ci: stabilize full test shards

Author: dwgx

.env.example

@@ -65,7 +65,7 @@ LS_PORT=42100
 # Native Cascade tool bridge. Default off because Cascade executes native
 # Read/Bash-style tools in the remote Windsurf workspace, while most clients
 # expect local execution.
-# v2.0.138 production canary scope is intentionally narrow: without an
+# v2.0.139 production canary scope is intentionally narrow: without an
 # explicit tool allowlist, only Bash / shell_command / run_command can route
 # through the native bridge. Read/Grep/Glob/WebSearch/WebFetch are protocol
 # matrix work, not production defaults. For local IDE tools (Claude Code,

docs/releases/RELEASE_NOTES_2.0.139.md

@@ -0,0 +1,22 @@
+# v2.0.139 - full CI shard hotfix
+
+## What changed
+
+- Fixed `test/audit-fixes.test.js` on Linux by using `fileURLToPath(import.meta.url)` instead of manually stripping the leading slash from `import.meta.url`.
+- Fixed fake HTTP/2 language-server tests to close/destroy active sessions before `server.close()`, preventing CI shard timeouts in `test/client-panel-retry.test.js` and `test/native-read-wrapper.test.js`.
+- Bumped the package version and native-bridge canary note to v2.0.139.
+
+## Context
+
+v2.0.138 Release, Docker build, and GitHub Release succeeded. The newly restored full CI shards then exposed these test-harness portability/resource-cleanup issues. This release keeps the v2.0.138 product changes and makes the full CI gate green.
+
+## Validation
+
+- `node --test --test-force-exit test/audit-fixes.test.js`
+- `node --test --test-force-exit test/client-panel-retry.test.js`
+- `node --test --test-force-exit test/native-read-wrapper.test.js`
+- `npm.cmd run test:release`
+- `npm.cmd run test:shard -- 0 4 --timeout-ms=90000`
+- `npm.cmd run test:shard -- 1 4 --timeout-ms=90000`
+- `npm.cmd run test:shard -- 2 4 --timeout-ms=90000`
+- `npm.cmd run test:shard -- 3 4 --timeout-ms=90000`

package.json

@@ -1,6 +1,6 @@
 {
   "name": "windsurf-api",
-  "version": "2.0.138",
+  "version": "2.0.139",
   "description": "Windsurf to OpenAI + Anthropic compatible API proxy. Turns Windsurf's 107 AI models (Claude, GPT, Gemini, DeepSeek, Grok, Qwen, Kimi, GLM, SWE) into dual-protocol API endpoints. Zero npm deps.",
   "type": "module",
   "main": "src/index.js",

test/audit-fixes.test.js

@@ -20,7 +20,8 @@ import { describe, test } from 'node:test';
 import assert from 'node:assert/strict';
 import { mkdtempSync, readFileSync, writeFileSync, existsSync, rmSync, readdirSync } from 'node:fs';
 import { tmpdir } from 'node:os';
-import { join } from 'node:path';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
 
 import { writeJsonAtomic } from '../src/fs-atomic.js';
 import { cacheKey } from '../src/cache.js';
@@ -176,7 +177,7 @@ describe('atomic write call sites use writeJsonAtomic', () => {
   // helper instead of writeFileSync. A future refactor that drops
   // the import without re-introducing tmp+rename should fail this
   // test rather than silently regress to the truncated-JSON bug.
-  const __dirname = new URL('.', import.meta.url).pathname.replace(/^\//, '');
+  const __dirname = dirname(fileURLToPath(import.meta.url));
   const ROOT = join(__dirname, '..');
   const FILES = [
     'src/runtime-config.js',

test/client-panel-retry.test.js

@@ -164,12 +164,21 @@ function setEnvForTest(values) {
 
 async function withFakeLanguageServer(handler, fn) {
   const server = http2.createServer();
+  const sessions = new Set();
+  server.on('session', session => {
+    sessions.add(session);
+    session.on('close', () => sessions.delete(session));
+  });
   server.on('stream', handler);
   await new Promise(resolve => server.listen(0, '127.0.0.1', resolve));
   const port = server.address().port;
   try {
     return await fn(port);
   } finally {
+    for (const session of sessions) {
+      try { session.close(); } catch {}
+      try { session.destroy(); } catch {}
+    }
     await new Promise(resolve => server.close(resolve));
   }
 }

test/native-read-wrapper.test.js

@@ -81,12 +81,21 @@ function trajectoryStepsResponse(...steps) {
 
 async function withFakeLanguageServer(handler, fn) {
   const server = http2.createServer();
+  const sessions = new Set();
+  server.on('session', session => {
+    sessions.add(session);
+    session.on('close', () => sessions.delete(session));
+  });
   server.on('stream', handler);
   await new Promise(resolve => server.listen(0, '127.0.0.1', resolve));
   const port = server.address().port;
   try {
     return await fn(port);
   } finally {
+    for (const session of sessions) {
+      try { session.close(); } catch {}
+      try { session.destroy(); } catch {}
+    }
     await new Promise(resolve => server.close(resolve));
   }
 }