chore: promote staging to staging-promote/d567d94c-23755250735 (2026-03-30 18:33 UTC)

[ironclaw-ci]

Auto-promotion from staging CI

Batch range: 2f4eb08613cefff1af8b7b1a475fda00c84dd855..21f613ff2e8a1dc1f809677b3cc669e59ccbddbd
Promotion branch: staging-promote/21f613ff-23761172238
Base: staging-promote/d567d94c-23755250735
Triggered by: Staging CI batch at 2026-03-30 18:33 UTC

Commits in this batch (27):

• 8f8cb7f feat: DB-backed user management, admin secrets provisioning, and multi-tenant isolation (feat: DB-backed user management, admin secrets provisioning, and multi-tenant isolation #1626)
• f49f368 Clean up extension credentials on uninstall (Clean up extension credentials on uninstall #1718)
• 27e8d6f fix(wasm): use typed WASM schema as advertised schema when available (fix(wasm): use typed WASM schema as advertised schema when available #1699)
• 9ba10ea fix(db): add tracing warn for naive timestamp fallback and improve parse_timestamp tests (fix(db): add tracing warn for naive timestamp fallback and improve parse_timestamp tests #1700)
• 0b33ca9 fix(oauth): tighten legacy state validation and fallback handling (fix(oauth): tighten legacy state validation and fallback handling #1701)
• 9bb19a9 fix(web): redact database error details from API responses (fix(web): redact database error details from API responses #1711)
• 9ce3a9f feat(discord): implement on_broadcast via DM channel creation (feat(discord): implement on_broadcast via DM channel creation #1693)
• de5a1c7 fix(worker): replace script -qfc with pty-process for injection-safe PTY (fix(worker): wrap Claude CLI in PTY to fix stdout buffering hang #1678)
• fd41bdf fix(worker): treat empty LLM response after text output as completion (fix(worker): treat empty LLM response after text output as completion #1677)
• 8a320ae fix(routines): complete full_job execution reliability overhaul (fix(routines): complete full_job execution reliability overhaul #1650)
• a8e8321 feat(discord): add gateway channel flow in wasm (feat(discord): add gateway channel flow in wasm #944)
• e0e530e docs: tighten contribution and PR guidance (docs: tighten contribution and PR guidance #1704)
• 6f6a5f1 feat(skills): recursive bundle directory scanning for skill discovery (feat(skills): recursive bundle directory scanning #1667)
• d97c014 Clarify message tool vs channel setup guidance (Clarify message tool vs channel setup guidance #1715)
• fcab4f0 fix: pin staging ci jobs to a single tested sha (fix: pin staging ci jobs to a single tested sha #1628)
• 86389da fix(gemini): preserve thought signatures on all tool calls (fix(gemini): preserve thought signatures on all tool calls #1565)
• 64fe9ba fix: prevent UTF-8 panics in byte-index string truncation (fix: prevent UTF-8 panics in byte-index string truncation #1688)
• 70214c4 fix(bedrock): strip tool blocks from messages when toolConfig is absent (fix(bedrock): strip tool blocks from messages when toolConfig is absent #1630)
• de384b0 feat: support custom LLM provider configuration via web UI (feat: support custom LLM provider configuration via web UI #1340)
• 4f277c9 Handle empty tool completions in autonomous jobs (Handle empty tool completions in autonomous jobs #1720)
• 368d2f5 feat(gateway): OIDC JWT authentication for reverse-proxy deployments (feat(gateway): OIDC JWT authentication for reverse-proxy deployments #1463)
• 8acdd08 fix(wasm): inject Content-Length: 0 for bodyless mutating HTTP requests (fix(wasm): inject Content-Length: 0 for bodyless mutating HTTP requests #1529)
• c75dea0 fix(auth): make shared Google tool status scope-aware (fix(auth): make shared Google tool status scope-aware #1532)
• 10d5a53 fix: resolve 11 test failures from multi-tenant bootstrap and sandbox gate regressions (fix: resolve 11 test failures from multi-tenant bootstrap and sandbox gate regressions #1746)
• d0f7862 fix(slack): respond to thread replies without requiring @mention (fix(slack): respond to thread replies without requiring @mention #1405)
• d567d94 fix(routines): clone Arc before await in web handler event cache refresh (fix(routines): clone Arc before await in web handler event cache refresh #1756)
• 21f613f test(e2e): align WASM reinstall expectation with uninstall cleanup (test(e2e): align WASM reinstall expectation with uninstall cleanup #1762)

Current commits in this promotion (1)

Current base: staging-promote/d567d94c-23755250735
Current head: staging-promote/21f613ff-23761172238
Current range: origin/staging-promote/d567d94c-23755250735..origin/staging-promote/21f613ff-23761172238

• 21f613f test(e2e): align WASM reinstall expectation with uninstall cleanup (test(e2e): align WASM reinstall expectation with uninstall cleanup #1762)

Auto-updated by staging promotion metadata workflow

Waiting for gates:

• Tests: pending
• E2E: pending
• Claude Code review: pending (will post comments on this PR)

---

Auto-created by staging-ci workflow

[claude]

Found 1 issue: [LOW:75] Line 426 missing defensive .get() when accessing ext[needs_setup]. The assertion will raise KeyError if missing, while line 428 uses .get() defensively. This is inconsistent error handling in the same test. Summary: This is a test correction aligning expectations with production behavior where ExtensionManager removes secrets on uninstall, so reinstalled extensions start unconfigured. Security is correct. No production code changes needed.