run_skills_python: ${{ steps.manifest.outputs.run_skills_python }}

run_skills_python_job: ${{ steps.manifest.outputs.run_skills_python_job }}

run_windows: ${{ steps.manifest.outputs.run_windows }}

has_changed_extensions: ${{ steps.manifest.outputs.has_changed_extensions }}

changed_extensions_matrix: ${{ steps.manifest.outputs.changed_extensions_matrix }}

run_build_artifacts: ${{ steps.manifest.outputs.run_build_artifacts }}

run_checks_fast_core: ${{ steps.manifest.outputs.run_checks_fast_core }}

run_checks_fast: ${{ steps.manifest.outputs.run_checks_fast }}

checks_node_core_nondist_matrix: ${{ steps.manifest.outputs.checks_node_core_nondist_matrix }}

run_checks_node_core_dist: ${{ steps.manifest.outputs.run_checks_node_core_dist }}

checks_node_core_dist_matrix: ${{ steps.manifest.outputs.checks_node_core_dist_matrix }}

run_extension_fast: ${{ steps.manifest.outputs.run_extension_fast }}

extension_fast_matrix: ${{ steps.manifest.outputs.extension_fast_matrix }}

run_check: ${{ steps.manifest.outputs.run_check }}

run_check_additional: ${{ steps.manifest.outputs.run_check_additional }}

run_build_smoke: ${{ steps.manifest.outputs.run_build_smoke }}

node scripts/ci-changed-scope.mjs --base "$BASE" --head HEAD

- name: Detect changed extensions

id: changed_extensions

if: github.event_name != 'workflow_dispatch' && steps.docs_scope.outputs.docs_only != 'true' && steps.changed_scope.outputs.run_node == 'true'

env:

BASE_SHA: ${{ github.event_name == 'push' && github.event.before || github.event.pull_request.base.sha }}

BASE_REF: ${{ github.event_name == 'push' && github.ref_name || github.event.pull_request.base.ref }}

run: |

node --input-type=module <<'EOF'

import { appendFileSync } from "node:fs";

import { listChangedExtensionIds } from "./scripts/lib/changed-extensions.mjs";

const extensionIds = listChangedExtensionIds({

base: process.env.BASE_SHA,

head: "HEAD",

fallbackBaseRef: process.env.BASE_REF,

unavailableBaseBehavior: "all",

});

const matrix = JSON.stringify({ include: extensionIds.map((extension) => ({ extension })) });

appendFileSync(process.env.GITHUB_OUTPUT, `has_changed_extensions=${extensionIds.length > 0}\n`, "utf8");

appendFileSync(process.env.GITHUB_OUTPUT, `changed_extensions_matrix=${matrix}\n`, "utf8");

EOF

- name: Build CI manifest

id: manifest

env:

OPENCLAW_CI_RUN_NODE_FAST_CI_ROUTING: ${{ github.event_name == 'workflow_dispatch' && 'false' || steps.changed_scope.outputs.run_node_fast_ci_routing || 'false' }}

OPENCLAW_CI_RUN_SKILLS_PYTHON: ${{ github.event_name == 'workflow_dispatch' && 'true' || steps.changed_scope.outputs.run_skills_python || 'false' }}

OPENCLAW_CI_RUN_CONTROL_UI_I18N: ${{ github.event_name == 'workflow_dispatch' && 'true' || steps.changed_scope.outputs.run_control_ui_i18n || 'false' }}

OPENCLAW_CI_HAS_CHANGED_EXTENSIONS: ${{ github.event_name == 'workflow_dispatch' && 'false' || steps.changed_extensions.outputs.has_changed_extensions || 'false' }}

OPENCLAW_CI_CHANGED_EXTENSIONS_MATRIX: ${{ github.event_name == 'workflow_dispatch' && '{"include":[]}' || steps.changed_extensions.outputs.changed_extensions_matrix || '{"include":[]}' }}

OPENCLAW_CI_REPOSITORY: ${{ github.repository }}

run: |

node --input-type=module <<'EOF'

return fallback;

};

const parseJson = (value, fallback) => {

try {

return value ? JSON.parse(value) : fallback;

} catch {

return fallback;

}

};

const createMatrix = (include) => ({ include });

const outputPath = process.env.GITHUB_OUTPUT;

const eventName = process.env.GITHUB_EVENT_NAME ?? "pull_request";

const isPush = eventName === "push";

const isCanonicalRepository = process.env.OPENCLAW_CI_REPOSITORY === "openclaw/openclaw";

const docsOnly = parseBoolean(process.env.OPENCLAW_CI_DOCS_ONLY);

const docsChanged = parseBoolean(process.env.OPENCLAW_CI_DOCS_CHANGED);

const runSkillsPython = parseBoolean(process.env.OPENCLAW_CI_RUN_SKILLS_PYTHON) && !docsOnly;

const runControlUiI18n =

parseBoolean(process.env.OPENCLAW_CI_RUN_CONTROL_UI_I18N) && !docsOnly;

const hasChangedExtensions =

parseBoolean(process.env.OPENCLAW_CI_HAS_CHANGED_EXTENSIONS) && !docsOnly;

const changedExtensionsMatrix = hasChangedExtensions

? parseJson(process.env.OPENCLAW_CI_CHANGED_EXTENSIONS_MATRIX, { include: [] })

: { include: [] };

const extensionTestShardCount = isCanonicalRepository

? DEFAULT_EXTENSION_TEST_SHARD_COUNT

: Math.max(DEFAULT_EXTENSION_TEST_SHARD_COUNT, 36);

run_android: runAndroid,

run_skills_python: runSkillsPython,

run_windows: runWindows,

has_changed_extensions: hasChangedExtensions,

changed_extensions_matrix: changedExtensionsMatrix,

run_build_artifacts: runNodeFull,

run_checks_fast_core: runChecksFastCore,

run_checks_fast: runNodeFull,

checks_node_core_nondist_matrix: createMatrix(nodeTestNonDistShards),

run_checks_node_core_dist: nodeTestDistShards.length > 0,

checks_node_core_dist_matrix: createMatrix(nodeTestDistShards),

run_extension_fast: hasChangedExtensions && !isPush,

extension_fast_matrix: createMatrix(

hasChangedExtensions && !isPush

? (changedExtensionsMatrix.include ?? []).map((entry) => ({

check_name: `extension-fast-${entry.extension}`,

extension: entry.extension,

}))

: [],

),

run_check: runNodeFull,

run_check_additional: runNodeFull,

run_build_smoke: runNodeFull,

exit 1

fi

extension-fast:

permissions:

contents: read

name: "extension-fast"

needs: [preflight]

if: needs.preflight.outputs.run_extension_fast == 'true'

runs-on: ${{ github.repository == 'openclaw/openclaw' && 'blacksmith-8vcpu-ubuntu-2404' || 'ubuntu-24.04' }}

timeout-minutes: 60

strategy:

fail-fast: false

matrix: ${{ fromJson(needs.preflight.outputs.extension_fast_matrix) }}

steps:

- name: Checkout

shell: bash

env:

CHECKOUT_REPO: ${{ github.repository }}

CHECKOUT_SHA: ${{ github.sha }}

CHECKOUT_TOKEN: ${{ github.token }}

run: |

set -euo pipefail

workdir="$GITHUB_WORKSPACE"

auth_header="$(printf 'x-access-token:%s' "$CHECKOUT_TOKEN" | base64 | tr -d '\n')"

reset_checkout_dir() {

mkdir -p "$workdir"

find "$workdir" -mindepth 1 -maxdepth 1 -exec rm -rf {} +

}

checkout_attempt() {

local attempt="$1"

reset_checkout_dir

git init "$workdir" >/dev/null

git config --global --add safe.directory "$workdir"

git -C "$workdir" remote add origin "https://github.com/${CHECKOUT_REPO}"

git -C "$workdir" config gc.auto 0

timeout --signal=TERM 30s git -C "$workdir" \

-c protocol.version=2 \

-c "http.https://github.com/.extraheader=AUTHORIZATION: basic ${auth_header}" \

fetch --no-tags --prune --no-recurse-submodules --depth=1 origin \

"+${CHECKOUT_SHA}:refs/remotes/origin/ci-target" || return 1

git -C "$workdir" checkout --force --detach "$CHECKOUT_SHA" || return 1

test -f "$workdir/.github/actions/setup-node-env/action.yml" || return 1

echo "checkout attempt ${attempt}/5 succeeded"

}

for attempt in 1 2 3 4 5; do

if checkout_attempt "$attempt"; then

exit 0

fi

echo "checkout attempt ${attempt}/5 failed"

sleep $((attempt * 5))

done

echo "checkout failed after 5 attempts" >&2

exit 1

- name: Setup Node environment

uses: ./.github/actions/setup-node-env

with:

install-bun: "false"

- name: Run changed extension tests

env:

OPENCLAW_CHANGED_EXTENSION: ${{ matrix.extension }}

run: |

set -euo pipefail

if [ "$OPENCLAW_CHANGED_EXTENSION" = "telegram" ]; then

export OPENCLAW_VITEST_MAX_WORKERS=1

export NODE_OPTIONS="${NODE_OPTIONS:+$NODE_OPTIONS }--max-old-space-size=6144"

pnpm test:extension "$OPENCLAW_CHANGED_EXTENSION" -- --pool=forks

exit 0

fi

pnpm test:extension "$OPENCLAW_CHANGED_EXTENSION"

# Types, lint, and format check shards.

check-shard:

permissions: