fix: resolve test failures on macOS

[lpcox]

Fixes 4 test failures (in 2 suites) that occur on macOS due to platform differences:

docker-manager-utils.test.ts (2 failures)

Tests hardcoded /root as root's home directory, but macOS uses /var/root. Fixed by reading the actual root home from /etc/passwd at test time.

docker-manager-cleanup.test.ts (2 failures)

writeConfigs() calls chownSync(dir, uid, gid) where gid comes from getSafeHostGid(). On macOS, the real gid (501) is below 1000 and gets clamped to 1000, but the current user doesn't belong to gid 1000, causing EPERM. Fixed by mocking getSafeHostUid/Gid in the test to return the actual process uid/gid.

Note: The workflow-engine-install-security failure (missing --ignore-scripts in Claude Code installs) is a gh-aw compiler issue in generated lock files — not addressed here since lock files should not be edited directly.

[Copilot]

Pull request overview

Fixes macOS-specific test failures by reading root's actual home directory from /etc/passwd instead of hardcoding /root, and by mocking getSafeHostUid/Gid in cleanup tests to avoid the clamping-to-1000 EPERM issue.

Changes:

• Dynamically resolve root's home directory in docker-manager-utils.test.ts to support both /root (Linux) and /var/root (macOS).
• Mock host-env in docker-manager-cleanup.test.ts so chownSync uses the real process uid/gid.

Show a summary per file

File	Description
src/docker-manager-utils.test.ts	Reads root home from /etc/passwd at test time instead of hardcoding /root.
src/docker-manager-cleanup.test.ts	Mocks getSafeHostUid/getSafeHostGid to return actual process uid/gid.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 2/2 changed files
• Comments generated: 0

[github-actions]

Smoke Test: Copilot BYOK (Offline) Mode

Test	Result
GitHub MCP connectivity	❌ 401 Bad Credentials
GitHub.com HTTP	⚠️ Template var not expanded
File write/read	⚠️ Template var not expanded
BYOK inference (agent → api-proxy → api.githubcopilot.com)	✅

Running in BYOK offline mode (COPILOT_OFFLINE=true) via api-proxy → api.githubcopilot.com.

Overall: FAIL — pre-computed step outputs were not substituted into the prompt (GitHub Actions template variables ${{ steps.smoke-data.outputs.* }} appeared literally), and GitHub MCP returned 401 Bad Credentials.

🔑 BYOK report filed by Smoke Copilot BYOK

[github-actions]

Smoke Test Results

❌ GitHub API: Failed to list merged PRs (auth error: localhost endpoint unreachable)
✅ Playwright: Successfully navigated to github.com (title contains "GitHub")
✅ File verify: Successfully read smoke test file

Result: FAIL (2/3 tests passed)

💥 [THE END] — Illustrated by Smoke Claude

[github-actions]

🧪 Smoke Test Results — Copilot Engine

Test	Result
GitHub MCP connectivity	❌ (401 — unauthenticated)
GitHub.com HTTP	⚠️ (template vars unresolved)
File write/read	✅ (smoke-test-copilot-25999500899.txt exists)

Overall: PARTIAL — pre-agent step file confirms engine started, but MCP auth and template substitution issues prevent full validation.

📰 BREAKING: Report filed by Smoke Copilot

[github-actions]

Smoke Test Codex

PRs: fix: postprocess claude-token-optimizer lock file to use local awf build; refactor: split api-proxy-service.test.ts into focused test modules
GitHub merged PR review: ✅
SafeInputs GH CLI: ❌
Playwright GitHub title: ✅
Tavily search: ❌
File + bash + build: ✅
Discussion interaction: ❌
Overall status: FAIL

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• registry.npmjs.org

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "registry.npmjs.org"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex

[github-actions]

🏗️ Build Test Suite Results

Ecosystem	Project	Build/Install	Tests	Status
Bun	elysia	✅	1/1 passed	✅ PASS
Bun	hono	✅	1/1 passed	✅ PASS
C++	fmt	✅	N/A	✅ PASS
C++	json	✅	N/A	✅ PASS
Deno	oak	N/A	1/1 passed	✅ PASS
Deno	std	N/A	1/1 passed	✅ PASS
.NET	hello-world	✅	N/A	✅ PASS
.NET	json-parse	✅	N/A	✅ PASS
Go	color	✅	1/1 passed	✅ PASS
Go	env	✅	1/1 passed	✅ PASS
Go	uuid	✅	1/1 passed	✅ PASS
Java	gson	✅	1/1 passed	✅ PASS
Java	caffeine	✅	1/1 passed	✅ PASS
Node.js	clsx	✅	All passed	✅ PASS
Node.js	execa	✅	All passed	✅ PASS
Node.js	p-limit	✅	All passed	✅ PASS
Rust	fd	✅	1/1 passed	✅ PASS
Rust	zoxide	✅	1/1 passed	✅ PASS

Overall: 8/8 ecosystems passed — ✅ PASS

Note (Java): Maven's default local repository at ~/.m2/repository was not writable due to directory ownership. Tests succeeded using -Dmaven.repo.local=/tmp/gh-aw/agent/m2repo as a workaround.

Generated by Build Test Suite for issue #3304 · ● 5.8M · ◷

[github-actions]

Chroot Smoke Test Results

Runtime	Host Version	Chroot Version	Match?
Python	Python 3.12.13	Python 3.12.3	❌
Node.js	v24.15.0	v20.20.2	❌
Go	go1.22.12	go1.22.12	✅

Overall: ❌ Not all tests passed — Python and Node.js versions differ between host and chroot.

Tested by Smoke Chroot

[github-actions]

Smoke Test Results — FAIL

Check	Result
Redis PING	❌ timeout
PostgreSQL pg_isready	❌ no response
PostgreSQL SELECT 1	❌ no response

host.docker.internal is not reachable from this runner — service containers appear unavailable.

🔌 Service connectivity validated by Smoke Services

[github-actions]

Gemini Smoke Test Results:

• GitHub MCP Testing: ❌ (mcpscripts not found)
• GitHub.com Connectivity: ❌ (HTTP 000)
• File Writing Testing: ✅
• Bash Tool Testing: ✅
  Overall Status: FAIL

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• localhost

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "localhost"

See Network Configuration for more information.

💎 Faceted by Smoke Gemini