads a tarball artifact from another Actions run:

```bash

for a package candidate while release work continues. Use `source=npm` for

`openclaw@beta`, `openclaw@latest`, or an exact release version; `source=ref`

to pack a trusted `package_ref` branch/tag/SHA with the current

`workflow_ref` harness; `source=url` for an HTTPS tarball with a required

SHA-256; or `source=artifact` for a tarball uploaded by another GitHub

Actions run. The workflow resolves the candidate to

`workflow_ref` harness; `source=url` for a public HTTPS tarball with a

required SHA-256 and strict public URL policy; `source=trusted-url` for a

named trusted-source policy using required `trusted_source_id` and SHA-256; or

`source=artifact` for a tarball uploaded by another GitHub Actions run. The

workflow resolves the candidate to

`package-under-test`, reuses the Docker E2E release scheduler against that

tarball, and can run Telegram QA against the same tarball with

`telegram_mode=mock-openai` or `telegram_mode=live-frontier`. When the

version

- `source=ref`: pack a trusted `package_ref` branch, tag, or full commit SHA

with the selected `workflow_ref` harness

- `source=url`: download an HTTPS `.tgz` with required `package_sha256`

- `source=url`: download a public HTTPS `.tgz` with required `package_sha256`;

URL credentials, non-default HTTPS ports, private/internal/special-use

hostnames or resolved addresses, and unsafe redirects are rejected

- `source=trusted-url`: download an HTTPS `.tgz` with required

`package_sha256` and `trusted_source_id` from a named policy in

`.github/package-trusted-sources.json`; use this for maintainer-owned

enterprise mirrors or private package repositories instead of adding an

input-level private-network bypass to `source=url`

- `source=artifact`: reuse a `.tgz` uploaded by another GitHub Actions run

`OpenClaw Release Checks` runs Package Acceptance with `source=artifact`, the

baseline; `run_release_soak=true` or

`release_profile=full` expands to every stable npm-published baseline from

`2026.4.23` through `latest` plus reported-issue fixtures. Use

Package Acceptance with `source=npm` for an already shipped candidate, or

`source=ref`/`source=artifact` for a SHA-backed local npm tarball before

publish. It is the GitHub-native

Package Acceptance with `source=npm` for an already shipped candidate,

`source=ref` for a SHA-backed local npm tarball before publish,

`source=trusted-url` for a maintainer-owned enterprise/private mirror, or

`source=artifact` for a prepared tarball uploaded by another GitHub Actions run.

It is the GitHub-native

replacement for most of the package/update coverage that previously required

Parallels. Cross-OS release checks still matter for OS-specific onboarding,

installer, and platform behavior, but package/update product validation should

expect(nextConfig.agents?.defaults?.contextPruning?.ttl).toBe("1h");

});

it("adds cacheRetention defaults for dated Anthropic primary model refs", () => {

const nextConfig = applyConfigDefaults({

config: {

auth: {

profiles: {

"anthropic:default": {

provider: "anthropic",

mode: "api_key",

},

},

},

agents: {

defaults: {

model: { primary: "anthropic/claude-sonnet-4-20250514" },

},

},

},

env: {},

});

expect(

nextConfig.agents?.defaults?.models?.["anthropic/claude-sonnet-4-20250514"]?.params

?.cacheRetention,

).toBe("short");

});

it("exposes Claude Opus 4.7 thinking levels without loading the full provider plugin", () => {

const profile = resolveThinkingProfile({

provider: "anthropic",