test(e2e): add Deep Agents Code headless inference acceptance check (#5619)

[abhi-0906]

Closes #5619

Adds test/e2e/e2e-cloud-experimental/checks/07-deepagents-code-headless-inference.sh, a skip-aware live check (mirroring the existing 05/06 Deep Agents Code checks) for headless dcode -n:

• config.toml routes through the managed https://inference.local endpoint.
• Headless dcode -n "<deterministic prompt>" returns a response or a deterministic, actionable provider/model error within a timeout — never a hang.
• No provider or proxy credentials appear in config.toml, .env, .mcp.json, /tmp/nemoclaw-proxy-env.sh, or the captured output.

The check self-skips when the sandbox is not a Deep Agents Code sandbox. A unit assertion in langchain-deepagents-code-image.test.ts registers the check and verifies its skip guard, prompt, inference route, and secret scan.

Signed-off-by: Abhimanyu Kumar abhimanyukumar7290@gmail.com

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

[github-actions]

This repository limits contributors to 10 open pull requests. Please close or merge existing PRs before opening new ones.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: af0ecf13-9b87-4ff1-a5fe-c44064f44a64

📥 Commits

Reviewing files that changed from the base of the PR and between a9f31e4 and 28e3a12.

📒 Files selected for processing (2)

• test/e2e/e2e-cloud-experimental/checks/07-deepagents-code-headless-inference.sh
• test/langchain-deepagents-code-image.test.ts

---

📝 Walkthrough

Walkthrough

Adds a new Bash e2e check script (07-deepagents-code-headless-inference.sh) that skips when outside a Deep Agents Code sandbox, validates config.toml routes through inference.local, runs dcode -n and checks for actionable output, scans artifacts for secret patterns, and exits non-zero on failure. A companion Vitest test asserts the script contains required markers.

Changes

Deep Agents Code headless inference e2e check

Layer / File(s)	Summary
Headless inference check script test/e2e/e2e-cloud-experimental/checks/07-deepagents-code-headless-inference.sh	New Bash script with strict options, skip guard for non-DA-Code sandboxes, config.toml routing assertion against inference.local, dcode -n execution with timeout and exit-code handling, secret-pattern leak scan over config/runtime/output artifacts, and final PASS/FAIL summary with non-zero exit on any failure.
Vitest content assertion test/langchain-deepagents-code-image.test.ts	Adds a new it(...) test that reads the check script and asserts presence of dcode headless invocation, inference.local, nvapi- marker, and /tmp/nemoclaw-proxy-env.sh.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related issues

• Validate Deep Agents Code headless dcode inference #5619 — The check script directly implements the acceptance criteria from this issue: headless inference validation, inference.local routing, secret/credential leak detection, and proper exit-code handling for the Deep Agents Code sandbox.
• Validate live Deep Agents Code sandbox acceptance #5618 — The script's secret scanning and runtime behavior verification align with the broader Deep Agents Code sandbox acceptance testing criteria described in this issue.

Poem

🐇 A sandbox appears, so I sniff all around,
Does dcode -n run? Does inference.local sound?
No nvapi- keys left out in the air,
No secrets in .env or config to share.
PASS or FAIL — the rabbit counts each,
And exits with one if the tests breach! 🌿

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

_{Comment @coderabbitai help to get the list of available commands.}