ci: isolate client smoke and hub tests

.gitea/workflows/ci.yml

@@ -138,6 +138,8 @@ jobs:
     needs: [build]
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - name: Build packages
+        run: bash scripts/commands/build.sh --summary
       - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v22.16.0
         with:
           node-version: '24'

.github/workflows/ci.yml

@@ -138,6 +138,8 @@ jobs:
     needs: [build]
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - name: Build packages
+        run: bash scripts/commands/build.sh --summary
       - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v22.16.0
         with:
           node-version: '24'

scripts/tests/test-plugin-selection.ps1

@@ -38,10 +38,11 @@ $env:AI_CONFIG_VERBOSE = $null
 if (-not $failed -or $diagnostics -notcontains 'download progress' -or $diagnostics -notcontains 'WARN test warning') { throw 'Plugin failure must retain full diagnostics and fail.' }
 $global:LASTEXITCODE = 0
 function codex { $script:observedCodexHome = $env:CODEX_HOME; $script:observedProfile = $env:USERPROFILE; '{"installed":[{"pluginId":"ponytail@ponytail"},{"pluginId":"i-have-adhd@i-have-adhd"},{"pluginId":"superpowers@openai-curated-remote"},{"pluginId":"context7@context7-marketplace"},{"pluginId":"caveman@thinkhome-caveman"}],"available":[]}' }
+$testHome = Join-Path ([System.IO.Path]::GetTempPath()) 'ai-config-plugin-test-home'
 $previousCodexHome = $env:CODEX_HOME
 $previousProfile = $env:USERPROFILE
-$null = Get-InstalledPlugins -Client Codex -HomePath 'C:/temporary profile'
-if ($observedCodexHome -ne (Join-Path 'C:/temporary profile' '.codex') -or $observedProfile -ne 'C:/temporary profile') { throw 'Plugin inspection must use the requested user home.' }
+$null = Get-InstalledPlugins -Client Codex -HomePath $testHome
+if ($observedCodexHome -ne (Join-Path $testHome '.codex') -or $observedProfile -ne $testHome) { throw 'Plugin inspection must use the requested user home.' }
 if ($env:CODEX_HOME -ne $previousCodexHome -or $env:USERPROFILE -ne $previousProfile) { throw 'Plugin inspection must restore the process environment.' }
 $script:answers.Enqueue('done')
 $selection = Select-ConfiguredPlugins -RepositoryRoot (Split-Path (Split-Path $PSScriptRoot -Parent) -Parent) -Client Codex -Mode Update
@@ -53,8 +54,8 @@ if (@($selection.Deselected | Where-Object { $_.name -eq 'Context7' }).Count -ne
 $script:managedArguments = @()
 function python { $script:managedArguments = @($args); $global:LASTEXITCODE = 0 }
 $entry = [pscustomobject]@{ name = 'Test'; codex_method = 'plugin'; codex_marketplace = '-'; codex_plugin = 'test@market' }
-Sync-ConfiguredPlugins -RepositoryRoot (Split-Path (Split-Path $PSScriptRoot -Parent) -Parent) -Client Codex -HomePath 'C:/temporary home' -Update -Summary -Entries @($entry)
-if ($managedArguments -notcontains 'sync' -or $managedArguments -notcontains '--update' -or $managedArguments -notcontains 'Test' -or $managedArguments -notcontains 'C:/temporary home') { throw 'Managed reconciliation must receive selection, home, and update mode.' }
+Sync-ConfiguredPlugins -RepositoryRoot (Split-Path (Split-Path $PSScriptRoot -Parent) -Parent) -Client Codex -HomePath $testHome -Update -Summary -Entries @($entry)
+if ($managedArguments -notcontains 'sync' -or $managedArguments -notcontains '--update' -or $managedArguments -notcontains 'Test' -or $managedArguments -notcontains $testHome) { throw 'Managed reconciliation must receive selection, home, and update mode.' }
 Sync-ConfiguredPlugins -RepositoryRoot (Split-Path (Split-Path $PSScriptRoot -Parent) -Parent) -Client Codex -Entries @()
 if ($managedArguments[-1] -ne '--selected') { throw 'Empty selection must reach reconciliation for managed cleanup.' }
 function Get-InstalledPlugins { throw 'Empty selection must not query installed plugins.' }

scripts/tests/test-retrieval-server.py

@@ -4,6 +4,7 @@ from concurrent.futures import ThreadPoolExecutor
 import os
 from pathlib import Path
 import re
+import socket
 from tempfile import TemporaryDirectory
 from types import SimpleNamespace
 import time
@@ -26,12 +27,29 @@ def embedding():
     return array('f', [1.0] + [0.0] * (MODULE.EMBEDDING_DIMENSIONS - 1))
 
 
+def huggingface_available():
+    try:
+        socket.getaddrinfo('huggingface.co', 443)
+    except socket.gaierror:
+        return False
+    return True
+
+
 class RetrievalServerTests(unittest.TestCase):
+    def test_huggingface_availability_handles_dns_failure(self):
+        with patch('socket.getaddrinfo', side_effect=socket.gaierror):
+            self.assertFalse(huggingface_available())
+
     def test_ci_disables_xet_for_model_downloads(self):
         for workflow in ('.github/workflows/ci.yml', '.gitea/workflows/ci.yml'):
             content = (ROOT / workflow).read_text(encoding='utf-8')
             self.assertIn("HF_HUB_DISABLE_XET: '1'", content)
 
+    def test_client_smoke_builds_packages(self):
+        for workflow in ('.github/workflows/ci.yml', '.gitea/workflows/ci.yml'):
+            content = (ROOT / workflow).read_text(encoding='utf-8')
+            self.assertIn('name: Build packages\n        run: bash scripts/commands/build.sh --summary', content)
+
     def test_runtime_python_uses_adjacent_virtualenv(self):
         with TemporaryDirectory() as temporary:
             script = Path(temporary) / 'semantic-retrieval' / 'server.py'
@@ -49,6 +67,8 @@ class RetrievalServerTests(unittest.TestCase):
 
     @unittest.skipUnless(os.environ.get('QWEN_TEST_MODEL_CACHE'), 'Set QWEN_TEST_MODEL_CACHE to run the real-model check.')
     def test_real_models(self):
+        if not huggingface_available():
+            self.skipTest('huggingface.co DNS is unavailable')
         os.environ['HF_HOME'] = os.environ['QWEN_TEST_MODEL_CACHE']
         with TemporaryDirectory() as temporary:
             root = Path(temporary)