orca/config/scripts/run-node-server-tests.mjs

// Runs the headless-server suites under the pinned Node (design D4/D4a), not the host's.
import { join, resolve } from 'node:path'
import { randomUUID } from 'node:crypto'
import { globSync, mkdtempSync, readdirSync, readFileSync, realpathSync, rmSync } from 'node:fs'
import { tmpdir } from 'node:os'
import {
  ORCAD_CLI_ENTRY_FILENAME,
  ORCAD_SERVER_ENTRY_FILENAME,
  ORCAD_VERSION_FILENAME
} from '../../src/shared/orcad-artifacts.ts'
import { NODE_RUNTIME_PIN } from '../../src/shared/node-runtime-pin.ts'
import {
  ORCAD_PROFILE_PREFLIGHT_FLAG,
  parseOrcadProfilePreflight
} from '../../src/shared/orcad-profile-preflight.ts'
import { packagedNodeRuntimePath } from './build-orcad-node.mjs'
import { ensurePinnedNodeExecutable } from './pinned-node-downloads.mjs'
import { currentTarget } from './server-build-target.mjs'
import { UNIT_INCLUDE } from './ci-unit-files.mjs'
import { runProcessSync } from '@orca/process-host'
import { describeProcessFailure } from './process-failure-message.mjs'
import {
  CROSS_RUNTIME_TEST_PATHS,
  nodeServerTestPaths,
  REQUIRED_TEST_INPUTS_ENV
} from './node-server-test-paths.mjs'

const root = resolve(import.meta.dirname, '../..')
const target = currentTarget()
const artifact = process.argv.includes('--artifact')
// Lanes that provide the pinned Bun and the last Bun orcad slot (design D7 upgrade and rollback).
const crossRuntime = process.argv.includes('--cross-runtime')
const testArgs = process.argv
  .slice(2)
  .filter((arg) => arg !== '--artifact' && arg !== '--cross-runtime')
const packageDir = join(root, 'out', 'orcad')
const runtimePath = artifact
  ? packagedNodeRuntimePath(packageDir, target)
  : await ensurePinnedNodeExecutable({ target })
// Tests that launch the packaged runtime themselves find it here. A lane's named inputs are
// required: their tests fail on a missing input instead of passing as a skip.
const env = {
  ...process.env,
  ORCA_BACKGROUND_LAUNCH: '1',
  ORCA_PINNED_NODE: runtimePath,
  [REQUIRED_TEST_INPUTS_ENV]: [artifact && 'artifact', crossRuntime && 'cross-runtime']
    .filter(Boolean)
    .join(',')
}

function run(program, args) {
  const result = runProcessSync({
    program,
    args,
    cwd: root,
    env,
    stdio: 'inherit',
    timeoutMs: null
  })
  if (result.code !== 0) {
    process.exit(result.code ?? 1)
  }
}

if (artifact) {
  const nonce = randomUUID()
  const result = runProcessSync({
    program: runtimePath,
    args: [join(packageDir, ORCAD_SERVER_ENTRY_FILENAME), ORCAD_PROFILE_PREFLIGHT_FLAG, nonce],
    cwd: root,
    env,
    timeoutMs: 90_000
  })
  if (result.code !== 0 || result.timedOut || result.outputTruncated) {
    throw new Error(`Bundled runtime readiness failed: ${describeProcessFailure(result)}`)
  }
  const response = parseOrcadProfilePreflight(
    result.stdout,
    nonce,
    { runtime: 'node', runtimeVersion: NODE_RUNTIME_PIN.version },
    readFileSync(join(packageDir, ORCAD_VERSION_FILENAME), 'utf8').trim()
  )
  process.stdout.write(`${JSON.stringify({ target, ...response })}\n`)

  assertBundledCliPlansSkillInstall()
}
run(runtimePath, [
  join(root, 'node_modules/vitest/vitest.mjs'),
  'run',
  '--config',
  'config/vitest.config.ts',
  ...(testArgs.length > 0 ? testArgs : defaultTestArgs())
])

function defaultTestArgs() {
  // Why: vitest 5 drops CLI --exclude for inline projects, so the selectors' substring matches
  // are resolved to files here and filtered before vitest sees them.
  // Electron probes run in desktop jobs; headless compatibility containers have no display.
  const selectors = nodeServerTestPaths({ artifact, crossRuntime })
  const skipped = new Set(crossRuntime ? [] : CROSS_RUNTIME_TEST_PATHS)
  return globSync(UNIT_INCLUDE, { cwd: root })
    .map((path) => path.replaceAll('\\', '/'))
    .filter((path) => selectors.some((selector) => path.includes(selector)))
    .filter((path) => !path.endsWith('.electron.test.ts') && !skipped.has(path))
    .sort()
}

/** The server's own CLI must plan an install of Orca's bundled skills, offline and npx-free. */
function assertBundledCliPlansSkillInstall() {
  // Why the real path: the planner reports real paths, and macOS tmpdir is a /var symlink.
  const home = realpathSync(mkdtempSync(join(tmpdir(), 'orcad-skills-home-')))
  const { ORCA_CLI_CWD: _forwarded, ...hostEnv } = env
  try {
    const cli = runProcessSync({
      program: runtimePath,
      args: [
        join(packageDir, ORCAD_CLI_ENTRY_FILENAME),
        'skills',
        'install',
        '--skill',
        'orca-cli',
        '--agent',
        'universal',
        '--dry-run',
        '--json'
      ],
      cwd: home,
      env: { ...hostEnv, HOME: home, USERPROFILE: home },
      timeoutMs: 90_000
    })
    const failure = describeProcessFailure(cli)
    if (cli.code !== 0 || cli.timedOut || cli.outputTruncated) {
      throw new Error(`Bundled CLI skills dry-run failed: ${failure}`)
    }
    const result = JSON.parse(cli.stdout)
    const ops = result.plan?.skills?.find((skill) => skill.name === 'orca-cli')?.ops ?? []
    if (
      result.executed !== false ||
      !/^[0-9a-f]{64}$/.test(result.planDigest) ||
      ops.length === 0 ||
      !ops.every((op) => op.path.startsWith(home))
    ) {
      throw new Error(`Bundled CLI did not plan orca-cli into ${home}: ${cli.stdout}`)
    }
    if (readdirSync(home).length > 0) {
      throw new Error(
        `Bundled CLI skills dry-run wrote into ${home}: ${readdirSync(home).join(', ')}`
      )
    }
  } finally {
    rmSync(home, { recursive: true, force: true })
  }
}