test: execute generated app server fixture

Author: Gini

docs/IMPLEMENTATION-LOG.md

@@ -68,3 +68,4 @@
 - Added a read-only task Settings workspace tab. It gathers the runtime/boundary, gateway-attestation, approval, artifact-contract, and attached-context record in one reviewable place while deliberately excluding credentials, VTI Wallet keys, provider controls, and X11/VNC/CDP channels.
 - Modernized generated Website/App/Game projects with Tailwind 4’s Vite integration and a minimal typed component foundation (`Button` plus `cn`). Static validation now verifies the foundation is present; installing or running third-party dependencies remains reserved for a controlled sandbox build gate.
 - Extended App mode with a portable full-stack seed: a separately checked Node/TypeScript local server, a typed health contract shared with the client tree, and explicit server scripts. It deliberately creates no auth, connector, credential, or deployment behavior; those belong to the governed runtime/integration layers.
+- Added an isolated runtime test for the deterministic generated App scaffold: it starts the generated server and verifies its typed `/health` response. This validates the known fixture only; it does not execute arbitrary agent-created source or install third-party project dependencies on the host.

server/mode-artifacts.test.ts

@@ -1,6 +1,7 @@
 import { mkdtemp, rm } from 'node:fs/promises'
 import { tmpdir } from 'node:os'
 import path from 'node:path'
+import { spawn } from 'node:child_process'
 import { afterEach, describe, expect, it } from 'vitest'
 
 const temporaryRoots: string[] = []
@@ -53,6 +54,37 @@ describe('mode artifacts', () => {
     })
   })
 
+  it('runs the deterministic generated App server health endpoint', async () => {
+    const root = await mkdtemp(path.join(tmpdir(), 'onevibe-app-server-'))
+    temporaryRoots.push(root)
+    const { TaskStore } = await import('./store.js')
+    const { writeModeArtifacts } = await import('./mode-artifacts.js')
+    const store = new TaskStore(root)
+    await store.initialize()
+    const task = await store.createTask('Run generated app server', 'demo', 'app')
+    await writeModeArtifacts(task, store)
+    const port = 48_000 + Math.floor(Math.random() * 1_000)
+    const appRoot = store.workspacePath(task.id, 'app')
+    const command = path.resolve(process.cwd(), 'node_modules/.bin/tsx')
+    const child = spawn(command, ['server/src/index.ts'], { cwd: appRoot, env: { ...process.env, PORT: String(port) }, stdio: ['ignore', 'pipe', 'pipe'] })
+    try {
+      await new Promise<void>((resolve, reject) => {
+        const timeout = setTimeout(() => reject(new Error('Generated app server did not start')), 5_000)
+        child.once('error', (error) => { clearTimeout(timeout); reject(error) })
+        child.stdout.on('data', (chunk: Buffer) => {
+          if (!chunk.toString().includes('Generated app server listening')) return
+          clearTimeout(timeout); resolve()
+        })
+        child.stderr.on('data', (chunk: Buffer) => { clearTimeout(timeout); reject(new Error(chunk.toString())) })
+      })
+      const response = await fetch(`http://127.0.0.1:${port}/health`)
+      expect(response.status).toBe(200)
+      await expect(response.json()).resolves.toEqual({ status: 'ok', service: 'onevibe-generated-app' })
+    } finally {
+      child.kill()
+    }
+  })
+
   it('generates a playable interaction loop for game mode', async () => {
     const root = await mkdtemp(path.join(tmpdir(), 'onevibe-game-mode-'))
     temporaryRoots.push(root)