chore: promote staging to staging-promote/b819d704-24201344542 (2026-04-09 17:24 UTC)

.claude/rules/skills.md

@@ -31,16 +31,19 @@ activation:
   tags:
     - "devops"
   max_context_tokens: 2000
-metadata:
-  openclaw:
-    requires:
-      bins: [docker, kubectl]
-      env: [KUBECONFIG]
+requires:
+  bins: [docker, kubectl]
+  env: [KUBECONFIG]
 ---
 
 # Skill instructions here...
 ```
 
+Only the top-level `requires:` block is supported. The legacy nested shape
+`metadata.openclaw.requires` is unsupported and ignored by the current parser,
+so older external skills must be migrated instead of relying on silent
+compatibility.
+
 ## Selection Pipeline
 
 1. **Gating** -- Check binary/env/config requirements; skip skills whose prerequisites are missing

.dockerignore

@@ -5,4 +5,3 @@ target/
 *.md
 !CLAUDE.md
 node_modules/
-tools-src/

.githooks/pre-commit

@@ -24,7 +24,7 @@ if $NEEDS_CHECK; then
 fi
 
 # i18n parity: when any language pack changes, all languages must stay in sync.
-if echo "$STAGED" | grep -qE '^src/channels/web/static/i18n/.*\.js$'; then
+if echo "$STAGED" | grep -qE '^crates/ironclaw_gateway/static/i18n/.*\.js$'; then
     echo "pre-commit: checking i18n parity..."
     if ! ./scripts/check-i18n-parity.sh; then
         echo ""

.github/ISSUE_TEMPLATE/qa-bug.yml

@@ -0,0 +1,94 @@
+name: QA Bug Report
+description: Bug found during QA testing on staging or hosted environments
+title: "[QA] "
+labels: ["qa-bug"]
+body:
+  - type: dropdown
+    id: environment
+    attributes:
+      label: Environment
+      description: Where was this bug found?
+      options:
+        - hosted-staging (crab shack)
+        - hosted-production
+        - local (cloned ironclaw)
+        - railway-staging
+    validations:
+      required: true
+
+  - type: input
+    id: version
+    attributes:
+      label: Version / Commit Hash
+      description: Paste the commit hash from staging at time of discovery (run `git rev-parse HEAD` or find it on the Railway deploy)
+      placeholder: "e.g. abcdef1"
+    validations:
+      required: true
+
+  - type: input
+    id: qa-date
+    attributes:
+      label: QA Test Date
+      description: Date you discovered this (YYYY-MM-DD)
+      placeholder: "e.g. 2026-04-12"
+    validations:
+      required: true
+
+  - type: input
+    id: feature-area
+    attributes:
+      label: Feature Area
+      description: What part of the app? (e.g. Google Suite extension, Telegram pairing, auth flow)
+      placeholder: "e.g. Extensions → Google Suite install"
+    validations:
+      required: true
+
+  - type: textarea
+    id: steps
+    attributes:
+      label: Steps to Reproduce
+      description: Exact steps — numbered, specific, no summaries
+      placeholder: |
+        1. Open extensions tab
+        2. Click "Install Google Suite"
+        3. Fill in credentials and click Save
+        4. ...
+    validations:
+      required: true
+
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected Behavior
+      description: What should happen?
+    validations:
+      required: true
+
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual Behavior
+      description: What actually happened? Include the exact error message/text.
+      placeholder: "Error: 'Failed to authenticate with Google: invalid_grant' shown in red toast"
+    validations:
+      required: true
+
+  - type: textarea
+    id: logs
+    attributes:
+      label: Logs / Screenshots
+      description: Paste relevant logs, error output, or attach screenshots. Drag files here.
+    validations:
+      required: false
+
+  - type: checkboxes
+    id: checklist
+    attributes:
+      label: Pre-submit checklist
+      options:
+        - label: Title is specific (not "fix Google Suite" but "Google Suite install throws invalid_grant on OAuth step")
+          required: true
+        - label: Commit hash is filled in
+          required: true
+        - label: Steps are numbered and reproducible
+          required: true

.github/workflows/docker.yml

@@ -85,6 +85,13 @@ jobs:
           echo "tags=${TAGS}" >> "$GITHUB_OUTPUT"
           echo "worker_tags=${WORKER_TAGS}" >> "$GITHUB_OUTPUT"
 
+          # Staging builds get pre-bundled WASM extensions
+          if [[ "${EVENT_NAME}" == "schedule" || "${INPUT_TAG}" == "staging" ]]; then
+            echo "target=runtime-staging" >> "$GITHUB_OUTPUT"
+          else
+            echo "target=runtime" >> "$GITHUB_OUTPUT"
+          fi
+
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
 
@@ -100,6 +107,7 @@ jobs:
           context: .
           push: true
           tags: ${{ steps.tags.outputs.tags }}
+          target: ${{ steps.tags.outputs.target }}
           platforms: linux/amd64
           cache-from: type=gha
           cache-to: type=gha,mode=max
@@ -115,6 +123,36 @@ jobs:
           cache-from: type=gha,scope=worker
           cache-to: type=gha,mode=max,scope=worker
 
+      - name: Create releases-manager app token
+        id: app-token
+        continue-on-error: true
+        uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349 # v2
+        with:
+          app-id: ${{ secrets.GH_RELEASES_MANAGER_APP_ID }}
+          private-key: ${{ secrets.GH_RELEASES_MANAGER_APP_PRIVATE_KEY }}
+          owner: nearai
+          repositories: ironclaw-dind
+
+      - name: Trigger ironclaw-dind Build & Push
+        if: steps.app-token.outcome == 'success'
+        continue-on-error: true
+        env:
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+          EVENT_NAME: ${{ github.event_name }}
+          INPUT_TAG: ${{ inputs.tag }}
+          VERSION: ${{ steps.version.outputs.version }}
+        run: |
+          if [[ "${EVENT_NAME}" == "workflow_call" && -n "${VERSION}" ]]; then
+            gh api repos/nearai/ironclaw-dind/dispatches \
+              --method POST \
+              -f event_type="ironclaw_image_published" \
+              -f client_payload[version]="${VERSION}"
+          elif [[ "${EVENT_NAME}" == "schedule" ]] || [[ "${INPUT_TAG}" == "staging" ]]; then
+            gh api repos/nearai/ironclaw-dind/dispatches \
+              --method POST \
+              -f event_type="ironclaw_image_published"
+          fi
+
       - name: Summary
         run: |
           {