M6 (part 1): per-recipe meta + D4 recipe-local discovery + shared naming helper

Recipe-agnostic harness (no surgery to enroll a recipe): recipe_meta.py for
health path/codes/timeouts; run_recipe_local discovers + runs recipe-shipped
tests/ against the live app. install non-regressed.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

tests/conftest.py

@@ -6,21 +6,36 @@ computes a unique app domain per run so concurrent runs never collide, and GUARA
 """
 from __future__ import annotations
 
-import hashlib
 import os
 import sys
-import time
 
 import pytest
 
 sys.path.insert(0, os.path.join(os.path.dirname(__file__), "..", "runner"))
-from harness import lifecycle  # noqa: E402
+from harness import lifecycle, naming  # noqa: E402
 
 
 def _short(s: str, n: int = 8) -> str:
     return "".join(c for c in s if c.isalnum())[:n] or "local"
 
 
+def _recipe_meta(recipe: str) -> dict:
+    """Optional per-recipe config so enrolling a recipe needs NO shared-harness change (D5).
+    A recipe may ship tests/<recipe>/recipe_meta.py with any of: HEALTH_PATH (str),
+    HEALTH_OK (tuple of status codes), DEPLOY_TIMEOUT (int), HTTP_TIMEOUT (int)."""
+    path = os.path.join(os.path.dirname(__file__), recipe, "recipe_meta.py")
+    meta = {"HEALTH_PATH": "/", "HEALTH_OK": (200, 301, 302),
+            "DEPLOY_TIMEOUT": 600, "HTTP_TIMEOUT": 300}
+    if os.path.exists(path):
+        ns: dict = {}
+        with open(path) as fh:
+            exec(compile(fh.read(), path, "exec"), ns)  # noqa: S102 (trusted, in-repo)
+        for k in meta:
+            if k in ns:
+                meta[k] = ns[k]
+    return meta
+
+
 @pytest.fixture(scope="session")
 def recipe() -> str:
     return os.environ.get("RECIPE", "custom-html")
@@ -33,33 +48,39 @@ def app_domain(recipe) -> str:
     # subdomain label must stay short. Use <recipe[:4]>-<6hex(recipe|pr|ref)> — unique per run,
     # collision-safe across recipes (full recipe in the hash), readable context lives in the
     # Drone build params + PR comment. (Deviation from plan §4.0 long name; see DECISIONS.md.)
-    pr = os.environ.get("PR", "0")
-    ref = os.environ.get("REF", "local" + str(int(time.time())))
-    tag = _short(recipe, 4).lower()
-    h = hashlib.sha1(f"{recipe}|{pr}|{ref}".encode()).hexdigest()[:6]
-    return f"{tag}-{h}.ci.commoninternet.net"
+    return naming.app_domain(recipe, os.environ.get("PR", "0"), os.environ.get("REF"))
+
+
+@pytest.fixture(scope="session")
+def meta(recipe) -> dict:
+    return _recipe_meta(recipe)
+
+
+def _wait_healthy(domain, meta):
+    lifecycle.wait_healthy(domain, ok_codes=tuple(meta["HEALTH_OK"]), path=meta["HEALTH_PATH"],
+                           deploy_timeout=meta["DEPLOY_TIMEOUT"], http_timeout=meta["HTTP_TIMEOUT"])
 
 
 @pytest.fixture
-def deployed(recipe, app_domain, request):
+def deployed(recipe, app_domain, meta, request):
     """Function-scoped: deploy the current/$REF version healthy, guaranteed teardown after.
     Used by stages that start from current (install/backup)."""
     version = os.environ.get("VERSION") or None
     lifecycle.janitor()
     request.addfinalizer(lambda: lifecycle.teardown_app(app_domain))
     lifecycle.deploy_app(recipe, app_domain, version=version)
-    lifecycle.wait_healthy(app_domain)
+    _wait_healthy(app_domain, meta)
     return app_domain
 
 
 @pytest.fixture(scope="session")
-def deployed_app(recipe, app_domain):
+def deployed_app(recipe, app_domain, meta):
     """Install stage: deploy the recipe and wait until healthy; tear down at session end."""
     version = os.environ.get("VERSION") or None
     lifecycle.janitor()  # sweep orphans from crashed runs first
     try:
         lifecycle.deploy_app(recipe, app_domain, version=version, secrets=True)
-        lifecycle.wait_healthy(app_domain)
+        _wait_healthy(app_domain, meta)
         yield app_domain
     finally:
         lifecycle.teardown_app(app_domain)