required: true

default: main

type: string

workflow_ref:

description: Trusted workflow ref used to run child workflows

required: false

default: main

type: string

provider:

description: Provider lane for cross-OS onboarding and the end-to-end agent turn

required: false

env:

TARGET_REF: ${{ inputs.ref }}

TARGET_SHA: ${{ steps.resolve.outputs.sha }}

WORKFLOW_REF: ${{ inputs.workflow_ref }}

CHILD_WORKFLOW_REF: ${{ github.ref_name }}

NPM_TELEGRAM_PACKAGE_SPEC: ${{ inputs.npm_telegram_package_spec }}

run: |

{

echo "## Full release validation"

echo

echo "- Target ref: \`${TARGET_REF}\`"

echo "- Target SHA: \`${TARGET_SHA}\`"

echo "- Child workflow ref: \`${WORKFLOW_REF}\`"

echo "- Child workflow ref: \`${CHILD_WORKFLOW_REF}\`"

echo "- Normal CI: \`CI\` with \`target_ref=${TARGET_SHA}\`"

echo "- Release/live/Docker/package/QA: \`OpenClaw Release Checks\`"

if [[ -n "${NPM_TELEGRAM_PACKAGE_SPEC// }" ]]; then

GH_TOKEN: ${{ github.token }}

TARGET_REF: ${{ inputs.ref }}

TARGET_SHA: ${{ needs.resolve_target.outputs.sha }}

WORKFLOW_REF: ${{ inputs.workflow_ref }}

CHILD_WORKFLOW_REF: ${{ github.ref_name }}

run: |

set -euo pipefail

dispatch_and_wait() {

local workflow="$1"

local workflow_ref="$2"

shift 2

shift

local before_json run_id status conclusion url

before_json="$(gh run list --workflow "$workflow" --event workflow_dispatch --limit 100 --json databaseId --jq '[.[].databaseId]')"

gh workflow run "$workflow" --ref "$workflow_ref" "$@"

gh workflow run "$workflow" --ref "$CHILD_WORKFLOW_REF" "$@"

for _ in $(seq 1 60); do

run_id="$(

echo "- Target SHA: \`${TARGET_SHA}\`"

} >> "$GITHUB_STEP_SUMMARY"

dispatch_and_wait ci.yml "$WORKFLOW_REF" -f target_ref="$TARGET_SHA"

dispatch_and_wait ci.yml -f target_ref="$TARGET_SHA"

release_checks:

name: Run release/live/Docker/QA validation

GH_TOKEN: ${{ github.token }}

TARGET_REF: ${{ inputs.ref }}

TARGET_SHA: ${{ needs.resolve_target.outputs.sha }}

WORKFLOW_REF: ${{ inputs.workflow_ref }}

CHILD_WORKFLOW_REF: ${{ github.ref_name }}

PROVIDER: ${{ inputs.provider }}

MODE: ${{ inputs.mode }}

run: |

set -euo pipefail

dispatch_and_wait() {

local workflow="$1"

local workflow_ref="$2"

shift 2

shift

local before_json run_id status conclusion url

before_json="$(gh run list --workflow "$workflow" --event workflow_dispatch --limit 100 --json databaseId --jq '[.[].databaseId]')"

gh workflow run "$workflow" --ref "$workflow_ref" "$@"

gh workflow run "$workflow" --ref "$CHILD_WORKFLOW_REF" "$@"

for _ in $(seq 1 60); do

run_id="$(

echo "- Cross-OS mode: \`${MODE}\`"

} >> "$GITHUB_STEP_SUMMARY"

dispatch_and_wait openclaw-release-checks.yml "$WORKFLOW_REF" \

dispatch_and_wait openclaw-release-checks.yml \

-f ref="$TARGET_SHA" \

-f provider="$PROVIDER" \

-f mode="$MODE"

id: dispatch

env:

GH_TOKEN: ${{ github.token }}

WORKFLOW_REF: ${{ inputs.workflow_ref }}

CHILD_WORKFLOW_REF: ${{ github.ref_name }}

PACKAGE_SPEC: ${{ inputs.npm_telegram_package_spec }}

PROVIDER_MODE: ${{ inputs.npm_telegram_provider_mode }}

SCENARIO: ${{ inputs.npm_telegram_scenario }}

args+=(-f scenario="$SCENARIO")

fi

gh workflow run npm-telegram-beta-e2e.yml --ref "$WORKFLOW_REF" "${args[@]}"

gh workflow run npm-telegram-beta-e2e.yml --ref "$CHILD_WORKFLOW_REF" "${args[@]}"

run_id=""

for _ in $(seq 1 60); do