PR #71774: fix(update): skip .openclaw-install-stage* dirs in dist verifier (#71752)

• Repository: openclaw/openclaw
• Author: hclsys
• State: open | merged: False
• Link: https://github.com/openclaw/openclaw/pull/71774

Description (problem / solution / changelog)

Closes #71752.

Bug

Reporter saw `openclaw update` end with "Update Result: ERROR" / "global install verify" failing on paths like:

``` unexpected packaged dist file dist/extensions/brave/.openclaw-install-stage/node_modules/typebox/build/compile/code.mjs unexpected packaged dist file dist/extensions/brave/.openclaw-install-stage/node_modules/typebox/build/compile/code.d.mts ```

These are bundled-runtime-deps install staging dirs, created on the fly during plugin activation by:

• `src/plugins/bundled-runtime-deps.ts` — `PLUGIN_ROOT_INSTALL_STAGE_DIR = ".openclaw-install-stage"`
• `src/infra/install-package-dir.ts` — mkdtemp-based `.openclaw-install-stage-<rand>`

The dist verifier already omits sibling `.openclaw-runtime-deps-*` staging dirs (`OMITTED_DIST_SUBTREE_PATTERNS` line 29) but missed these install-stage variants.

Fix

Add a single regex pattern to `OMITTED_DIST_SUBTREE_PATTERNS` that matches both staging-dir flavors:

```ts /^dist\/extensions\/[^/]+\/\.openclaw-install-stage(?:-[^/]+)?(?:\/|$)/u ```

• Bare `.openclaw-install-stage` (PLUGIN_ROOT_INSTALL_STAGE_DIR)
• Suffixed `.openclaw-install-stage-AbC123` (mkdtemp variant)

Strict superset of existing behavior: only adds two more dir-shape exclusions to the verifier traversal, no other inventory paths affected.

Test

New test seeds artifacts under both variants:

• `dist/extensions/brave/.openclaw-install-stage/node_modules/typebox/.../code.mjs` (bare)
• `dist/extensions/browser/.openclaw-install-stage-AbC123/node_modules/playwright-core/package.json` (suffixed)

Asserts `collectPackageDistInventoryErrors` returns `[]`.

5/5 tests pass in `package-dist-inventory.test.ts`. Lint clean.

🤖 generated with assistance from Claude Code Co-authored-by: HCL [email protected]

Changed files

• CHANGELOG.md (modified, +1/-0)
• scripts/openclaw-cross-os-release-checks.ts (modified, +3/-1)
• src/infra/package-dist-inventory.test.ts (modified, +144/-0)
• src/infra/package-dist-inventory.ts (modified, +75/-0)
• test/scripts/openclaw-cross-os-release-checks.test.ts (modified, +25/-0)

PR #71772: fix(update): omit install-stage dist inventory paths

• Repository: openclaw/openclaw
• Author: BryanTegomoh
• State: closed | merged: False
• Link: https://github.com/openclaw/openclaw/pull/71772

Description (problem / solution / changelog)

Summary

openclaw update can fail when the package dist inventory walks a bundled extension install staging tree that contains package-manager .bin symlinks, e.g.:

dist/extensions/amazon-bedrock-mantle/.openclaw-install-stage/node_modules/.bin/anthropic-ai-sdk

This PR:

• Omits dist/extensions/*/.openclaw-install-stage/... from package dist inventory collection, matching other temporary bundled-extension runtime-dependency subtrees.
• Adds a regression test covering the staged .bin symlink while preserving fail-closed symlink rejection for normal packaged dist entries.
• Adds a changelog note for the updater fix.

Test plan

• pnpm vitest run src/infra/package-dist-inventory.test.ts
• pnpm exec oxlint --tsconfig tsconfig.oxlint.core.json src/infra/package-dist-inventory.ts src/infra/package-dist-inventory.test.ts

Changed files

• CHANGELOG.md (modified, +1/-0)
• src/infra/package-dist-inventory.test.ts (modified, +12/-0)
• src/infra/package-dist-inventory.ts (modified, +1/-0)