ci(release): bundle and verify external nesting engines

scripts/Publish-Windows.ps1

@@ -7,6 +7,7 @@ param(
 )
 
 $ErrorActionPreference = 'Stop'
+$PSNativeCommandUseErrorActionPreference = $false
 Set-StrictMode -Version Latest
 if (-not $IsWindows) { throw 'Packaging includes a desktop smoke test and requires Windows.' }
 
@@ -37,11 +38,41 @@ try {
         # Gravograph's serial-port runtime is not in the desktop project's dependency graph.
         if ($name -eq 'GravographIS') { Copy-Item "$staging/System.IO.Ports.dll" $package }
     }
+    $engineManifestPath = Join-Path $PSScriptRoot 'external-engines.json'
+    $engineManifest = Get-Content $engineManifestPath -Raw | ConvertFrom-Json
+    if ($engineManifest.commit -notmatch '^[0-9a-f]{40}$') { throw 'Engines must be pinned to a full commit SHA.' }
+    $engineSource = Join-Path $output 'external-engine-source'
+    git init $engineSource
+    if ($LASTEXITCODE -ne 0) { throw 'Cannot initialize engine checkout.' }
+    git -C $engineSource fetch --depth 1 $engineManifest.repository $engineManifest.commit
+    if ($LASTEXITCODE -ne 0) { throw 'Cannot fetch pinned engines.' }
+    git -C $engineSource checkout --detach FETCH_HEAD
+    if ($LASTEXITCODE -ne 0) { throw 'Cannot check out pinned engines.' }
+    $engineCommit = (git -C $engineSource rev-parse HEAD).Trim()
+    if ($LASTEXITCODE -ne 0 -or $engineCommit -ne $engineManifest.commit) { throw 'Engine source revision mismatch.' }
+    $engineDirectory = Join-Path $package 'Engines'
+    New-Item -ItemType Directory -Path $engineDirectory | Out-Null
+    # A global MSBuild property cannot be normalized by Directory.Build.props: retain the trailing slash.
+    $hostRoot = $root.Replace('\', '/') + '/'
+    foreach ($engine in $engineManifest.engines) {
+        $project = $engine.project
+        $projectDirectory = Join-Path $engineSource $project
+        dotnet test "$projectDirectory/tests/$project.Tests.csproj" -c Release "-p:OpenNestRoot=$hostRoot" "-p:Version=$Version" --logger "trx;LogFileName=$project.trx" --results-directory (Join-Path $root 'TestResults')
+        if ($LASTEXITCODE -ne 0) { throw "$project tests failed." }
+        $staging = Join-Path $output "engine-build/$project"
+        dotnet publish "$projectDirectory/$project.csproj" @common --self-contained false "-p:OpenNestRoot=$hostRoot" -o $staging
+        if ($LASTEXITCODE -ne 0) { throw "$project publish failed." }
+        Copy-Item "$staging/$project.dll" $engineDirectory
+    }
+    Copy-Item $engineManifestPath (Join-Path $engineDirectory 'manifest.json')
+    Copy-Item (Join-Path $engineSource 'LICENSE') (Join-Path $engineDirectory 'LICENSE.txt')
+
     New-Item -ItemType Directory -Path (Join-Path $package 'Schemes') -Force | Out-Null
     Copy-Item LICENSE $package
     @{
         version = $Version
         sourceCommit = $commit
+        enginesCommit = $engineCommit
         runtime = 'win-x64'
         selfContained = $true
     } | ConvertTo-Json | Set-Content (Join-Path $package 'build-info.json') -Encoding utf8NoBOM
@@ -52,8 +83,10 @@ try {
         'onnxruntime.dll', 'System.IO.Ports.dll', 'Configurations/PipeFlangeShape.json',
         'Posts/OpenNest.Posts.Cincinnati.dll', 'Posts/OpenNest.Posts.Cincinnati.json',
         'Posts/OpenNest.Posts.CincinnatiCIFiber.dll', 'Posts/OpenNest.Posts.CincinnatiCIFiber.json',
-        'Posts/OpenNest.Posts.GravographIS.dll', 'LICENSE', 'build-info.json'
+        'Posts/OpenNest.Posts.GravographIS.dll', 'LICENSE', 'build-info.json',
+        'Engines/manifest.json', 'Engines/LICENSE.txt'
     )
+    $required += $engineManifest.engines | ForEach-Object { "Engines/$($_.project).dll" }
     foreach ($file in $required) {
         if (-not (Test-Path (Join-Path $package $file) -PathType Leaf)) { throw "Package missing $file" }
     }
@@ -73,6 +106,20 @@ try {
     foreach ($file in $required) {
         if (-not (Test-Path (Join-Path $expanded $file) -PathType Leaf)) { throw "ZIP missing $file" }
     }
+    $smokeProject = Join-Path $PSScriptRoot 'ReleaseSmoke/ReleaseSmoke.csproj'
+    dotnet build $smokeProject -c Release
+    if ($LASTEXITCODE -ne 0) { throw 'Engine discovery checker build failed.' }
+    # Verify silent plugin-load failure cannot be mistaken for a successful package.
+    $probe = Join-Path $expanded "Engines/$($engineManifest.engines[0].project).dll"
+    Move-Item $probe "$probe.disabled"
+    try {
+        dotnet run --project $smokeProject -c Release --no-build -- $expanded
+        if ($LASTEXITCODE -eq 0) { throw 'Missing-engine failure case was not detected.' }
+    }
+    finally { Move-Item "$probe.disabled" $probe }
+    dotnet run --project $smokeProject -c Release --no-build -- $expanded
+    if ($LASTEXITCODE -ne 0) { throw 'Packaged engine discovery failed.' }
+
     $process = Start-Process (Join-Path $expanded 'OpenNest.exe') -WorkingDirectory $expanded -PassThru
     try {
         if (-not $process.WaitForInputIdle(30000)) { throw 'Desktop did not become idle within 30 seconds.' }
@@ -80,10 +127,10 @@ try {
         do {
             $process.Refresh()
             if ($process.HasExited) { throw "Desktop exited during startup: $($process.ExitCode)" }
-            if ($process.MainWindowHandle -ne 0 -and $process.MainWindowTitle -eq 'OpenNest') { break }
+            if ($process.MainWindowHandle -ne 0 -and $process.MainWindowTitle -match '^OpenNest(?: - \[.*\])?$') { break }
             Start-Sleep -Milliseconds 250
         } while ([DateTime]::UtcNow -lt $deadline)
-        if ($process.MainWindowHandle -eq 0 -or $process.MainWindowTitle -ne 'OpenNest') {
+        if ($process.MainWindowHandle -eq 0 -or $process.MainWindowTitle -notmatch '^OpenNest(?: - \[.*\])?$') {
             throw "Expected OpenNest main window, found '$($process.MainWindowTitle)'."
         }
         Write-Host 'PASS: packaged OpenNest main window opened on Windows.'