[freeqaz]

Problem

Local test runs share one TMPDIR, and two harnesses never removed their scratch directories:

• render() in profile-renderer.test.mjs and profile-public-github-read.test.mjs creates an oce-profile-<profile>-* directory for each render and never removes it. One run of the two files leaves 446 directories (230 codex, 215 openclaw, 1 default).
• newPage() in tests/browser/console-agents-browser-helpers.mjs creates an openclaw-console-agents-browser-* directory for each page and never removes it, even though docs/testing/local.md says screenshots are kept only when OCC_TEST_CONSOLE_ARTIFACT_DIR is set. One run of console-agent-channels and console-agent-plugin-approvers leaves 25.

On a shared dev host these had built up to about 283k top-level entries (117k console artifact dirs, mostly empty, and 165k profile dirs).

Change

• Add tests/helpers/temporary-directory.mjs with fileTemporaryDirectory(prefix). It creates a directory under TMPDIR and removes it after the file's last test, whether tests pass or fail, using a file-level after hook added on import (the same pattern as tests/helpers/dev-up.mjs). The renderer outputs stay readable across tests in the file.
• Both profile test files use it for render()'s default output directory.
• The console artifact directory is removed by t.after when its test ends, unless OCC_TEST_CONSOLE_ARTIFACT_DIR is set (that directory is kept, as documented).
• New tests/conformance/temporary-directory.test.mjs runs a fixture test file under an empty TMPDIR. The fixture creates directories at module scope, in a passing test and in a failing test. The parent test checks that they existed during the run and that TMPDIR is empty afterwards. It is mapped to checks-baseline-1.

Verification

• With a fresh TMPDIR for each run (pinned to 2 CPUs):
  • main: profile files leave 446 dirs (69/69 pass); the two console browser files leave 25 (24/24 pass).
  • this branch: same pass counts, and 0 dirs are left in either run.
• New test: 20/20 at 2 CPUs. A mutant that skips the rmSync fails it with a non-empty TMPDIR.
• node scripts/ci/run-tests.mjs audit: no issues. prettier and eslint are clean on the touched files.
• Trial merges with open PRs touching these files (fix(profiles): refuse composed Backend ID collisions #2731, Support custom Installation profiles and readable Preset starters #2253 clean; Add an opt-in Strands history policy backend for Credential Proxy #2543, Add OCE policy simulation and tester for network and plugin actions #2445, feat: assign configured OpenClaw roles to Agent users #906 show the same conflicts as against main): no new conflict hunks.

Risks

Test-only. Anyone who relied on finding console screenshots in the default temp directory after a local run must now set OCC_TEST_CONSOLE_ARTIFACT_DIR, which is what the testing guide already says. Killed runs still leave their directories, because no teardown runs.

[clawsweeper]

🦞👀
ClawSweeper picked this up.

Pull request received. I will update this pull request when review starts.

ClawSweeper review blocked

Automated review did not run, so no review verdict was produced.

Reason: The input-safety check rejected material in this revision. No detected value, path, or scanner output is reproduced here.

Automatic review is on hold, including after source changes. Request a fresh re-review after resolving the failure; maintainers can also release the hold through an intentional scanner-policy update.

Next step: If this is a genuine credential, remove and rotate it. If it is an intentional test fixture, a maintainer must review and qualify it.

View the workflow run.