echo "- Published upgrade survivor scenarios: \`${PUBLISHED_UPGRADE_SURVIVOR_SCENARIOS}\`"

} >> "$GITHUB_STEP_SUMMARY"

package_integrity:

name: Package integrity

needs: resolve_package

runs-on: ubuntu-24.04

timeout-minutes: 10

steps:

- name: Checkout package workflow ref

uses: actions/checkout@v6

with:

ref: ${{ inputs.workflow_ref }}

fetch-depth: 1

- name: Download package-under-test artifact

uses: actions/download-artifact@v8

with:

name: ${{ needs.resolve_package.outputs.package_artifact_name }}

path: .artifacts/docker-e2e-package

- name: Enforce public package integrity

env:

OPENCLAW_PACKAGE_TARBALL_CHECK_TIMINGS: "0"

shell: bash

run: |

set -euo pipefail

node scripts/check-openclaw-package-tarball.mjs .artifacts/docker-e2e-package/openclaw-current.tgz

docker_acceptance:

name: Docker product acceptance

needs: resolve_package

needs: [resolve_package, package_integrity]

uses: ./.github/workflows/openclaw-live-and-e2e-checks-reusable.yml

with:

advisory: ${{ inputs.advisory }}

package_telegram:

name: Telegram package acceptance

needs: resolve_package

needs: [resolve_package, package_integrity]

if: needs.resolve_package.outputs.telegram_enabled == 'true'

uses: ./.github/workflows/npm-telegram-beta-e2e.yml

with:

summary:

name: Verify package acceptance

needs: [resolve_package, docker_acceptance, package_telegram]

needs: [resolve_package, package_integrity, docker_acceptance, package_telegram]

if: always()

runs-on: ubuntu-24.04

timeout-minutes: 5

steps:

- name: Verify package acceptance results

env:

DOCKER_RESULT: ${{ needs.docker_acceptance.result }}

PACKAGE_INTEGRITY_RESULT: ${{ needs.package_integrity.result }}

PACKAGE_TELEGRAM_RESULT: ${{ needs.package_telegram.result }}

RESOLVE_RESULT: ${{ needs.resolve_package.result }}

shell: bash

failed=0

for item in \

"resolve_package=${RESOLVE_RESULT}" \

"package_integrity=${PACKAGE_INTEGRITY_RESULT}" \

"docker_acceptance=${DOCKER_RESULT}" \

"package_telegram=${PACKAGE_TELEGRAM_RESULT}"

do