feat: ship bundled recipe workflows

.github/workflows/e2e.yml

@@ -5,17 +5,58 @@ on:
     branches:
       - main
       - develop
+      - feat/recipe
   pull_request:
     branches:
       - main
       - develop
+      - feat/recipe
 
 concurrency:
   group: e2e-${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
 jobs:
+  recipe-docker-e2e:
+    name: Docker Recipe E2E
+    runs-on: ubuntu-latest
+    timeout-minutes: 25
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install system dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y \
+            libwebkit2gtk-4.1-dev \
+            libappindicator3-dev \
+            librsvg2-dev \
+            patchelf \
+            libssl-dev \
+            libgtk-3-dev \
+            libsoup-3.0-dev \
+            libjavascriptcoregtk-4.1-dev
+
+      - name: Setup Rust
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Cache Rust dependencies
+        uses: Swatinem/rust-cache@v2
+        with:
+          workspaces: src-tauri
+
+      - name: Verify Docker is available
+        run: docker info
+
+      - name: Run recipe docker e2e
+        env:
+          CLAWPAL_RUN_DOCKER_RECIPE_E2E: "1"
+        run: cargo test -p clawpal --test recipe_docker_e2e -- --nocapture --test-threads=1
+        working-directory: src-tauri
+
   profile-e2e:
+    name: Provider Auth E2E
     runs-on: ubuntu-latest
     environment: ${{ (github.base_ref == 'main' || github.ref == 'refs/heads/main') && 'production' || 'development' }}
     steps:

README.md

@@ -89,6 +89,17 @@ src-tauri/     Rust + Tauri backend
 docs/plans/    Design and implementation plans
 ```
 
+## Recipe docs
+
+- [`docs/recipe-authoring.md`](docs/recipe-authoring.md) — how to write and package a ClawPal recipe
+- [`docs/recipe-cli-action-catalog.md`](docs/recipe-cli-action-catalog.md) — full CLI-backed recipe action catalog and support matrix
+- [`docs/recipe-runner-boundaries.md`](docs/recipe-runner-boundaries.md) — runner/backend boundaries and OpenClaw-first design rules
+
+## Testing docs
+
+- [`docs/testing/business-flow-test-matrix.md`](docs/testing/business-flow-test-matrix.md) — local and CI validation layers
+- [`docs/testing/local-docker-openclaw-debug.md`](docs/testing/local-docker-openclaw-debug.md) — rebuild the isolated Ubuntu/OpenClaw Docker target used for recipe debugging
+
 ## License
 
 Proprietary. All rights reserved.

clawpal-core/src/ssh/mod.rs

@@ -65,6 +65,16 @@ const RUSSH_SFTP_TIMEOUT_SECS: u64 = 30;
 #[derive(Clone)]
 struct SshHandler;
 
+fn russh_exec_timeout_secs_from_env_var(raw: Option<String>) -> u64 {
+    raw.and_then(|value| value.trim().parse::<u64>().ok())
+        .filter(|secs| *secs > 0)
+        .unwrap_or(RUSSH_EXEC_TIMEOUT_SECS)
+}
+
+fn russh_exec_timeout_secs() -> u64 {
+    russh_exec_timeout_secs_from_env_var(std::env::var("CLAWPAL_RUSSH_EXEC_TIMEOUT_SECS").ok())
+}
+
 #[async_trait::async_trait]
 impl client::Handler for SshHandler {
     type Error = russh::Error;
@@ -147,7 +157,8 @@ impl SshSession {
             .await
             .map_err(|e| SshError::CommandFailed(e.to_string()))?;
 
-        let wait_result = timeout(Duration::from_secs(RUSSH_EXEC_TIMEOUT_SECS), async {
+        let exec_timeout_secs = russh_exec_timeout_secs();
+        let wait_result = timeout(Duration::from_secs(exec_timeout_secs), async {
             let mut stdout = Vec::new();
             let mut stderr = Vec::new();
             let mut exit_code = -1;
@@ -170,9 +181,7 @@ impl SshSession {
         .await;
 
         let (stdout, stderr, exit_code) = wait_result.map_err(|_| {
-            SshError::CommandFailed(format!(
-                "russh exec timed out after {RUSSH_EXEC_TIMEOUT_SECS}s"
-            ))
+            SshError::CommandFailed(format!("russh exec timed out after {exec_timeout_secs}s"))
         })?;
 
         Ok(ExecResult {
@@ -948,4 +957,26 @@ mod tests {
             assert!(p.contains("id_ed25519") || p.contains("id_rsa"));
         }
     }
+
+    #[test]
+    fn russh_exec_timeout_secs_uses_default_without_env_override() {
+        assert_eq!(
+            russh_exec_timeout_secs_from_env_var(None),
+            RUSSH_EXEC_TIMEOUT_SECS
+        );
+        assert_eq!(
+            russh_exec_timeout_secs_from_env_var(Some(String::new())),
+            RUSSH_EXEC_TIMEOUT_SECS
+        );
+        assert_eq!(
+            russh_exec_timeout_secs_from_env_var(Some("not-a-number".into())),
+            RUSSH_EXEC_TIMEOUT_SECS
+        );
+    }
+
+    #[test]
+    fn russh_exec_timeout_secs_accepts_positive_env_override() {
+        assert_eq!(russh_exec_timeout_secs_from_env_var(Some("60".into())), 60);
+        assert_eq!(russh_exec_timeout_secs_from_env_var(Some("5".into())), 5);
+    }
 }

docs/mvp-checklist.md

@@ -54,3 +54,13 @@
 - [x] 每步显示执行结果、错误态重试入口、命令摘要
 - [x] 完成 `ready` 后可直接衔接 Doctor/Recipes 配置流程
 - [ ] 四种方式接入真实执行器（当前为可审计命令计划与流程骨架）
+
+## 8. Recipe Authoring Workbench（v0.5）
+
+- [x] 内置 recipe 可 `Fork to workspace`
+- [x] Workspace recipe 支持 `New / Save / Save As / Delete`
+- [x] UI 可直接编辑 canonical recipe source，并通过后端做 validate / list / plan
+- [x] Studio 支持 sample params 与 live plan preview
+- [x] Draft 可直接进入 Cook 并执行
+- [x] Runtime run 可追溯到 `source origin / source digest / workspace path`
+- [x] 至少一个 workspace recipe 可在 `Source / Form` 模式之间往返且不丢关键字段