needs: [resolve_target]

if: inputs.rerun_group == 'all'

runs-on: ubuntu-24.04

timeout-minutes: 45

timeout-minutes: 20

permissions:

contents: read

steps:

DOCKER_BUILDKIT: "1"

run: |

set -euo pipefail

timeout --kill-after=30s 35m docker build \

timeout --kill-after=30s 15m docker build \

--target runtime-assets \

--build-arg OPENCLAW_EXTENSIONS="diagnostics-otel,codex" \

.

- name: Build and smoke test final Docker runtime image

env:

DOCKER_BUILDKIT: "1"

TARGET_SHA: ${{ needs.resolve_target.outputs.sha }}

run: |

set -euo pipefail

image_ref="openclaw-release-runtime-smoke:${TARGET_SHA}"

timeout --kill-after=30s 35m docker build \

--build-arg OPENCLAW_EXTENSIONS="diagnostics-otel,codex" \

-t "${image_ref}" \

.

docker run --rm --entrypoint /bin/sh "${image_ref}" -lc '

set -eu

test -f /app/src/agents/templates/HEARTBEAT.md

temp_root="$(mktemp -d)"

trap "rm -rf \"${temp_root}\"" EXIT

mkdir -p "${temp_root}/home" "${temp_root}/cwd"

cd "${temp_root}/cwd"

set +e

HOME="${temp_root}/home" \

USERPROFILE="${temp_root}/home" \

OPENCLAW_HOME="${temp_root}/home" \

OPENCLAW_NO_ONBOARD=1 \

OPENCLAW_SUPPRESS_NOTES=1 \

OPENCLAW_DISABLE_BUNDLED_PLUGINS=1 \

OPENCLAW_DISABLE_BUNDLED_ENTRY_SOURCE_FALLBACK=1 \

AWS_EC2_METADATA_DISABLED=true \

AWS_SHARED_CREDENTIALS_FILE="${temp_root}/home/.aws/credentials" \

AWS_CONFIG_FILE="${temp_root}/home/.aws/config" \

node /app/openclaw.mjs agent --message "workspace bootstrap smoke" --session-id "workspace-bootstrap-smoke" --local --timeout 1 --json \

>"${temp_root}/out.log" 2>&1

status="$?"

set -e

if grep -F "Missing workspace template:" "${temp_root}/out.log"; then

cat "${temp_root}/out.log"

exit 1

fi

test -f "${temp_root}/home/.openclaw/workspace/HEARTBEAT.md"

if [ "${status}" -ne 0 ]; then

cat "${temp_root}/out.log"

fi

'

normal_ci:

name: Run normal full CI

needs: [resolve_target, docker_runtime_assets_preflight]