test(e2e): migrate test-skill-agent-e2e.sh to vitest

.github/workflows/e2e-vitest-scenarios.yaml

@@ -16,12 +16,17 @@ on:
         required: false
         type: string
         default: ""
+      jobs:
+        description: "Optional comma-separated free-standing live Vitest job ids. Empty runs all enabled jobs."
+        required: false
+        default: ""
+        type: string
 
 permissions:
   contents: read
 
 concurrency:
-  group: e2e-vitest-scenarios-${{ github.ref }}-${{ inputs.scenarios || 'supported' }}
+  group: e2e-vitest-scenarios-${{ github.ref }}-${{ inputs.scenarios || 'supported' }}-${{ inputs.jobs || 'all-jobs' }}
   cancel-in-progress: false
 
 jobs:
@@ -47,6 +52,7 @@ jobs:
         name: Generate Vitest scenario matrix
         env:
           SCENARIOS: ${{ inputs.scenarios }}
+          JOBS: ${{ inputs.jobs }}
         run: |
           set -euo pipefail
           args=(--emit-live-matrix)
@@ -57,6 +63,31 @@ jobs:
             fi
             args+=(--scenarios "${SCENARIOS}")
           fi
+          if [ -n "${JOBS}" ]; then
+            if [[ ! "${JOBS}" =~ ^[A-Za-z0-9_-]+(,[A-Za-z0-9_-]+)*$ ]]; then
+              echo "::error::Invalid jobs input: ${JOBS}" >&2
+              exit 1
+            fi
+            allowed_jobs=(
+              openshell-version-pin-vitest
+              onboard-negative-paths-vitest
+              skill-agent-vitest
+            )
+            IFS=',' read -r -a requested_jobs <<< "${JOBS}"
+            for requested_job in "${requested_jobs[@]}"; do
+              known_job=0
+              for allowed_job in "${allowed_jobs[@]}"; do
+                if [[ "${requested_job}" == "${allowed_job}" ]]; then
+                  known_job=1
+                  break
+                fi
+              done
+              if [[ "${known_job}" -ne 1 ]]; then
+                echo "::error::Unknown jobs input: ${requested_job}" >&2
+                exit 1
+              fi
+            done
+          fi
           matrix="$(npx tsx test/e2e-scenario/scenarios/run.ts "${args[@]}")"
           echo "matrix=${matrix}" >> "$GITHUB_OUTPUT"
           MATRIX_JSON="${matrix}" python - <<'PY' >> "$GITHUB_STEP_SUMMARY"
@@ -74,6 +105,7 @@ jobs:
 
   live-scenarios:
     needs: generate-matrix
+    if: ${{ inputs.jobs == '' }}
     runs-on: ${{ matrix.runner }}
     timeout-minutes: 45
     strategy:
@@ -174,6 +206,8 @@ jobs:
   # because the matrix above only runs registry-scenarios.test.ts. Modeled on
   # #5049's free-standing pattern.
   openshell-version-pin-vitest:
+    needs: generate-matrix
+    if: ${{ needs.generate-matrix.result == 'success' && (inputs.jobs == '' || contains(format(',{0},', inputs.jobs), ',openshell-version-pin-vitest,')) }}
     runs-on: ubuntu-latest
     timeout-minutes: 15
     env:
@@ -213,6 +247,8 @@ jobs:
           retention-days: 14
 
   onboard-negative-paths-vitest:
+    needs: generate-matrix
+    if: ${{ needs.generate-matrix.result == 'success' && (inputs.jobs == '' || contains(format(',{0},', inputs.jobs), ',onboard-negative-paths-vitest,')) }}
     runs-on: ubuntu-latest
     timeout-minutes: 15
     env:
@@ -255,11 +291,94 @@ jobs:
           if-no-files-found: ignore
           retention-days: 14
 
+  # Focused coverage for test/e2e/test-skill-agent-e2e.sh's live skill
+  # injection + real OpenClaw agent-turn contract. The retained legacy bash
+  # lane remains in nightly-e2e.yaml until #5098 Phase 11 shell retirement.
+  skill-agent-vitest:
+    needs: generate-matrix
+    if: ${{ needs.generate-matrix.result == 'success' && (inputs.jobs == '' || contains(format(',{0},', inputs.jobs), ',skill-agent-vitest,')) }}
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    env:
+      E2E_ARTIFACT_DIR: ${{ github.workspace }}/e2e-artifacts/vitest/skill-agent
+      NEMOCLAW_CLI_BIN: ${{ github.workspace }}/bin/nemoclaw.js
+      NEMOCLAW_RUN_E2E_SCENARIOS: "1"
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          persist-credentials: false
+
+      - name: Authenticate to Docker Hub
+        env:
+          DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
+          DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
+        shell: bash
+        run: |
+          set -euo pipefail
+          if [[ -z "${DOCKERHUB_USERNAME}" || -z "${DOCKERHUB_TOKEN}" ]]; then
+            echo "::notice::Docker Hub credentials not configured; continuing with anonymous pulls."
+            exit 0
+          fi
+          login_succeeded=0
+          for attempt in 1 2 3; do
+            if echo "${DOCKERHUB_TOKEN}" | timeout 30s docker login docker.io --username "${DOCKERHUB_USERNAME}" --password-stdin; then
+              login_succeeded=1
+              break
+            fi
+            if [[ "$attempt" -lt 3 ]]; then
+              echo "::warning::Docker Hub login attempt ${attempt} failed; retrying."
+              sleep 5
+            fi
+          done
+          if [[ "$login_succeeded" -ne 1 ]]; then
+            echo "::warning::Docker Hub login failed after 3 attempts; continuing with anonymous pulls."
+          fi
+
+      - name: Set up Node
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.0.0
+        with:
+          node-version: 22
+          cache: npm
+
+      - name: Install root dependencies
+        run: npm ci --ignore-scripts
+
+      - name: Build CLI
+        run: npm run build:cli
+
+      - name: Run skill-agent live test
+        env:
+          NVIDIA_API_KEY: ${{ secrets.NVIDIA_API_KEY }}
+        run: |
+          set -euo pipefail
+          npx vitest run --project e2e-scenarios-live \
+            test/e2e-scenario/live/skill-agent.test.ts \
+            --silent=false --reporter=default
+
+      - name: Upload skill-agent artifacts
+        if: always()
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: e2e-vitest-scenarios-skill-agent
+          path: |
+            e2e-artifacts/vitest/skill-agent/*/artifact-summary.json
+            e2e-artifacts/vitest/skill-agent/*/cleanup.json
+            e2e-artifacts/vitest/skill-agent/*/cleanup-skill-agent-summary.json
+            e2e-artifacts/vitest/skill-agent/*/scenario.json
+            e2e-artifacts/vitest/skill-agent/*/scenario-result.json
+            e2e-artifacts/vitest/skill-agent/*/shell/*.result.json
+            e2e-artifacts/vitest/skill-agent/*/shell/*.stdout.txt
+            e2e-artifacts/vitest/skill-agent/*/shell/*.stderr.txt
+          include-hidden-files: false
+          if-no-files-found: ignore
+          retention-days: 14
+
   # Focused coverage slice for the #2603/#3145 OpenClaw websocket
   # protocol/history contract. The retained legacy bash lane remains the
   # source for full closeout until a later PR proves replacement and deletes it.
   openclaw-tui-chat-correlation-vitest:
-    if: ${{ inputs.scenarios == '' }}
+    needs: generate-matrix
+    if: ${{ needs.generate-matrix.result == 'success' && inputs.jobs == '' }}
     runs-on: ubuntu-latest
     timeout-minutes: 75
     env:
@@ -338,6 +457,8 @@ jobs:
   # restore the /tmp guard chain after pod recreate). Will fail on `main`
   # until the #2701 fix lands; flips green afterwards.
   gateway-guard-recovery:
+    needs: generate-matrix
+    if: ${{ needs.generate-matrix.result == 'success' && inputs.jobs == '' }}
     runs-on: ubuntu-latest
     timeout-minutes: 45
     env:
@@ -434,6 +555,7 @@ jobs:
         live-scenarios,
         openshell-version-pin-vitest,
         onboard-negative-paths-vitest,
+        skill-agent-vitest,
         openclaw-tui-chat-correlation-vitest,
         gateway-guard-recovery,
       ]
@@ -451,6 +573,7 @@ jobs:
             const workflowBranch = context.ref.replace('refs/heads/', '');
             const prNumberInput = ${{ toJSON(inputs.pr_number) }} || '';
             const requestedScenarios = ${{ toJSON(inputs.scenarios) }} || '';
+            const requestedJobs = ${{ toJSON(inputs.jobs) }} || '';
 
             let prNumber = prNumberInput ? Number.parseInt(prNumberInput, 10) : undefined;
             if (!prNumber) {
@@ -491,6 +614,9 @@ jobs:
               requestedScenarios
                 ? `**Requested scenarios:** \`${requestedScenarios}\``
                 : '**Requested scenarios:** _(default — all supported)_',
+              requestedJobs
+                ? `**Requested jobs:** \`${requestedJobs}\``
+                : '**Requested jobs:** _(default — all enabled)_',
               `**Summary:** ${passed.length} passed, ${failed.length} failed, ${skipped.length} skipped`,
               '',
               '| Job | Result |',