fix: make e2e built CLI executable

e2e/_feature-matrix-runner.sh

@@ -242,6 +242,7 @@ prepare_cli_binary() {
   case "$CLI_SOURCE" in
     build)
       make -C "$REPO_ROOT" build-cli CLI_BIN="$CLI_BIN"
+      chmod +x "$CLI_BIN"
       ;;
     official)
       download_official_cli

e2e/cli-smoke-test.sh

@@ -105,6 +105,7 @@ prepare_cli_binary() {
   case "$CLI_SOURCE" in
     build)
       make build-cli CLI_BIN="$CLI_BIN"
+      chmod +x "$CLI_BIN"
       ;;
     official)
       download_official_cli

e2e/fuse-concurrency-stress.sh

@@ -138,6 +138,7 @@ prepare_cli_binary() {
   case "$CLI_SOURCE" in
     build)
       make build-cli CLI_BIN="$CLI_BIN"
+      chmod +x "$CLI_BIN"
       ;;
     official)
       download_official_cli

e2e/fuse-correctness-workload.sh

@@ -133,6 +133,7 @@ prepare_cli_binary() {
   case "$CLI_SOURCE" in
     build)
       make build-cli CLI_BIN="$CLI_BIN"
+      chmod +x "$CLI_BIN"
       ;;
     official)
       download_official_cli

e2e/fuse-crash-recovery-test.sh

@@ -235,6 +235,7 @@ json_body() { printf '%s' "$1" | sed '/__HTTP__/d'; }
 prepare_cli_binary() {
   CLI_BIN="$(mktemp)"
   make build-cli CLI_BIN="$CLI_BIN"
+  chmod +x "$CLI_BIN"
 }
 
 # write_crash_workload writes the pre-crash workload through the mount and

e2e/fuse-performance-baseline.sh

@@ -163,6 +163,7 @@ prepare_cli_binary() {
   case "$CLI_SOURCE" in
     build)
       make build-cli CLI_BIN="$CLI_BIN"
+      chmod +x "$CLI_BIN"
       ;;
     official)
       download_official_cli

e2e/fuse-posix-fsx-gate.sh

@@ -129,7 +129,10 @@ download_official_cli() {
 prepare_cli_binary() {
   CLI_BIN="$(mktemp)"
   case "$CLI_SOURCE" in
-    build) make build-cli CLI_BIN="$CLI_BIN" ;;
+    build)
+      make build-cli CLI_BIN="$CLI_BIN"
+      chmod +x "$CLI_BIN"
+      ;;
     official) download_official_cli ;;
     *) echo "invalid CLI_SOURCE: $CLI_SOURCE (expected build|official)" >&2; return 1 ;;
   esac

e2e/fuse-smoke-test.sh

@@ -117,6 +117,7 @@ prepare_cli_binary() {
   case "$CLI_SOURCE" in
     build)
       make build-cli CLI_BIN="$CLI_BIN"
+      chmod +x "$CLI_BIN"
       ;;
     official)
       download_official_cli

e2e/fuse-sqlite-correctness.sh

@@ -160,6 +160,7 @@ prepare_cli_binary() {
   case "$CLI_SOURCE" in
     build)
       make build-cli CLI_BIN="$CLI_BIN"
+      chmod +x "$CLI_BIN"
       ;;
     official)
       download_official_cli

e2e/fuse-write-perf-budget-test.sh

@@ -246,6 +246,7 @@ json_body() { printf '%s' "$1" | sed '/__HTTP__/d'; }
 prepare_cli_binary() {
   CLI_BIN="$(mktemp)"
   make build-cli CLI_BIN="$CLI_BIN"
+  chmod +x "$CLI_BIN"
 }
 
 # write_perf_workload performs the deterministic write workload through the

e2e/git-ops-smoke-test.sh

@@ -146,6 +146,7 @@ prepare_cli_binary() {
   case "$CLI_SOURCE" in
     build)
       make build-cli CLI_BIN="$CLI_BIN"
+      chmod +x "$CLI_BIN"
       ;;
     official)
       download_official_cli

e2e/git-workspace-smoke-test.sh

@@ -114,6 +114,7 @@ prepare_cli_binary() {
   case "$CLI_SOURCE" in
     build)
       make build-cli CLI_BIN="$CLI_BIN"
+      chmod +x "$CLI_BIN"
       ;;
     official)
       download_official_cli

e2e/layer-fs-smoke-test.sh

@@ -328,6 +328,7 @@ prepare_cli_binary() {
       script_dir="$(cd "$(dirname "$0")" && pwd)"
       repo_root="$(git -C "$script_dir/.." rev-parse --show-toplevel 2>/dev/null || (cd "$script_dir/.." && pwd))"
       make -C "$repo_root" build-cli CLI_BIN="$CLI_BIN"
+      chmod +x "$CLI_BIN"
       ;;
     official)
       download_official_cli

e2e/native-smoke-test.sh

@@ -58,7 +58,10 @@ download_official_cli() {
 prepare_cli_binary() {
   CLI_BIN="$(mktemp)"
   case "$CLI_SOURCE" in
-    build) make build-cli CLI_BIN="$CLI_BIN" ;;
+    build)
+      make build-cli CLI_BIN="$CLI_BIN"
+      chmod +x "$CLI_BIN"
+      ;;
     official) download_official_cli ;;
     *) echo "invalid CLI_SOURCE: $CLI_SOURCE (expected build|official)" >&2; return 1 ;;
   esac

e2e/portable-pack-unpack-e2e.sh

@@ -89,6 +89,7 @@ prepare_cli_binary() {
   case "$CLI_SOURCE" in
     build)
       make build-cli CLI_BIN="$CLI_BIN"
+      chmod +x "$CLI_BIN"
       ;;
     official)
       download_official_cli

e2e/posix-permission-smoke-test.sh

@@ -110,6 +110,7 @@ prepare_cli_binary() {
   case "$CLI_SOURCE" in
     build)
       make build-cli CLI_BIN="$CLI_BIN"
+      chmod +x "$CLI_BIN"
       ;;
     official)
       download_official_cli

scripts/verify_e2e_cli_bin_chmod.py

@@ -0,0 +1,33 @@
+#!/usr/bin/env python3
+"""Verify E2E scripts chmod CLI_BIN after building into a mktemp path."""
+
+from __future__ import annotations
+
+from pathlib import Path
+
+
+def main() -> int:
+    repo_root = Path(__file__).resolve().parents[1]
+    failures: list[str] = []
+
+    for script in sorted((repo_root / "e2e").glob("*.sh")):
+        lines = script.read_text().splitlines()
+        for index, line in enumerate(lines):
+            if "make " not in line or "build-cli" not in line or 'CLI_BIN="$CLI_BIN"' not in line:
+                continue
+            followup = "\n".join(lines[index + 1:index + 4])
+            if 'chmod +x "$CLI_BIN"' not in followup:
+                failures.append(f"{script.relative_to(repo_root)}:{index + 1}")
+
+    if failures:
+        print("missing chmod +x after build-cli CLI_BIN output:")
+        for failure in failures:
+            print(f"  {failure}")
+        return 1
+
+    print("all e2e build-cli CLI_BIN outputs restore execute permission")
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())