@akanjs/devkit 3.0.0-beta.17 → 3.0.0-beta.19

package/incrementalBuilder/devWatchBatch.test.ts

@@ -1,12 +1,13 @@
 import { describe, expect, test } from "bun:test";
+import path from "node:path";
 import { DevChangePlanner } from "../frontendBuild";
 import { prepareDevWatchBatch } from "./devWatchBatch";
 
 describe("prepareDevWatchBatch", () => {
   test("includes generated indexes in the same invalidate generation", () => {
-    const root = "/repo";
-    const changedFile = `${root}/libs/shared/common/foo.ts`;
-    const generatedIndex = `${root}/libs/shared/common/index.ts`;
+    const root = path.resolve("/repo");
+    const changedFile = path.join(root, "libs/shared/common/foo.ts");
+    const generatedIndex = path.join(root, "libs/shared/common/index.ts");
     const prepared = prepareDevWatchBatch({
       generation: 12,
       batch: { files: [changedFile], kinds: new Set(["code"]) },
@@ -25,9 +26,9 @@ describe("prepareDevWatchBatch", () => {
   test.each(["common", "srvkit", "ui", "webkit"])(
     "keeps %s facet add/delete generated index in the same generation",
     (facet) => {
-      const root = "/repo";
-      const changedFile = `${root}/libs/shared/${facet}/tmpExample.ts`;
-      const generatedIndex = `${root}/libs/shared/${facet}/index.ts`;
+      const root = path.resolve("/repo");
+      const changedFile = path.join(root, "libs/shared", facet, "tmpExample.ts");
+      const generatedIndex = path.join(root, "libs/shared", facet, "index.ts");
       const prepared = prepareDevWatchBatch({
         generation: 20,
         batch: { files: [changedFile], kinds: new Set(["code"]) },

package/incrementalBuilder/incrementalBuilder.proc.ts

@@ -100,6 +100,7 @@ class IncrementalBuilder {
         app: this.#app,
         routeId: msg.routeId,
         seeds: msg.seeds,
+        graphSeeds: msg.graphSeeds,
         artifact: this.#artifact,
         knownEntries: new Set<string>(msg.knownEntries),
         discovery: this.#discovery,

package/index.ts

@@ -32,7 +32,6 @@ export type * from "./fileSys";
 export type * from "./frontendBuild";
 export type * from "./getDirname";
 export type * from "./getRelatedCnsts";
-export type * from "./guideline";
 export type * from "./incrementalBuilder";
 export type * from "./mobile";
 export type * from "./packageExportsMap";

package/integration/devStabilityHarness.test.ts

@@ -42,8 +42,13 @@ describe("dev stability harness port allocation", () => {
 
     expect(new Set(ports).size).toBe(ports.length);
     // Forward-only, so a harness cannot be handed a port a previous host in this process may still be
-    // holding while it shuts down — which is the collision the random offset kept producing.
-    expect(ports).toEqual([...ports].sort((a, b) => a - b));
+    // holding while it shuts down — which is the collision the random offset kept producing. The cursor starts
+    // at a pid-seeded slot and wraps at the end of the band, so forward is measured around the band, and a step
+    // back would read as most of a lap.
+    const band = DevStabilityHarness.portOffsetMax - DevStabilityHarness.portOffsetMin;
+    const steps = ports.slice(1).map((port, idx) => (port - ports[idx] + band) % band);
+    expect(steps.every((step) => step > 0 && step % DevStabilityHarness.portOffsetStride === 0)).toBe(true);
+    expect(steps.reduce((sum, step) => sum + step, 0)).toBeLessThan(band);
   });
 
   test("returns the same port on every call instead of re-deriving it", async () => {

package/lint/gritRules.test.ts

@@ -4,6 +4,7 @@ import { existsSync } from "node:fs";
 import { mkdir, mkdtemp, readdir, readFile, rm, writeFile } from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
+import { Linter } from "../linter";
 
 /**
  * Fixture tests for the GritQL plugins in this folder.
@@ -21,7 +22,7 @@ import path from "node:path";
 const lintDir = import.meta.dir;
 const fixturesDir = path.join(lintDir, "__fixtures__");
 const workspaceRoot = path.resolve(lintDir, "../../../..");
-const biomeBin = path.join(workspaceRoot, "node_modules/.bin/biome");
+const biomeBin = path.join(workspaceRoot, "node_modules", ".bin", Linter.biomeBinName);
 
 interface BiomeDiagnostic {
   severity: string;

package/lint/no-deep-internal-import.grit

@@ -15,7 +15,7 @@ or {
   JsModuleSource() as $source where {
     $source <: within JsImport(),
     not $filename <: r".*\.(?:test|spec)\.tsx?",
-    $filename <: r".*(?:apps|libs)/[^/]+/lib/[^/]+/[^/]+\.(?:ts|tsx)",
+    $filename <: r".*(?:apps|libs)[/\\][^/\\]+[/\\]lib[/\\][^/\\]+[/\\][^/\\]+\.(?:ts|tsx)",
     $source <: r"\"\.\./\.\./.*\"",
     register_diagnostic(
       span = $source,
@@ -25,7 +25,7 @@ or {
   JsModuleSource() as $source where {
     $source <: within JsImport(),
     not $filename <: r".*\.(?:test|spec)\.tsx?",
-    $filename <: r".*/lib/.+\.tsx",
+    $filename <: r".*[/\\]lib[/\\].+\.tsx",
     $source <: r"\"\.\./.*\"",
     register_diagnostic(
       span = $source,

package/lint/no-redeclare-predefined-endpoint.grit

@@ -14,7 +14,8 @@ language js(typescript, jsx)
     $base <: contains `endpoint`,
     $className <: r"([A-Z][a-zA-Z0-9]*)Endpoint"($Cap)
   },
-  $filename <: r".*/([a-z][a-zA-Z0-9]*)\.signal\.ts"($model),
+  // `$filename` carries backslashes on Windows, so a separator here must accept both.
+  $filename <: r".*[/\\]([a-z][a-zA-Z0-9]*)\.signal\.ts"($model),
   or {
     $key <: $model,
     $key <: r"(?:light|create|update|remove|view|edit|merge)([A-Z][a-zA-Z0-9]*)"($keyCap) where {

package/linter.ts

@@ -112,6 +112,9 @@ const asBiomeReport = (candidate: string): BiomeReport | null => {
 const BIOME_CONFIG_FILES = ["biome.json", "biome.jsonc"] as const;
 
 export class Linter {
+  //? Bun links a package bin as `<name>.exe` (plus a `.bunx` stub) on Windows, and a bare `<name>` elsewhere.
+  static readonly biomeBinName = process.platform === "win32" ? "biome.exe" : "biome";
+
   lintRoot: string;
   configPath: string;
   #biomeBin: string;
@@ -119,7 +122,7 @@ export class Linter {
   constructor(cwdPath: string) {
     this.lintRoot = this.#findBiomeRootPath(cwdPath);
     this.configPath = Linter.#configPathIn(this.lintRoot) ?? path.join(this.lintRoot, "biome.json");
-    const localBiomeBin = path.join(this.lintRoot, "node_modules/.bin/biome");
+    const localBiomeBin = path.join(this.lintRoot, "node_modules", ".bin", Linter.biomeBinName);
     this.#biomeBin = existsSync(localBiomeBin) ? localBiomeBin : "biome";
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akanjs/devkit",
-  "version": "3.0.0-beta.17",
+  "version": "3.0.0-beta.19",
   "sourceType": "module",
   "type": "module",
   "publishConfig": {
@@ -48,7 +48,7 @@
     "@inquirer/prompts": "^8.4.3",
     "@tailwindcss/node": "^4.3.0",
     "@trapezedev/project": "^7.1.4",
-    "akanjs": "3.0.0-beta.17",
+    "akanjs": "3.0.0-beta.19",
     "chalk": "^5.6.2",
     "commander": "^14.0.3",
     "dayjs": "^1.11.20",

package/platformTest/BunTestReport.test.ts

@@ -0,0 +1,60 @@
+import { describe, expect, test } from "bun:test";
+import { BunTestReport } from "./BunTestReport";
+
+describe("BunTestReport", () => {
+  test("reads the final summary and attributes each failure to the file header above it", () => {
+    const report = new BunTestReport(
+      [
+        "bun test v1.4.2 (744846f84)",
+        "",
+        "server\\artifact\\routeSeedIndex.test.ts:",
+        "(pass) route seed index > keeps seeds [0.40ms]",
+        "(fail) route seed index > restores relative seed paths [1.20ms]",
+        "",
+        "lib/linter.test.ts:",
+        "\u001b[31m(fail) Linter > finds biome [3.00ms]\u001b[0m",
+        "",
+        "2 tests failed:",
+        "(fail) route seed index > restores relative seed paths [1.20ms]",
+        "(fail) Linter > finds biome [3.00ms]",
+        "",
+        " 1 pass",
+        " 3 skip",
+        " 2 fail",
+        " 1 error",
+        "Ran 6 tests across 2 files. [120.00ms]",
+      ].join("\r\n"),
+    );
+
+    expect(report.hasSummary).toBe(true);
+    expect([report.pass, report.fail, report.skip, report.errors, report.files]).toEqual([1, 2, 3, 1, 2]);
+    expect(report.failures).toEqual([
+      { file: "server/artifact/routeSeedIndex.test.ts", name: "route seed index > restores relative seed paths" },
+      { file: "lib/linter.test.ts", name: "Linter > finds biome" },
+    ]);
+    expect(report.passed).toBe(false);
+  });
+
+  test("a run with no summary is not passed, and counts what it saw before it stopped", () => {
+    const report = new BunTestReport(
+      [
+        "server/akanApp.test.ts:",
+        "(pass) AkanApp > boots [1ms]",
+        "(pass) AkanApp > relays [2ms]",
+        "panic(main thread)",
+      ].join("\n"),
+    );
+
+    expect(report.hasSummary).toBe(false);
+    expect(report.passed).toBe(false);
+    expect(report.pass).toBe(2);
+    expect(report.lastFile).toBe("server/akanApp.test.ts");
+  });
+
+  test("a clean summary passes", () => {
+    const report = new BunTestReport(" 4 pass\n 0 fail\nRan 4 tests across 1 file. [12.00ms]\n");
+
+    expect(report.passed).toBe(true);
+    expect(report.files).toBe(1);
+  });
+});

package/platformTest/BunTestReport.ts

@@ -0,0 +1,65 @@
+import { stripVTControlCharacters } from "node:util";
+
+export interface BunTestFailure {
+  file: string | null;
+  name: string;
+}
+
+export class BunTestReport {
+  static readonly #fileHeaderPattern = /^(\S+\.(?:test|spec)\.[cm]?[jt]sx?):$/;
+  //? After the last file, bun repeats every failure under an "N tests failed:" line — those belong to no header.
+  static readonly #relistPattern = /^\d+ tests? failed:$/;
+  static readonly #durationSuffix = /\s+\[[\d.]+m?s\]$/;
+
+  readonly pass: number;
+  readonly fail: number;
+  readonly skip: number;
+  readonly errors: number;
+  readonly files: number;
+  readonly hasSummary: boolean;
+  readonly failures: BunTestFailure[];
+  readonly lastFile: string | null;
+
+  constructor(output: string) {
+    const lines = stripVTControlCharacters(output).split(/\r?\n/);
+    let currentFile: string | null = null;
+    let lastFile: string | null = null;
+    let relisted = false;
+    const failures = new Map<string, BunTestFailure>();
+    for (const line of lines) {
+      if (BunTestReport.#relistPattern.test(line)) relisted = true;
+      const header = BunTestReport.#fileHeaderPattern.exec(line);
+      if (header?.[1] && !relisted) {
+        currentFile = header[1].replaceAll("\\", "/");
+        lastFile = currentFile;
+        continue;
+      }
+      if (!line.startsWith("(fail) ")) continue;
+      const name = line.slice("(fail) ".length).replace(BunTestReport.#durationSuffix, "");
+      if (!failures.has(name)) failures.set(name, { file: relisted ? null : currentFile, name });
+    }
+    const ran = lines.findLast((line) => /^Ran \d+ tests? across \d+ files?/.test(line));
+    this.hasSummary = !!ran;
+    this.files = ran ? Number(/across (\d+) files?/.exec(ran)?.[1] ?? 0) : 0;
+    this.failures = [...failures.values()];
+    this.lastFile = lastFile;
+    this.pass = ran
+      ? BunTestReport.#lastCount(lines, /^\s*(\d+) pass$/)
+      : lines.filter((line) => line.startsWith("(pass) ")).length;
+    this.fail = ran ? BunTestReport.#lastCount(lines, /^\s*(\d+) fail$/) : this.failures.length;
+    this.skip = ran ? BunTestReport.#lastCount(lines, /^\s*(\d+) skip$/) : 0;
+    this.errors = ran ? BunTestReport.#lastCount(lines, /^\s*(\d+) errors?$/) : 0;
+  }
+
+  get passed() {
+    return this.hasSummary && this.fail === 0 && this.errors === 0;
+  }
+
+  static #lastCount(lines: string[], pattern: RegExp) {
+    for (const line of lines.toReversed()) {
+      const count = pattern.exec(line)?.[1];
+      if (count) return Number(count);
+    }
+    return 0;
+  }
+}

package/platformTest/IdleWatchedProcess.test.ts

@@ -0,0 +1,64 @@
+import { afterAll, describe, expect, test } from "bun:test";
+import { mkdtemp, readFile, rm } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { IdleWatchedProcess } from "./IdleWatchedProcess";
+
+const roots: string[] = [];
+const makeLogPath = async () => {
+  const root = await mkdtemp(path.join(os.tmpdir(), "akan-idle-watch-"));
+  roots.push(root);
+  return path.join(root, "nested", "run.log");
+};
+
+afterAll(async () => {
+  await Promise.all(roots.map((root) => rm(root, { recursive: true, force: true })));
+});
+
+describe("IdleWatchedProcess", () => {
+  test("tees the output of a command that finishes into the log and reports its exit code", async () => {
+    const logPath = await makeLogPath();
+    const result = await new IdleWatchedProcess(
+      [process.execPath, "--eval", "console.log('out'); console.error('err'); process.exit(3)"],
+      { logPath, idleMs: 10_000 },
+    ).run();
+
+    expect(result.exitCode).toBe(3);
+    expect(result.hung).toBe(false);
+    expect(result.output).toContain("out");
+    expect(result.output).toContain("err");
+    expect(await readFile(logPath, "utf8")).toContain("out");
+  });
+
+  test("gives up on a command that goes quiet, after asking the caller to clean up", async () => {
+    const logPath = await makeLogPath();
+    let cleanedUp = false;
+    const result = await new IdleWatchedProcess(
+      [process.execPath, "--eval", "console.log('started'); setInterval(() => {}, 1000)"],
+      {
+        logPath,
+        idleMs: 400,
+        onIdle: async () => {
+          cleanedUp = true;
+        },
+      },
+    ).run();
+
+    expect(result.hung).toBe(true);
+    expect(result.exitCode).toBeNull();
+    expect(cleanedUp).toBe(true);
+    expect(result.output).toContain("started");
+  });
+
+  test("a command that keeps talking is not idle, but still stops at the total budget", async () => {
+    const logPath = await makeLogPath();
+    const result = await new IdleWatchedProcess(
+      [process.execPath, "--eval", "setInterval(() => console.log('tick'), 50)"],
+      { logPath, idleMs: 5_000, totalMs: 500 },
+    ).run();
+
+    expect(result.hung).toBe(false);
+    expect(result.timedOut).toBe(true);
+    expect(result.exitCode).toBeNull();
+  });
+});

package/platformTest/IdleWatchedProcess.ts

@@ -0,0 +1,77 @@
+import { mkdir } from "node:fs/promises";
+import path from "node:path";
+
+export interface IdleWatchedResult {
+  exitCode: number | null;
+  hung: boolean;
+  timedOut: boolean;
+  output: string;
+  ms: number;
+}
+
+interface IdleWatchedOptions {
+  logPath: string;
+  idleMs: number;
+  totalMs?: number;
+  cwd?: string;
+  env?: Record<string, string | undefined>;
+  onIdle?: () => Promise<void>;
+  onOutput?: (text: string) => void;
+}
+
+/**
+ * Runs a command with its output teed into a log, and gives up on it once the output goes quiet.
+ * Silence is the only reliable hang signal: a runner stuck in a synchronous loop (Bun 1.4.2's Windows
+ * websocket crash spun at 100% CPU) never lets bun's own per-test timeout fire.
+ */
+export class IdleWatchedProcess {
+  readonly #command: string[];
+  readonly #options: IdleWatchedOptions;
+
+  constructor(command: string[], options: IdleWatchedOptions) {
+    this.#command = command;
+    this.#options = options;
+  }
+
+  async run(): Promise<IdleWatchedResult> {
+    const { logPath, idleMs, totalMs, cwd, env, onIdle, onOutput } = this.#options;
+    await mkdir(path.dirname(logPath), { recursive: true });
+    const log = Bun.file(logPath).writer();
+    const startedAt = performance.now();
+    let lastOutputAt = startedAt;
+    let output = "";
+    let hung = false;
+    let timedOut = false;
+    const proc = Bun.spawn(this.#command, { cwd, env, stdin: "ignore", stdout: "pipe", stderr: "pipe" });
+    const pump = async (stream: ReadableStream<Uint8Array>) => {
+      const decoder = new TextDecoder();
+      for await (const chunk of stream) {
+        lastOutputAt = performance.now();
+        const text = decoder.decode(chunk, { stream: true });
+        output += text;
+        log.write(chunk);
+        onOutput?.(text);
+      }
+    };
+    const pumping = Promise.all([pump(proc.stdout), pump(proc.stderr)]);
+    const watch = setInterval(
+      () => {
+        const now = performance.now();
+        if (now - lastOutputAt >= idleMs) hung = true;
+        else if (totalMs !== undefined && now - startedAt >= totalMs) timedOut = true;
+        else return;
+        clearInterval(watch);
+        void (async () => {
+          await onIdle?.().catch(() => undefined);
+          proc.kill();
+        })();
+      },
+      Math.max(50, Math.min(1000, idleMs / 4)),
+    );
+    const exitCode = await proc.exited;
+    clearInterval(watch);
+    await pumping;
+    await log.end();
+    return { exitCode: hung || timedOut ? null : exitCode, hung, timedOut, output, ms: performance.now() - startedAt };
+  }
+}

package/platformTest/LinuxDockerTarget.ts

@@ -0,0 +1,120 @@
+import os from "node:os";
+import path from "node:path";
+import type { LinuxTestTargetConfig, PlatformGatePolicy } from "../cloud/constants";
+import { IdleWatchedProcess } from "./IdleWatchedProcess";
+import { type PlatformRunContext, PlatformTestTarget } from "./PlatformTestTarget";
+
+export class LinuxDockerTarget extends PlatformTestTarget {
+  static readonly cacheVolume = "akan-test-bun-cache";
+
+  readonly platform = "linux";
+  readonly policy: PlatformGatePolicy;
+  readonly #config: LinuxTestTargetConfig;
+  #container: string | null = null;
+
+  constructor(config: LinuxTestTargetConfig = {}) {
+    super();
+    this.#config = config;
+    this.policy = config.policy ?? "gate";
+  }
+
+  //* No compiler in the image, on purpose: with a toolchain present at install time ssh2 builds its native
+  //* addon, and Bun then panics loading it (`uv_version_string`, oven-sh/bun#18546).
+  static readonly dockerfile = [
+    `FROM oven/bun:${Bun.version}-slim`,
+    "RUN apt-get update && apt-get install -y --no-install-recommends git ca-certificates procps lsof && rm -rf /var/lib/apt/lists/*",
+  ].join("\n");
+
+  get image() {
+    return `akan-test-linux:bun-${Bun.version}-${Bun.hash(LinuxDockerTarget.dockerfile).toString(16).slice(0, 8)}`;
+  }
+
+  protected async prepare(context: PlatformRunContext) {
+    if ((await LinuxDockerTarget.#docker(["info"])).exitCode !== 0)
+      throw new Error("Docker is not running — start Docker Desktop, or leave linux out of --platforms");
+    await this.#ensureImage();
+    const container = `akan-test-${context.runId}`;
+    const cpus = this.#config.cpus ?? Math.max(2, Math.floor(os.availableParallelism() / 2));
+    const started = await LinuxDockerTarget.#docker([
+      "run",
+      "-d",
+      "--rm",
+      "--name",
+      container,
+      "--cpus",
+      String(cpus),
+      ...(this.#config.memory ? ["--memory", this.#config.memory] : []),
+      "-v",
+      `${LinuxDockerTarget.cacheVolume}:/root/.bun/install/cache`,
+      "-v",
+      `${path.dirname(context.snapshot.tarPath)}:/io:ro`,
+      "-v",
+      `${context.envPath}:/io-env:ro`,
+      "-w",
+      "/w",
+      this.image,
+      "sleep",
+      "infinity",
+    ]);
+    if (started.exitCode !== 0) throw new Error(`docker run failed: ${started.stderr.trim()}`);
+    this.#container = container;
+    const extract = await this.exec(
+      `tar -xf /io/${path.basename(context.snapshot.tarPath)} -C /w && cp /io-env /w/.env && git -C /w init -q`,
+      path.join(context.logDir, this.platform, "extract.log"),
+      PlatformTestTarget.installIdleMs,
+    );
+    if (extract.exitCode !== 0) throw new Error("extracting the snapshot into the container failed");
+  }
+
+  protected async exec(command: string, logPath: string, idleMs: number) {
+    const container = this.#container;
+    if (!container) throw new Error("the linux container is not running");
+    return await new IdleWatchedProcess(
+      ["docker", "exec", ...LinuxDockerTarget.#gitIdentityEnv(), container, "sh", "-c", command],
+      {
+        logPath,
+        idleMs,
+        onIdle: async () => {
+          await LinuxDockerTarget.#docker(["exec", container, "pkill", "-9", "bun"]);
+        },
+      },
+    ).run();
+  }
+
+  protected async cleanup() {
+    if (this.#container) await LinuxDockerTarget.#docker(["rm", "-f", this.#container]);
+    this.#container = null;
+  }
+
+  async #ensureImage() {
+    if ((await LinuxDockerTarget.#docker(["image", "inspect", this.image])).exitCode === 0) return;
+    const built = await LinuxDockerTarget.#docker(["build", "-t", this.image, "-"], LinuxDockerTarget.dockerfile);
+    if (built.exitCode !== 0) throw new Error(`building ${this.image} failed: ${built.stderr.trim().slice(-400)}`);
+  }
+
+  static #gitIdentityEnv() {
+    return Object.entries({
+      GIT_AUTHOR_NAME: "akan-test",
+      GIT_AUTHOR_EMAIL: "akan-test@localhost",
+      GIT_COMMITTER_NAME: "akan-test",
+      GIT_COMMITTER_EMAIL: "akan-test@localhost",
+      GIT_CONFIG_COUNT: "1",
+      GIT_CONFIG_KEY_0: "init.defaultBranch",
+      GIT_CONFIG_VALUE_0: "main",
+    }).flatMap(([key, value]) => ["-e", `${key}=${value}`]);
+  }
+
+  static async #docker(args: string[], stdin?: string) {
+    const proc = Bun.spawn(["docker", ...args], {
+      stdin: stdin === undefined ? "ignore" : new Response(stdin),
+      stdout: "pipe",
+      stderr: "pipe",
+    });
+    const [stdout, stderr, exitCode] = await Promise.all([
+      new Response(proc.stdout).text(),
+      new Response(proc.stderr).text(),
+      proc.exited,
+    ]);
+    return { stdout, stderr, exitCode };
+  }
+}

package/platformTest/PlatformTestRun.test.ts

@@ -0,0 +1,68 @@
+import { afterAll, describe, expect, test } from "bun:test";
+import { mkdtemp, rm, writeFile } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { BunTestReport } from "./BunTestReport";
+import { PlatformTestRun } from "./PlatformTestRun";
+import type { PackageTestResult, PlatformTestResult } from "./PlatformTestTarget";
+
+const roots: string[] = [];
+afterAll(async () => {
+  await Promise.all(roots.map((root) => rm(root, { recursive: true, force: true })));
+});
+
+const pkg = (status: PackageTestResult["status"]): PackageTestResult => ({
+  pkg: "akanjs",
+  status,
+  report: new BunTestReport(""),
+  ms: 1,
+  logPath: "x.log",
+});
+const result = (
+  platform: PlatformTestResult["platform"],
+  policy: PlatformTestResult["policy"],
+  packages: PackageTestResult[],
+  infraError: string | null = null,
+): PlatformTestResult => ({ platform, policy, packages, envWarnings: [], infraError, ms: 1 });
+
+describe("PlatformTestRun", () => {
+  test("a failing gate blocks, a failing warn only warns, and a setup failure counts as a failure", () => {
+    const verdict = PlatformTestRun.verdict([
+      result("linux", "gate", [pkg("pass"), pkg("fail")]),
+      result("windows", "warn", [pkg("pass")], "cannot reach user@host over ssh"),
+    ]);
+
+    expect(verdict.blocking.map((one) => one.platform)).toEqual(["linux"]);
+    expect(verdict.warning.map((one) => one.platform)).toEqual(["windows"]);
+  });
+
+  test("a hung package fails its platform", () => {
+    expect(PlatformTestRun.failed(result("windows", "gate", [pkg("pass"), pkg("hung")]))).toBe(true);
+    expect(PlatformTestRun.failed(result("windows", "gate", [pkg("pass")]))).toBe(false);
+  });
+
+  test("hands a test host only the env keys the CLI needs, never the secrets beside them", async () => {
+    const root = await mkdtemp(path.join(os.tmpdir(), "akan-platform-env-"));
+    roots.push(root);
+    await writeFile(
+      path.join(root, ".env"),
+      ["USE_AKANJS_PKGS=true", "OPENAI_API_KEY=sk-secret", 'AKAN_PUBLIC_SERVE_DOMAIN="akanjs.com"', "JEV_KEY=x"].join(
+        "\n",
+      ),
+    );
+
+    expect(await PlatformTestRun.allowlistedEnv(root)).toBe(
+      'USE_AKANJS_PKGS=true\nAKAN_PUBLIC_SERVE_DOMAIN="akanjs.com"\n',
+    );
+  });
+
+  test("reads a comma-separated platform list, where none means no remote platform", () => {
+    expect(PlatformTestRun.parsePlatforms("linux, Windows,linux")).toEqual(["linux", "windows"]);
+    expect(PlatformTestRun.parsePlatforms("none")).toEqual([]);
+    expect(() => PlatformTestRun.parsePlatforms("linux,mac")).toThrow("mac");
+  });
+
+  test("run ids sort by time", () => {
+    expect(PlatformTestRun.newRunId(new Date(2026, 8, 26, 9, 5, 7))).toBe("20260926-090507");
+  });
+});