feat: ship bundled recipe workflows

.github/workflows/deploy-site.yml

@@ -0,0 +1,25 @@
+name: Deploy Site
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - 'docs/site/**'
+  workflow_dispatch:
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      deployments: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Deploy to Cloudflare Pages
+        uses: cloudflare/wrangler-action@v3
+        with:
+          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          command: pages deploy docs/site --project-name=clawpal

.github/workflows/e2e.yml

@@ -5,17 +5,58 @@ on:
     branches:
       - main
       - develop
+      - feat/recipe
   pull_request:
     branches:
       - main
       - develop
+      - feat/recipe
 
 concurrency:
   group: e2e-${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
 jobs:
+  recipe-docker-e2e:
+    name: Docker Recipe E2E
+    runs-on: ubuntu-latest
+    timeout-minutes: 25
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install system dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y \
+            libwebkit2gtk-4.1-dev \
+            libappindicator3-dev \
+            librsvg2-dev \
+            patchelf \
+            libssl-dev \
+            libgtk-3-dev \
+            libsoup-3.0-dev \
+            libjavascriptcoregtk-4.1-dev
+
+      - name: Setup Rust
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Cache Rust dependencies
+        uses: Swatinem/rust-cache@v2
+        with:
+          workspaces: src-tauri
+
+      - name: Verify Docker is available
+        run: docker info
+
+      - name: Run recipe docker e2e
+        env:
+          CLAWPAL_RUN_DOCKER_RECIPE_E2E: "1"
+        run: cargo test -p clawpal --test recipe_docker_e2e -- --nocapture --test-threads=1
+        working-directory: src-tauri
+
   profile-e2e:
+    name: Provider Auth E2E
     runs-on: ubuntu-latest
     environment: ${{ (github.base_ref == 'main' || github.ref == 'refs/heads/main') && 'production' || 'development' }}
     steps:

.github/workflows/metrics.yml

@@ -69,7 +69,7 @@ jobs:
 
           TOTAL_COMMITS=$(git rev-list --no-merges $BASE..$HEAD | wc -l)
           PASSED_COMMITS=$(( TOTAL_COMMITS - FAIL_COUNT ))
-          
+
           echo "fail=${FAIL}" >> "$GITHUB_OUTPUT"
           echo "total=${TOTAL_COMMITS}" >> "$GITHUB_OUTPUT"
           echo "passed=${PASSED_COMMITS}" >> "$GITHUB_OUTPUT"

.github/workflows/mirror-gitlab.yml

@@ -0,0 +1,19 @@
+name: Mirror to GitLab
+on:
+  push:
+    branches: ['**']
+    tags: ['**']
+  delete:
+
+jobs:
+  mirror:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Mirror to GitLab
+        uses: yesolutions/mirror-action@master
+        with:
+          REMOTE: 'https://oauth2:${{ secrets.GITLAB_TOKEN }}@gitlab.com/lay2dev/clawpal.git'
+          GIT_PUSH_ARGS: '--force --tags'

.github/workflows/mirror-release.yml

@@ -0,0 +1,53 @@
+name: Mirror Release to GitLab
+on:
+  release:
+    types: [published]
+
+jobs:
+  mirror-release:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Sync release assets to GitLab
+        env:
+          GITLAB_TOKEN: ${{ secrets.GITLAB_TOKEN }}
+          GITLAB_PROJECT_ID: ${{ secrets.GITLAB_PROJECT_ID }}
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          TAG="${{ github.event.release.tag_name }}"
+          BODY=$(echo '${{ toJSON(github.event.release.body) }}')
+
+          # Create GitLab release
+          curl --fail-with-body -X POST \
+            "https://gitlab.com/api/v4/projects/${GITLAB_PROJECT_ID}/releases" \
+            -H "PRIVATE-TOKEN: ${GITLAB_TOKEN}" \
+            -H "Content-Type: application/json" \
+            -d "{\"tag_name\": \"${TAG}\", \"description\": ${BODY}}" || true
+
+          # Download GitHub release assets
+          mkdir -p /tmp/assets
+          gh release download "$TAG" -D /tmp/assets -R "${{ github.repository }}" || exit 0
+
+          # Upload each asset to GitLab (skip .sig and latest.json)
+          for file in /tmp/assets/*; do
+            [ -f "$file" ] || continue
+            filename=$(basename "$file")
+
+            case "$filename" in
+              *.sig|latest.json) echo "Skip: $filename"; continue ;;
+            esac
+
+            echo "Uploading: $filename ..."
+
+            # Upload file (force HTTP/1.1 for large file stability)
+            upload_url=$(curl --http1.1 --fail-with-body -X POST \
+              "https://gitlab.com/api/v4/projects/${GITLAB_PROJECT_ID}/uploads" \
+              -H "PRIVATE-TOKEN: ${GITLAB_TOKEN}" \
+              -F "file=@${file}" | jq -r '.full_path')
+
+            # Link to release
+            curl --fail-with-body -X POST \
+              "https://gitlab.com/api/v4/projects/${GITLAB_PROJECT_ID}/releases/${TAG}/assets/links" \
+              -H "PRIVATE-TOKEN: ${GITLAB_TOKEN}" \
+              -H "Content-Type: application/json" \
+              -d "{\"name\": \"${filename}\", \"url\": \"https://gitlab.com${upload_url}\"}"
+          done

.github/workflows/recipe-gui-e2e.yml

@@ -0,0 +1,150 @@
+name: Recipe GUI E2E
+
+on:
+  pull_request:
+    branches: [develop, main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  pull-requests: write
+
+concurrency:
+  group: recipe-gui-e2e-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  recipe-gui-e2e:
+    name: Recipe GUI E2E
+    runs-on: ubuntu-24.04
+    timeout-minutes: 120
+
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
+          ref: ${{ github.event.pull_request.head.ref || github.ref }}
+          fetch-depth: 0
+
+      - name: Build inner OpenClaw image
+        run: |
+          docker build \
+            -t clawpal-recipe-openclaw:latest \
+            -f harness/recipe-e2e/openclaw-container/Dockerfile \
+            .
+
+      - name: Build recipe GUI E2E harness
+        run: |
+          docker build \
+            -t clawpal-recipe-harness:latest \
+            -f harness/recipe-e2e/Dockerfile \
+            .
+
+      - name: Run recipe GUI E2E
+        run: |
+          mkdir -p recipe-gui-e2e/screenshots recipe-gui-e2e/report
+          docker run --rm \
+            --network host \
+            -v /var/run/docker.sock:/var/run/docker.sock \
+            -v ${{ github.workspace }}/recipe-gui-e2e/screenshots:/screenshots \
+            -v ${{ github.workspace }}/recipe-gui-e2e/report:/report \
+            -e OPENCLAW_IMAGE=clawpal-recipe-openclaw:latest \
+            clawpal-recipe-harness:latest
+
+      - name: Fix permissions
+        if: always()
+        run: sudo chown -R $(id -u):$(id -g) recipe-gui-e2e/
+
+      - name: Upload perf report
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: recipe-gui-e2e-perf-${{ github.sha }}
+          path: recipe-gui-e2e/report/perf-report.json
+          retention-days: 30
+
+      - name: Upload screenshots
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: recipe-gui-e2e-screenshots-${{ github.sha }}
+          path: recipe-gui-e2e/screenshots/
+          retention-days: 30
+
+      - name: Build local mode harness
+        if: always() && !cancelled()
+        run: |
+          docker build             -t clawpal-recipe-local:latest             -f harness/recipe-e2e/Dockerfile.local             .
+
+      - name: Run recipe GUI E2E (local mode)
+        if: always() && !cancelled()
+        run: |
+          mkdir -p recipe-gui-e2e-local/screenshots recipe-gui-e2e-local/report
+          docker run --rm             -v ${{ github.workspace }}/recipe-gui-e2e-local/screenshots:/screenshots             -v ${{ github.workspace }}/recipe-gui-e2e-local/report:/report             clawpal-recipe-local:latest
+
+      - name: Fix local permissions
+        if: always()
+        run: sudo chown -R $(id -u):$(id -g) recipe-gui-e2e-local/ 2>/dev/null || true
+
+      - name: Upload local perf report
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: recipe-gui-e2e-local-perf-${{ github.sha }}
+          path: recipe-gui-e2e-local/report/perf-report.json
+          retention-days: 30
+
+      - name: Upload local screenshots
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: recipe-gui-e2e-local-screenshots-${{ github.sha }}
+          path: recipe-gui-e2e-local/screenshots/
+          retention-days: 30
+
+      - name: Generate PR perf comment
+        if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository
+        run: |
+          node <<'EOF'
+          const fs = require("fs");
+          const report = JSON.parse(fs.readFileSync("recipe-gui-e2e/report/perf-report.json", "utf8"));
+          const rows = report.recipes.map((recipe) => {
+            if (recipe.skipped) {
+              return `| ${recipe.recipe_name} | — | — | — | — | ⚠️ Skipped: ${recipe.reason || "unknown"} |`;
+            }
+            const fmtMs = (ms) => ms >= 1000 ? `${ms} (${(ms/1000).toFixed(1)}s)` : `${ms}`;
+            return `| ${recipe.recipe_name} | ${fmtMs(recipe.page_load_ms)} | ${fmtMs(recipe.form_fill_ms)} | ${fmtMs(recipe.execution_ms)} | ${fmtMs(recipe.verification_ms)} | ${fmtMs(recipe.total_ms)} |`;
+          }).join("\n");
+          const body = [
+            "<!-- recipe-gui-e2e -->",
+            "## Recipe GUI E2E Perf",
+            "",
+            `Artifacts: [perf report](https://github.com/${process.env.GITHUB_REPOSITORY}/actions/runs/${process.env.GITHUB_RUN_ID})`,
+            "",
+            "| Recipe | Page Load (ms) | Form Fill (ms) | Execution (ms) | Verification (ms) | Total (ms) |",
+            "| --- | ---: | ---: | ---: | ---: | ---: |",
+            rows,
+            "",
+            "> Harness: Docker + Xvfb + tauri-driver + Selenium",
+            "",
+          ].join("\n");
+          fs.writeFileSync("/tmp/recipe_gui_e2e_comment.md", body);
+          EOF
+
+      - name: Find existing recipe GUI E2E comment
+        uses: peter-evans/find-comment@v3
+        id: recipe_comment
+        if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository
+        with:
+          issue-number: ${{ github.event.pull_request.number }}
+          comment-author: 'github-actions[bot]'
+          body-includes: '<!-- recipe-gui-e2e -->'
+
+      - name: Create or update recipe GUI E2E comment
+        uses: peter-evans/create-or-update-comment@v4
+        if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository
+        with:
+          comment-id: ${{ steps.recipe_comment.outputs.comment-id }}
+          issue-number: ${{ github.event.pull_request.number }}
+          body-path: /tmp/recipe_gui_e2e_comment.md
+          edit-mode: replace