OPENCLAW_BUILD_PRIVATE_QA: "1"

OPENCLAW_ENABLE_PRIVATE_QA_CLI: "1"

CRABBOX_REF: main

CRABBOX_CAPACITY_REGIONS: eu-west-1,eu-west-2,eu-central-1,us-east-1,us-west-2

CRABBOX_AWS_REGION: us-east-1

CRABBOX_CAPACITY_REGIONS: us-east-1

MANTIS_OUTPUT_DIR: .artifacts/qa-e2e/mantis/telegram-desktop-proof

jobs:

{

printf '%s\n' 'Defaults env_keep += "CODEX_HOME CODEX_INTERNAL_ORIGINATOR_OVERRIDE"'

printf '%s\n' 'Defaults env_keep += "BASELINE_REF BASELINE_SHA CANDIDATE_REF CANDIDATE_SHA"'

printf '%s\n' 'Defaults env_keep += "CRABBOX_ACCESS_CLIENT_ID CRABBOX_ACCESS_CLIENT_SECRET CRABBOX_COORDINATOR CRABBOX_COORDINATOR_TOKEN CRABBOX_LEASE_ID CRABBOX_PROVIDER CRABBOX_CAPACITY_REGIONS"'

printf '%s\n' 'Defaults env_keep += "CRABBOX_ACCESS_CLIENT_ID CRABBOX_ACCESS_CLIENT_SECRET CRABBOX_COORDINATOR CRABBOX_COORDINATOR_TOKEN CRABBOX_AWS_REGION CRABBOX_CAPACITY_REGIONS CRABBOX_LEASE_ID CRABBOX_PROVIDER"'

printf '%s\n' 'Defaults env_keep += "GH_TOKEN MANTIS_CANDIDATE_TRUST MANTIS_INSTRUCTIONS MANTIS_OUTPUT_DIR MANTIS_PR_NUMBER"'

printf '%s\n' 'Defaults env_keep += "OPENCLAW_BUILD_PRIVATE_QA OPENCLAW_ENABLE_PRIVATE_QA_CLI OPENCLAW_QA_CONVEX_SECRET_CI OPENCLAW_QA_CONVEX_SITE_URL OPENCLAW_QA_CREDENTIAL_OWNER_ID OPENCLAW_QA_MANTIS_CRABBOX_COORDINATOR OPENCLAW_QA_MANTIS_CRABBOX_COORDINATOR_TOKEN"'

printf '%s\n' 'Defaults env_keep += "OPENCLAW_TELEGRAM_USER_CRABBOX_BIN OPENCLAW_TELEGRAM_USER_CRABBOX_PROVIDER OPENCLAW_TELEGRAM_USER_DRIVER_SCRIPT OPENCLAW_TELEGRAM_USER_PROOF_CMD"'

CRABBOX_ACCESS_CLIENT_SECRET: ${{ secrets.CRABBOX_ACCESS_CLIENT_SECRET }}

CRABBOX_COORDINATOR: ${{ secrets.CRABBOX_COORDINATOR || secrets.OPENCLAW_QA_MANTIS_CRABBOX_COORDINATOR }}

CRABBOX_COORDINATOR_TOKEN: ${{ secrets.CRABBOX_COORDINATOR_TOKEN || secrets.OPENCLAW_QA_MANTIS_CRABBOX_COORDINATOR_TOKEN }}

CRABBOX_AWS_REGION: ${{ env.CRABBOX_AWS_REGION }}

CRABBOX_CAPACITY_REGIONS: ${{ env.CRABBOX_CAPACITY_REGIONS }}

CRABBOX_LEASE_ID: ${{ needs.resolve_request.outputs.lease_id }}

CRABBOX_PROVIDER: ${{ needs.resolve_request.outputs.crabbox_provider }}

OPENCLAW_BUILD_PRIVATE_QA: "1"

OPENCLAW_ENABLE_PRIVATE_QA_CLI: "1"

CRABBOX_REF: main

CRABBOX_AWS_REGION: us-east-1

CRABBOX_CAPACITY_REGIONS: us-east-1

jobs:

authorize_actor:

OPENCLAW_QA_MANTIS_CRABBOX_COORDINATOR_TOKEN: ${{ secrets.OPENCLAW_QA_MANTIS_CRABBOX_COORDINATOR_TOKEN }}

CRABBOX_ACCESS_CLIENT_ID: ${{ secrets.CRABBOX_ACCESS_CLIENT_ID }}

CRABBOX_ACCESS_CLIENT_SECRET: ${{ secrets.CRABBOX_ACCESS_CLIENT_SECRET }}

CRABBOX_AWS_REGION: ${{ env.CRABBOX_AWS_REGION }}

CRABBOX_CAPACITY_REGIONS: ${{ env.CRABBOX_CAPACITY_REGIONS }}

CRABBOX_LEASE_ID: ${{ needs.resolve_request.outputs.lease_id }}

CRABBOX_PROVIDER: ${{ needs.resolve_request.outputs.crabbox_provider }}

SCENARIO_INPUT: ${{ needs.resolve_request.outputs.scenario }}

);

});

it("passes AWS capacity regions to Crabbox warmup", () => {

it("pins AWS Crabbox proof runs to the working region", () => {

const workflow = parse(readFileSync(WORKFLOW, "utf8")) as Workflow;

const regions = "eu-west-1,eu-west-2,eu-central-1,us-east-1,us-west-2";

const liveWorkflow = parse(readFileSync(LIVE_WORKFLOW, "utf8")) as Workflow;

expect(workflow.env?.CRABBOX_CAPACITY_REGIONS).toBe(regions);

expect(workflow.env?.CRABBOX_AWS_REGION).toBe("us-east-1");

expect(workflow.env?.CRABBOX_CAPACITY_REGIONS).toBe("us-east-1");

expect(liveWorkflow.env?.CRABBOX_AWS_REGION).toBe("us-east-1");

expect(liveWorkflow.env?.CRABBOX_CAPACITY_REGIONS).toBe("us-east-1");

const agent = workflowStep("Run Codex Mantis Telegram agent");

expect(agent.env?.CRABBOX_AWS_REGION).toBe("${{ env.CRABBOX_AWS_REGION }}");

expect(agent.env?.CRABBOX_CAPACITY_REGIONS).toBe("${{ env.CRABBOX_CAPACITY_REGIONS }}");

const liveRun = jobStep(

LIVE_WORKFLOW,

"run_telegram_live",

"Run Telegram live scenario and capture desktop evidence",

);

expect(liveRun.env?.CRABBOX_AWS_REGION).toBe("${{ env.CRABBOX_AWS_REGION }}");

expect(liveRun.env?.CRABBOX_CAPACITY_REGIONS).toBe("${{ env.CRABBOX_CAPACITY_REGIONS }}");

const prepare = workflowStep("Prepare Codex user");

expect(prepare.run).toContain("CRABBOX_PROVIDER CRABBOX_CAPACITY_REGIONS");

expect(prepare.run).toContain("CRABBOX_AWS_REGION CRABBOX_CAPACITY_REGIONS");

});

it("runs the Mantis Codex agent in fast medium-effort mode", () => {

expect(proofScript).toContain('run_setup_step "tdlib clone" "$tdlib_clone_timeout"');

expect(proofScript).toContain('run_setup_step "tdlib build" "$tdlib_build_timeout"');

expect(proofScript).not.toContain("curl -fL https://telegram.org/dl/desktop/linux -o");

expect(proofScript).not.toContain("curl -fL \"$tdlib_url\" -o");

expect(proofScript).not.toContain('curl -fL "$tdlib_url" -o');

});

it("does not pass the full workflow environment into the local Telegram SUT", () => {