Peter Steinberger fc2724d831 fix(release): normalize package tarball modes and prove non-root install (#130335) ...

npm/pnpm pack copy on-disk file modes into the tarball, and node-tar's
portable mode-fix only strips group/other write bits — it never adds
read bits. A restrictive-umask build host therefore ships owner-only
(0600/0700) tarball entries, which breaks the CLI for non-root users
after `sudo npm install -g` under mode-preserving consumers such as
system tar.

- Normalize every packed entry to 0644/0755 (a+rX, exec bits kept) as
  the last step of packOpenClawPackageForDocker.
- Add a tar -tvf mode gate to check-openclaw-package-tarball that
  rejects any non-world-readable entry.
- Run the docker-package-install npm lane as root and execute the
  installed CLI as a non-root user to prove the fix live.
- Fix the docker-package-install bun proof, broken on main since
  #129552 wired the bun smoke into the shared openclaw-e2e-instance
  library: replace the drift-prone per-file harness copy list with
  directory copies, and add a closure-walking guard test that fails
  on missing harness dependencies.

2026-08-26 13:24:13 -07:00

..

tools

improve: reduce GPT-5.6 coding harness overhead (#114574)

2026-07-27 19:24:52 -04:00

active-talk-agent-run-status.yaml

fix(qa): finish aggregate suites without shared cache races (#120816)

2026-08-10 03:32:04 +08:00

agent-progress-evidence.yaml

fix(qa): follow durable finals after streamed previews (#119378)

2026-08-04 22:29:15 -07:00

agent-progress-task-followthrough.yaml

test(qa): cover progress followthrough evidence (#119039)

2026-08-04 09:20:50 +08:00

agent-run-decision-receipt.yaml

fix(audit): preserve numeric decision cursors (#122619)

2026-08-12 13:08:25 -05:00

agent-run-identity-inspection.yaml

fix(qa): finish aggregate suites without shared cache races (#120816)

2026-08-10 03:32:04 +08:00

agent-sandboxed-exec-behavior.yaml

test(qa): cover sandboxed exec behavior (#119053)

2026-08-04 14:36:03 +08:00

agent-tool-consumption.yaml

fix(qa): repair release validation scenarios (#119150)

2026-08-05 09:56:06 +08:00

agent-tool-safety-approvals.yaml

test(qa): prove agent tool approval controls (#119029)

2026-08-04 11:02:17 +08:00

anthropic-thinking-error-recovery-replay-safe-read.yaml

refactor(qa): remove gateway child test facade (#122693)

2026-08-12 09:03:40 -07:00

app-sdk-composed-resources.yaml

test(sdk): consolidate packed consumer evidence (#122001)

2026-08-11 04:18:20 -07:00

app-sdk-external-boundary.yaml

test(sdk): consolidate packed consumer evidence (#122001)

2026-08-11 04:18:20 -07:00

app-sdk-gateway-conversations.yaml

test(qa): register external app SDK proof (#118829)

2026-08-04 03:30:26 +08:00

app-sdk-unsupported-calls.yaml

test(qa): register external app SDK proof (#118829)

2026-08-04 03:30:26 +08:00

approval-turn-tool-followthrough.yaml

refactor(qa): remove gateway child test facade (#122693)

2026-08-12 09:03:40 -07:00

auth-profile-codex-mixed-profiles.yaml

refactor(qa): make taxonomy coverage ids unique (#110280)

2026-07-22 16:28:44 +09:00

auth-profile-doctor-migration-safety.yaml

refactor(qa): make taxonomy coverage ids unique (#110280)

2026-07-22 16:28:44 +09:00

autonomous-task-lifecycle-receipts.yaml

Audit exact-bound owner-native lifecycle receipts (#126082)

2026-08-24 17:49:25 -07:00

browser-plugin-profiles-packaged.yaml

test(qa): cover packaged browser profiles (#119043)

2026-08-04 11:13:05 +08:00

cjk-tool-result-budget.yaml

refactor(agents): consolidate prompt and stream attempt steps (#121305)

2026-08-09 18:25:43 -07:00

cloud-worker-disappearance.yaml

fix(qa): repair cloud disappearance proof (#129056)

2026-08-24 23:59:11 -07:00

cloud-worker-midturn-loss.yaml

fix(qa): restore paired-node worker crash recovery proof (#129241)

2026-08-25 03:54:50 -07:00

codex-legacy-read-tool-vocabulary.yaml

refactor(qa): canonicalize runtime-pair lanes (#112603)

2026-07-23 10:06:12 +09:00

codex-plugin-cold-install.yaml

refactor(qa): canonicalize runtime-pair lanes (#112603)

2026-07-23 10:06:12 +09:00

compaction-empty-response-recovery.yaml

fix(qa): preserve profile execution contracts (#119519)

2026-08-05 15:07:40 +08:00

compaction-reasoning-only-recovery.yaml

fix(qa): preserve profile execution contracts (#119519)

2026-08-05 15:07:40 +08:00

compaction-retry-mutating-tool.yaml

fix(qa): accept cumulative compaction counts (#122680)

2026-08-13 00:19:49 +08:00

compose-setup.yaml

refactor(scripts): migrate JavaScript tools to TypeScript (#121005)

2026-08-09 07:21:35 -07:00

diagnostic-events-boundary.yaml

fix(qa): finish aggregate suites without shared cache races (#120816)

2026-08-10 03:32:04 +08:00

docker-agent-bundle-mcp-tools.yaml

refactor(qa): make taxonomy coverage ids unique (#110280)

2026-07-22 16:28:44 +09:00

docker-agents-delete-shared-workspace.yaml

refactor(qa): make taxonomy coverage ids unique (#110280)

2026-07-22 16:28:44 +09:00

docker-gateway-network.yaml

refactor(scripts): migrate JavaScript tools to TypeScript (#121005)

2026-08-09 07:21:35 -07:00

docker-npm-onboard-channel-agent.yaml

fix(qa): own container first-run onboarding journey (#126981)

2026-08-20 21:47:44 -07:00

docker-package-install.yaml

fix(release): normalize package tarball modes and prove non-root install (#130335)

2026-08-26 13:24:13 -07:00

docker-prometheus-smoke.yaml

test(qa): cover Prometheus install and runtime export (#118867)

2026-08-04 05:38:23 +08:00

docker-release-upgrade-user-journey.yaml

refactor(qa): make taxonomy coverage ids unique (#110280)

2026-07-22 16:28:44 +09:00

docker-release-user-journey.yaml

refactor(qa): make taxonomy coverage ids unique (#110280)

2026-07-22 16:28:44 +09:00

docker-system-agent-first-run.yaml

refactor(qa): make taxonomy coverage ids unique (#110280)

2026-07-22 16:28:44 +09:00

docker-update-channel-switch.yaml

test(qa): cover CLI distribution workflows (#118948)

2026-08-04 05:09:39 +08:00

docker-update-migration.yaml

refactor(qa): make taxonomy coverage ids unique (#110280)

2026-07-22 16:28:44 +09:00

docker-update-restart-auth.yaml

refactor(qa): make taxonomy coverage ids unique (#110280)

2026-07-22 16:28:44 +09:00

docker-upgrade-survivor.yaml

refactor(qa): make taxonomy coverage ids unique (#110280)

2026-07-22 16:28:44 +09:00

doctor-auth-secretref-checks.yaml

fix(cli): retire invalid secret flags and prove doctor recovery (#118926)

2026-08-05 11:20:23 +08:00

doctor-gateway-startup-recovery.yaml

fix(cli): retire invalid secret flags and prove doctor recovery (#118926)

2026-08-05 11:20:23 +08:00

empty-response-recovery-replay-safe-read.yaml

test(agents): move recovery transcript proof to QA (#123006)

2026-08-12 22:04:15 -07:00

empty-response-retry-budget-exhausted.yaml

refactor(qa): remove gateway child test facade (#122693)

2026-08-12 09:03:40 -07:00

first-hour-20-turn.yaml

fix: prevent duplicate agent turns and slow Codex harness runs (#115474)

2026-07-28 22:56:12 -04:00

gateway-agent-artifact-apis.yaml

test(gateway): cover agent and artifact APIs (#118889)

2026-08-04 05:18:47 +08:00

gateway-agent-rpc-contracts.yaml

test(sdk): consolidate packed consumer evidence (#122001)

2026-08-11 04:18:20 -07:00

gateway-client-transport-defaults.yaml

test(gateway): cover client transport defaults (#118798)

2026-08-04 04:58:05 +08:00

gateway-event-protocol-authz.yaml

test(gateway): cover event and protocol authorization (#118810)

2026-08-04 03:24:18 +08:00

gateway-exec-approvals.yaml

test(qa): cover gateway exec approvals (#118872)

2026-08-04 05:23:28 +08:00

gateway-hosted-web.yaml

refactor(canvas): make the panel a widget presenter (#126030)

2026-08-19 08:21:07 -07:00

gateway-http-apis.yaml

test(gateway): add HTTP API QA coverage (#118809)

2026-08-04 04:00:54 +08:00

gateway-loopback-lan-access.yaml

fix(qa): finish aggregate suites without shared cache races (#120816)

2026-08-10 03:32:04 +08:00

gateway-node-control-plane.yaml

test(gateway): cover rolling node compatibility (#119991)

2026-08-09 18:45:08 +08:00

gateway-node-exec-approvals.yaml

test(gateway): cover node exec approval relay (#118825)

2026-08-04 06:06:25 +08:00

gateway-node-pending-work.yaml

refactor: eliminate wrapper export shadowing hazards (#121388)

2026-08-09 21:36:46 -07:00

gateway-plugin-approvals.yaml

test(qa): cover gateway plugin approvals (#119128)

2026-08-04 14:07:29 +08:00

gateway-protocol-artifacts.yaml

test(gateway): cover published protocol artifacts (#118799)

2026-08-04 03:26:29 +08:00

gateway-restart-inflight-run.yaml

fix(qa): scope restart sentinel checks to scenario logs (#129270)

2026-08-25 05:46:51 -07:00

gateway-restart-multi-live.yaml

fix(qa): bind restart triggers to checkpoint waits (#129935)

2026-08-26 00:09:27 -07:00

gateway-restart-unclaimed-delivery.yaml

fix: resumed main-session turn after a gateway restart is delivered to the session's last route instead of silently completing (#127342)

2026-08-25 16:37:20 -07:00

gateway-rpc-automation.yaml

test(qa): claim sessionless heartbeat coverage (#119027)

2026-08-04 08:47:49 +08:00

gateway-rpc-chat.yaml

test(qa): prove gateway chat RPCs (#118988)

2026-08-04 08:19:14 +08:00

gateway-rpc-identity-presence.yaml

test(qa): prove gateway catalog RPCs (#118808)

2026-08-04 05:17:22 +08:00

gateway-rpc-models.yaml

test(qa): prove gateway catalog RPCs (#118808)

2026-08-04 05:17:22 +08:00

gateway-rpc-tools-skills.yaml

test(qa): prove gateway catalog RPCs (#118808)

2026-08-04 05:17:22 +08:00

gateway-rpc-wire-contracts.yaml

test(gateway): prove RPC wire and agent contracts (#118794)

2026-08-04 05:17:48 +08:00

gateway-smoke.yaml

fix(qa): finish aggregate suites without shared cache races (#120816)

2026-08-10 03:32:04 +08:00

gateway-ssh-tunnels.yaml

fix(qa): record blocked SSH evidence (#121011)

2026-08-10 13:42:48 +08:00

gateway-tls-pinning.yaml

fix(qa): finish aggregate suites without shared cache races (#120816)

2026-08-10 03:32:04 +08:00

gateway-usage-memory-apis.yaml

test(qa): cover Gateway usage and memory APIs (#118995)

2026-08-04 07:10:56 +08:00

gateway-websocket-protocol-contracts.yaml

fix(qa): finish aggregate suites without shared cache races (#120816)

2026-08-10 03:32:04 +08:00

hook-lifecycle-contracts.yaml

test(hooks): prove internal hook lifecycle (#118849)

2026-08-04 03:22:42 +08:00

logging-file-boundary.yaml

fix(qa): finish aggregate suites without shared cache races (#120816)

2026-08-10 03:32:04 +08:00

long-context-cache-stability.yaml

fix: prevent duplicate agent turns and slow Codex harness runs (#115474)

2026-07-28 22:56:12 -04:00

long-context-progress-watchdog.yaml

fix(qa): carry selected runtime into flow scenarios (#119324)

2026-08-04 13:51:35 -07:00

managed-worktrees-cli.yaml

test(qa): add managed-worktrees CLI lifecycle scenario coverage (#120335)

2026-08-07 14:18:12 -07:00

managed-worktrees-session-lifecycle.yaml

test(qa): cover session and Workboard managed-worktree lifecycles; fix symlinked state-dir lock blindness (#120362)

2026-08-07 18:57:36 -07:00

managed-worktrees-workboard-lifecycle.yaml

feat(agents): record run-end worktree cleanup outcome; prove Workboard dirty retention (#120434)

2026-08-08 20:32:11 -07:00

mcp-gateway-connect-startup-retry.yaml

fix(qa): finish aggregate suites without shared cache races (#120816)

2026-08-10 03:32:04 +08:00

mixed-reasoning-blank-model-fallback.yaml

fix(model-fallback): treat empty non-GPT completions as failed candidates (#120132) (#120148)

2026-08-08 07:48:17 -07:00

openai-compatible-chat-tools.yaml

refactor(qa): make taxonomy coverage ids unique (#110280)

2026-07-22 16:28:44 +09:00

openai-web-search-minimal.yaml

refactor(qa): make taxonomy coverage ids unique (#110280)

2026-07-22 16:28:44 +09:00

openclaw-exec-process-lifecycle.yaml

test(qa): cover OpenClaw exec process lifecycle (#118819)

2026-08-04 03:50:05 +08:00

openclaw-sandbox-workspace-isolation.yaml

test(qa): cover sandbox workspace isolation (#119038)

2026-08-04 09:21:54 +08:00

openclaw-tool-policy-gates.yaml

test(qa): cover tool policy and sandbox gates (#118925)

2026-08-04 05:43:33 +08:00

openclaw-workspace-mutation-tools.yaml

test(qa): prove workspace mutation tools (#119021)

2026-08-04 09:52:31 +08:00

openwebui-openai-compatible.yaml

refactor(qa): make taxonomy coverage ids unique (#110280)

2026-07-22 16:28:44 +09:00

otel-both-log-smoke.yaml

fix(qa): restore full-stack scenarios and truthful suite exits (#115290)

2026-07-28 13:00:22 -04:00

otel-stdout-log-smoke.yaml

fix(qa): restore full-stack scenarios and truthful suite exits (#115290)

2026-07-28 13:00:22 -04:00

otel-trace-smoke.yaml

fix(qa): restore full-stack scenarios and truthful suite exits (#115290)

2026-07-28 13:00:22 -04:00

paired-node-worker-lifecycle-wire.yaml

fix(runners): preserve device sessions through lifecycle faults (#124744)

2026-08-16 12:29:07 -07:00

process-control-roundtrip.yaml

test(agents): prove process control roundtrip (#118843)

2026-08-04 04:46:57 +08:00

qa-bus-tool-trace-visibility.yaml

refactor(qa): make taxonomy coverage ids unique (#110280)

2026-07-22 16:28:44 +09:00

qa-otel-smoke.yaml

fix(qa): finish aggregate suites without shared cache races (#120816)

2026-08-10 03:32:04 +08:00

reasoning-only-no-auto-retry-after-write.yaml

refactor(qa): remove gateway child test facade (#122693)

2026-08-12 09:03:40 -07:00

reasoning-only-recovery-replay-safe-read.yaml

refactor(qa): remove gateway child test facade (#122693)

2026-08-12 09:03:40 -07:00

restart-recovery-memory-flush-lifecycle-proof.yaml

fix(session): isolate memory flush lifecycle from parent recovery (#116198)

2026-07-30 11:31:23 -07:00

runtime-inventory-drift-check.yaml

refactor(qa): make taxonomy coverage ids unique (#110280)

2026-07-22 16:28:44 +09:00

session-transcript-cli-management.yaml

test(qa): add session transcript primary coverage (#118820)

2026-08-04 02:41:09 +08:00

session-transcript-sqlite-durability.yaml

test(qa): add session transcript primary coverage (#118820)

2026-08-04 02:41:09 +08:00

soak-100-turn.yaml

fix: prevent duplicate agent turns and slow Codex harness runs (#115474)

2026-07-28 22:56:12 -04:00

streaming-final-integrity.yaml

refactor(qa): remove gateway child test facade (#122693)

2026-08-12 09:03:40 -07:00

subagent-lineage-inspection.yaml

feat: record subagent execution lineage (#122015)

2026-08-17 21:41:30 -07:00

task-flow-registry.yaml

test(tasks): cover TaskFlow registry lifecycle (#118983)

2026-08-04 06:38:41 +08:00

task-operations.yaml

test(tasks): add durable task operations QA (#118943)

2026-08-04 05:20:12 +08:00

telemetry-qa-lab-bus.yaml

test(qa): cover runtime telemetry evidence (#118950)

2026-08-04 06:11:07 +08:00

telemetry-task-evidence-followthrough.yaml

refactor(qa): remove gateway child test facade (#122693)

2026-08-12 09:03:40 -07:00

tool-loop-global-breaker.yaml

fix(agents): recover once from critical tool loops (#118647)

2026-08-06 14:09:10 +08:00

tool-search-gateway-e2e.yaml

feat(tools): support batched tool search queries (#118623)

2026-08-05 16:28:10 +10:00

update-run-package-self-upgrade.yaml

chore(gateway): cover update and setup RPCs

2026-08-04 09:15:55 +08:00

worker-inference-generation-reload.yaml

fix(gateway): route detached announce by instance (#125946)

2026-08-18 17:14:43 -07:00