options:

- all

- ci

- plugin-prerelease

- release-checks

- install-smoke

- cross-os

echo "- Child workflow ref: \`${CHILD_WORKFLOW_REF}\`"

echo "- Rerun group: \`${RERUN_GROUP}\`"

if [[ "$RERUN_GROUP" == "all" || "$RERUN_GROUP" == "ci" ]]; then

echo "- Normal CI: \`CI\` with \`target_ref=${TARGET_SHA}\` and release-only lanes enabled"

echo "- Normal CI: \`CI\` with \`target_ref=${TARGET_SHA}\`"

else

echo "- Normal CI: skipped by rerun group"

fi

if [[ "$RERUN_GROUP" != "ci" && "$RERUN_GROUP" != "npm-telegram" ]]; then

if [[ "$RERUN_GROUP" == "all" || "$RERUN_GROUP" == "plugin-prerelease" ]]; then

echo "- Plugin prerelease: \`Plugin Prerelease\` with \`target_ref=${TARGET_SHA}\`"

else

echo "- Plugin prerelease: skipped by rerun group"

fi

if [[ "$RERUN_GROUP" == "all" || "$RERUN_GROUP" == "release-checks" || "$RERUN_GROUP" == "install-smoke" || "$RERUN_GROUP" == "cross-os" || "$RERUN_GROUP" == "live-e2e" || "$RERUN_GROUP" == "package" || "$RERUN_GROUP" == "qa" || "$RERUN_GROUP" == "qa-parity" || "$RERUN_GROUP" == "qa-live" ]]; then

echo "- Release/live/Docker/package/QA: \`OpenClaw Release Checks\`"

else

echo "- Release/live/Docker/package/QA: skipped by rerun group"

}

cancel_same_sha_push_ci

dispatch_and_wait ci.yml -f target_ref="$TARGET_SHA" -f full_release_validation=true

dispatch_and_wait ci.yml -f target_ref="$TARGET_SHA" -f include_android=true

plugin_prerelease:

name: Run plugin prerelease validation

needs: [resolve_target]

if: contains(fromJSON('["all","plugin-prerelease"]'), inputs.rerun_group)

runs-on: ubuntu-24.04

timeout-minutes: 300

outputs:

run_id: ${{ steps.dispatch.outputs.run_id }}

url: ${{ steps.dispatch.outputs.url }}

conclusion: ${{ steps.dispatch.outputs.conclusion }}

steps:

- name: Dispatch and monitor plugin prerelease

id: dispatch

env:

GH_TOKEN: ${{ github.token }}

TARGET_REF: ${{ inputs.ref }}

TARGET_SHA: ${{ needs.resolve_target.outputs.sha }}

CHILD_WORKFLOW_REF: ${{ github.ref_name }}

run: |

set -euo pipefail

dispatch_and_wait() {

local workflow="$1"

shift

local before_json dispatch_output run_id status conclusion url

before_json="$(gh run list --workflow "$workflow" --event workflow_dispatch --limit 100 --json databaseId --jq '[.[].databaseId]')"

dispatch_output="$(gh workflow run "$workflow" --ref "$CHILD_WORKFLOW_REF" "$@" 2>&1)"

printf '%s\n' "$dispatch_output"

run_id="$(

printf '%s\n' "$dispatch_output" |

sed -nE 's#.*actions/runs/([0-9]+).*#\1#p' |

tail -n 1

)"

if [[ -z "$run_id" ]]; then

for _ in $(seq 1 60); do

run_id="$(

BEFORE_IDS="$before_json" gh run list --workflow "$workflow" --event workflow_dispatch --limit 50 --json databaseId,createdAt \

--jq 'map(select(.databaseId as $id | (env.BEFORE_IDS | fromjson | index($id) | not))) | sort_by(.createdAt) | reverse | .[0].databaseId // empty'

)"

if [[ -n "$run_id" ]]; then

break

fi

sleep 5

done

fi

if [[ -z "${run_id:-}" ]]; then

echo "Could not find dispatched run for ${workflow}." >&2

exit 1

fi

echo "Dispatched ${workflow}: https://github.com/${GITHUB_REPOSITORY}/actions/runs/${run_id}"

echo "run_id=${run_id}" >> "$GITHUB_OUTPUT"

cleanup_child_run() {

local exit_code=$?

trap - EXIT INT TERM

local child_status

child_status="$(gh run view "$run_id" --json status --jq '.status' 2>/dev/null || true)"

if [[ "$child_status" != "completed" ]]; then

echo "Cancelling child ${workflow} run ${run_id} after parent exit (${exit_code})."

gh run cancel "$run_id" || gh api -X POST "repos/${GITHUB_REPOSITORY}/actions/runs/${run_id}/force-cancel" || true

fi

return "$exit_code"

}

trap cleanup_child_run EXIT INT TERM

while true; do

status="$(gh run view "$run_id" --json status --jq '.status')"

if [[ "$status" == "completed" ]]; then

break

fi

sleep 30

done

trap - EXIT INT TERM

conclusion="$(gh run view "$run_id" --json conclusion --jq '.conclusion')"

url="$(gh run view "$run_id" --json url --jq '.url')"

echo "${workflow} finished with ${conclusion}: ${url}"

echo "url=${url}" >> "$GITHUB_OUTPUT"

echo "conclusion=${conclusion}" >> "$GITHUB_OUTPUT"

if [[ "$conclusion" != "success" ]]; then

gh run view "$run_id" --json jobs --jq '.jobs[] | select(.conclusion != "success" and .conclusion != "skipped") | {name, conclusion, url}' || true

fi

}

{

echo "### Plugin prerelease"

echo

echo "- Target ref: \`${TARGET_REF}\`"

echo "- Target SHA: \`${TARGET_SHA}\`"

} >> "$GITHUB_STEP_SUMMARY"

dispatch_and_wait plugin-prerelease.yml -f target_ref="$TARGET_SHA" -f expected_sha="$TARGET_SHA"

release_checks:

name: Run release/live/Docker/QA validation

summary:

name: Verify full validation

needs: [normal_ci, release_checks, npm_telegram]

needs: [normal_ci, plugin_prerelease, release_checks, npm_telegram]

if: always()

runs-on: ubuntu-24.04

timeout-minutes: 5

env:

GH_TOKEN: ${{ github.token }}

NORMAL_CI_RUN_ID: ${{ needs.normal_ci.outputs.run_id }}

PLUGIN_PRERELEASE_RUN_ID: ${{ needs.plugin_prerelease.outputs.run_id }}

RELEASE_CHECKS_RUN_ID: ${{ needs.release_checks.outputs.run_id }}

NPM_TELEGRAM_RUN_ID: ${{ needs.npm_telegram.outputs.run_id }}

NORMAL_CI_RESULT: ${{ needs.normal_ci.result }}

PLUGIN_PRERELEASE_RESULT: ${{ needs.plugin_prerelease.result }}

RELEASE_CHECKS_RESULT: ${{ needs.release_checks.result }}

NPM_TELEGRAM_RESULT: ${{ needs.npm_telegram.result }}

run: |

check_child "normal_ci" "$NORMAL_CI_RUN_ID" 1 || failed=1

fi

if [[ "$PLUGIN_PRERELEASE_RESULT" == "skipped" && -z "${PLUGIN_PRERELEASE_RUN_ID// }" ]]; then

check_child "plugin_prerelease" "" 0 || failed=1

else

check_child "plugin_prerelease" "$PLUGIN_PRERELEASE_RUN_ID" 1 || failed=1

fi

if [[ "$RELEASE_CHECKS_RESULT" == "skipped" && -z "${RELEASE_CHECKS_RUN_ID// }" ]]; then

check_child "release_checks" "" 0 || failed=1

else

fi

summarize_child_timing "normal_ci" "$NORMAL_CI_RUN_ID"

summarize_child_timing "plugin_prerelease" "$PLUGIN_PRERELEASE_RUN_ID"

summarize_child_timing "release_checks" "$RELEASE_CHECKS_RUN_ID"

summarize_child_timing "npm_telegram" "$NPM_TELEGRAM_RUN_ID"