From c42ef8b26759d910c5ef55e01e6de8cf00e39343 Mon Sep 17 00:00:00 2001
From: Vincent Koc <25068+vincentkoc@users.noreply.github.com>
Date: Mon, 6 Jul 2026 02:35:39 -0700
Subject: [PATCH] fix(release): harden Claude CLI live probe

---
 scripts/test-live-cli-backend-docker.sh           | 4 ++--
 test/scripts/test-live-cli-backend-docker.test.ts | 2 ++
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/scripts/test-live-cli-backend-docker.sh b/scripts/test-live-cli-backend-docker.sh
index 8f1a4a606709..b358e652a6da 100644
--- a/scripts/test-live-cli-backend-docker.sh
+++ b/scripts/test-live-cli-backend-docker.sh
@@ -374,11 +374,11 @@ WRAP
   fi
   if [ "$auth_mode" = "subscription" ]; then
     claude --version
-    direct_token="OPENCLAW-CLAUDE-SUBSCRIPTION-DIRECT"
+    direct_token="violet-lantern-42"
     direct_probe_log="$(mktemp)"
     set +e
     claude \
-      -p "Reply exactly: $direct_token" \
+      -p "This is a local CLI smoke test. Reply with only this harmless phrase: $direct_token" \
       --output-format text \
       --model sonnet \
       --permission-mode bypassPermissions \
diff --git a/test/scripts/test-live-cli-backend-docker.test.ts b/test/scripts/test-live-cli-backend-docker.test.ts
index 5fcaaa596db3..ecfe76f0a792 100644
--- a/test/scripts/test-live-cli-backend-docker.test.ts
+++ b/test/scripts/test-live-cli-backend-docker.test.ts
@@ -60,6 +60,8 @@ describe("scripts/test-live-cli-backend-docker.sh", () => {
     const script = fs.readFileSync(SCRIPT_PATH, "utf8");
 
     expect(script).toContain('direct_probe_log="$(mktemp)"');
+    expect(script).toContain("This is a local CLI smoke test.");
+    expect(script).not.toContain("OPENCLAW-CLAUDE-SUBSCRIPTION-DIRECT");
     expect(script).toContain("direct Claude subscription probe exited with status");
     expect(script).toContain("<redacted-email>");
     expect(script).toContain("<redacted-secret>");