M6 (part 1): per-recipe meta + D4 recipe-local discovery + shared naming helper

Recipe-agnostic harness (no surgery to enroll a recipe): recipe_meta.py for
health path/codes/timeouts; run_recipe_local discovers + runs recipe-shipped
tests/ against the live app. install non-regressed.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

runner/run_recipe_ci.py

@@ -16,11 +16,14 @@ Run env (python with pytest+playwright, PLAYWRIGHT_BROWSERS_PATH) is provided by
 """
 from __future__ import annotations
 
+import glob
 import os
 import subprocess
 import sys
 
 ROOT = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
+sys.path.insert(0, os.path.join(ROOT, "runner"))
+from harness import lifecycle, naming  # noqa: E402
 STAGE_FILES = {
     "install": "test_install.py",
     "upgrade": "test_upgrade.py",
@@ -73,11 +76,37 @@ def main() -> int:
         ran += 1
         if rc != 0:
             overall = rc
+    # D4: recipe-local tests. If the recipe repo ships a tests/ dir, deploy the app and run those
+    # tests against the LIVE deployment (contract: CCCI_BASE_URL + CCCI_APP_DOMAIN env), merging the
+    # result into this run as another reported stage. Teardown is guaranteed.
+    rc = run_recipe_local(recipe)
+    if rc is not None:
+        ran += 1
+        if rc != 0:
+            overall = rc
+
     if ran == 0:
         print("no stage test files found", file=sys.stderr)
         return 1
     return overall
 
 
+def run_recipe_local(recipe: str) -> int | None:
+    local_dir = os.path.expanduser(f"~/.abra/recipes/{recipe}/tests")
+    if not os.path.isdir(local_dir) or not glob.glob(os.path.join(local_dir, "test_*.py")):
+        return None  # recipe ships no tests/ — D4 is a no-op for it
+    print("\n===== STAGE: recipe-local (D4) =====", flush=True)
+    domain = naming.app_domain(recipe, os.environ.get("PR", "0"), os.environ.get("REF"))
+    lifecycle.janitor()
+    try:
+        lifecycle.deploy_app(recipe, domain, version=os.environ.get("VERSION") or None)
+        lifecycle.wait_healthy(domain)
+        env = dict(os.environ, CCCI_APP_DOMAIN=domain, CCCI_BASE_URL=f"https://{domain}")
+        return subprocess.call([sys.executable, "-m", "pytest", "-v", "-rA", local_dir],
+                               cwd=ROOT, env=env)
+    finally:
+        lifecycle.teardown_app(domain, verify=False)
+
+
 if __name__ == "__main__":
     raise SystemExit(main())