run_checks_fast_core: ${{ steps.manifest.outputs.run_checks_fast_core }}

run_checks_fast: ${{ steps.manifest.outputs.run_checks_fast }}

checks_fast_core_matrix: ${{ steps.manifest.outputs.checks_fast_core_matrix }}

run_plugin_contracts_shards: ${{ steps.manifest.outputs.run_plugin_contracts_shards }}

plugin_contracts_matrix: ${{ steps.manifest.outputs.plugin_contracts_matrix }}

channel_contracts_matrix: ${{ steps.manifest.outputs.channel_contracts_matrix }}

run_checks: ${{ steps.manifest.outputs.run_checks }}

checks_matrix: ${{ steps.manifest.outputs.checks_matrix }}

import {

createChannelContractTestShards,

} from "./scripts/lib/channel-contract-test-plan.mjs";

import {

createPluginContractTestShards,

} from "./scripts/lib/plugin-contract-test-plan.mjs";

const parseBoolean = (value, fallback = false) => {

if (value === undefined) return fallback;

runNode && parseBoolean(process.env.OPENCLAW_CI_RUN_NODE_FAST_PLUGIN_CONTRACTS);

const runNodeFastCiRouting =

runNode && parseBoolean(process.env.OPENCLAW_CI_RUN_NODE_FAST_CI_ROUTING);

const runChecksFastCore = runNodeFull || runNodeFastPluginContracts || runNodeFastCiRouting;

const runPluginContractShards = runNodeFull || runNodeFastPluginContracts;

const runMacos =

parseBoolean(process.env.OPENCLAW_CI_RUN_MACOS) && !docsOnly && isCanonicalRepository;

const runAndroid =

if (runNodeFull) {

checksFastCoreTasks.push(

{ check_name: "checks-fast-bundled", runtime: "node", task: "bundled" },

{

check_name: "checks-fast-contracts-plugins",

runtime: "node",

task: "contracts-plugins",

},

);

} else {

if (runNodeFastPluginContracts) {

checksFastCoreTasks.push({

check_name: "checks-fast-contracts-plugins",

runtime: "node",

task: runNodeFastCiRouting ? "contracts-plugins-ci-routing" : "contracts-plugins",

});

} else if (runNodeFastCiRouting) {

if (runNodeFastCiRouting) {

checksFastCoreTasks.push({

check_name: "checks-fast-ci-routing",

runtime: "node",

run_skills_python: runSkillsPython,

run_windows: runWindows,

run_build_artifacts: runNodeFull,

run_checks_fast_core: runChecksFastCore,

run_checks_fast_core: checksFastCoreTasks.length > 0,

run_checks_fast: runNodeFull,

checks_fast_core_matrix: createMatrix(checksFastCoreTasks),

run_plugin_contracts_shards: runPluginContractShards,

plugin_contracts_matrix: createMatrix(

runPluginContractShards ? createPluginContractTestShards() : [],

),

channel_contracts_matrix: createMatrix(

runNodeFull ? createChannelContractTestShards() : [],

),

;;

esac

checks-fast-plugin-contracts-shard:

permissions:

contents: read

name: ${{ matrix.checkName }}

needs: [preflight]

if: needs.preflight.outputs.run_plugin_contracts_shards == 'true'

runs-on: ${{ github.repository == 'openclaw/openclaw' && 'blacksmith-4vcpu-ubuntu-2404' || 'ubuntu-24.04' }}

timeout-minutes: 60

strategy:

fail-fast: false

matrix: ${{ fromJson(needs.preflight.outputs.plugin_contracts_matrix) }}

steps:

- name: Checkout

shell: bash

env:

CHECKOUT_REPO: ${{ github.repository }}

CHECKOUT_SHA: ${{ needs.preflight.outputs.checkout_revision }}

CHECKOUT_TOKEN: ${{ github.token }}

run: |

set -euo pipefail

workdir="$GITHUB_WORKSPACE"

auth_header="$(printf 'x-access-token:%s' "$CHECKOUT_TOKEN" | base64 | tr -d '\n')"

reset_checkout_dir() {

mkdir -p "$workdir"

find "$workdir" -mindepth 1 -maxdepth 1 -exec rm -rf {} +

}

checkout_attempt() {

local attempt="$1"

reset_checkout_dir

git init "$workdir" >/dev/null

git config --global --add safe.directory "$workdir"

git -C "$workdir" remote add origin "https://github.com/${CHECKOUT_REPO}"

git -C "$workdir" config gc.auto 0

timeout --signal=TERM 30s git -C "$workdir" \

-c protocol.version=2 \

-c "http.https://github.com/.extraheader=AUTHORIZATION: basic ${auth_header}" \

fetch --no-tags --prune --no-recurse-submodules --depth=1 origin \

"+${CHECKOUT_SHA}:refs/remotes/origin/ci-target" || return 1

git -C "$workdir" checkout --force --detach "$CHECKOUT_SHA" || return 1

test -f "$workdir/.github/actions/setup-node-env/action.yml" || return 1

echo "checkout attempt ${attempt}/5 succeeded"

}

for attempt in 1 2 3 4 5; do

if checkout_attempt "$attempt"; then

exit 0

fi

echo "checkout attempt ${attempt}/5 failed"

sleep $((attempt * 5))

done

echo "checkout failed after 5 attempts" >&2

exit 1

- name: Setup Node environment

uses: ./.github/actions/setup-node-env

with:

install-bun: "false"

- name: Run plugin contract shard

env:

OPENCLAW_CONTRACT_INCLUDE_PATTERNS_JSON: ${{ toJson(matrix.includePatterns) }}

shell: bash

run: |

set -euo pipefail

include_file="$RUNNER_TEMP/plugin-contract-include.json"

INCLUDE_FILE="$include_file" node --input-type=module <<'EOF'

import { writeFileSync } from "node:fs";

const includePatterns = JSON.parse(process.env.OPENCLAW_CONTRACT_INCLUDE_PATTERNS_JSON ?? "[]");

if (!Array.isArray(includePatterns) || includePatterns.length === 0) {

console.error("Missing plugin contract include patterns");

process.exit(1);

}

writeFileSync(process.env.INCLUDE_FILE, JSON.stringify(includePatterns), "utf8");

EOF

OPENCLAW_VITEST_INCLUDE_FILE="$include_file" pnpm test:contracts:plugins

checks-fast-plugin-contracts:

permissions:

contents: read

name: checks-fast-contracts-plugins

needs: [preflight, checks-fast-plugin-contracts-shard]

if: ${{ !cancelled() && always() && needs.preflight.outputs.run_plugin_contracts_shards == 'true' }}

runs-on: ubuntu-24.04

timeout-minutes: 5

steps:

- name: Verify plugin contract shards

env:

SHARD_RESULT: ${{ needs.checks-fast-plugin-contracts-shard.result }}

run: |

if [ "$SHARD_RESULT" = "cancelled" ]; then

echo "Plugin contract shards were cancelled, usually because a newer commit superseded this run." >&2

exit 1

fi

if [ "$SHARD_RESULT" != "success" ]; then

echo "Plugin contract shards failed: $SHARD_RESULT" >&2

exit 1

fi

checks-fast-channel-contracts-shard:

permissions:

contents: read