fix: launch leased-continuation CLI through the selected test Python

Review follow-up. The new CLI test started `promisify(execFile)("python3", …)`,
so the bare system interpreter (Python 3.9 on this host) ran `loopx.cli` and
failed on `@dataclass(slots=True)`; only a PATH-injected `uv run` hid it. The
merged checkout guard in `test_python_runtime.test.ts` also missed the curried
call shape, so it let the regression through.

Both subprocesses now take their interpreter from
`scripts/test-python.mjs`, and the guard sees through promisified and aliased
launchers while still ignoring a resolved interpreter path or an unrelated
helper argument.

Verified with the system Python 3.9 in PATH and no `uv` wrapper: the bare
`node --experimental-strip-types --test` run of the new suite reports 10
passed, 1 skipped (PostgreSQL), and restoring the literal `python3` launch
makes the guard name the file.

Signed-off-by: huangruiteng <14976749+huangruiteng@users.noreply.github.com>

Author: huangruiteng

tests/control_plane_ts/leased_continuation.test.ts

@@ -19,6 +19,12 @@ import {executeCoordinationTodoUpdate} from "../../loopx/control_plane/coordinat
 import {indexCoordinationProjection, prepareCoordinationProjectionCommit} from "../../loopx/control_plane/coordination/coordination_projection.ts";
 import {canonicalAuthoritySha256} from "../../loopx/control_plane/coordination/authority_store_codec.ts";
 import {productionScaleCoordinationFixture, PRODUCTION_SCALE_VALIDATION_DECLARATION} from "./production_scale_coordination_fixture.ts";
+import {resolveTestPython} from "../../scripts/test-python.mjs";
+
+// The CLI under test is the source checkout's own interpreter, never a bare
+// `python3` alias that may be an incompatible system interpreter.
+const executeFile = promisify(execFile);
+const PYTHON = resolveTestPython();
 
 async function loaded(store: AuthorityStore) {
   const head = await store.loadAuthority();
@@ -193,7 +199,7 @@ for (const provider of ["file", "sqlite"]) test(`${provider}: public CLI deliver
       expected_shadow_provider_revision: "fixture"}});
   assert.equal(fence.status, "applied", JSON.stringify(fence));
   const run = async (args: string[]) => {
-    const {stdout} = await promisify(execFile)("python3", ["-m", "loopx.cli", "--registry", registry,
+    const {stdout} = await executeFile(PYTHON, ["-m", "loopx.cli", "--registry", registry,
       "--runtime-root", f.root, "--format", "json", ...args],
       {env: {...process.env, PYTHONPATH: process.cwd()}, timeout: 60000, maxBuffer: 4 * 1024 * 1024});
     return JSON.parse(stdout);
@@ -221,7 +227,7 @@ for (const provider of ["file", "sqlite"]) test(`${provider}: public CLI deliver
   assert.equal((await loaded(f.store)).provider_revision, committed.provider_revision);
   assert.ok(["delivered", "current"].includes(prepared.projection_delivery), JSON.stringify(prepared));
   const projected = async () => {
-    const {stdout} = await promisify(execFile)("python3", ["-c",
+    const {stdout} = await executeFile(PYTHON, ["-c",
       "import json,sys; from pathlib import Path; from loopx.control_plane.todos.active_state_todo_parser import parse_todo_source; rows=parse_todo_source(Path(sys.argv[1]).read_text())[0]['agent']; print(json.dumps(next(r for r in rows if r['todo_id']==sys.argv[2])))",
       state, f.base.todo_id], {env: {...process.env, PYTHONPATH: process.cwd()}});
     return JSON.parse(stdout);

tests/control_plane_ts/test_python_runtime.test.ts

@@ -81,13 +81,25 @@ test("test and browser smokes may not introduce bare python or python3 subproces
   // incompatible interpreter), so direct launches, fallbacks and assigned
   // defaults must both route through resolveTestPython().
   const direct = /\b(?:spawn|spawnSync|execFile|execFileSync)\s*\(\s*["']python3?["']/;
+  // A promisified or aliased launcher starts the same bare alias, so the guard
+  // must see through the wrapper instead of accepting the indirection.
+  const launchers = "spawn|spawnSync|execFile|execFileSync";
+  const promisified = new RegExp(`\\b(?:promisify|util\\s*\\.\\s*promisify)\\s*\\(\\s*(?:${launchers})\\s*\\)\\s*\\(\\s*["']python3?["']`);
+  const aliasBinding = new RegExp(`\\b(?:const|let|var)\\s+(\\w+)\\s*=\\s*(?:promisify|util\\s*\\.\\s*promisify)\\s*\\(\\s*(?:${launchers})\\s*\\)`, "g");
+  const aliasedLaunch = (source: string): boolean => [...source.matchAll(aliasBinding)]
+    .map(match => new RegExp(`\\b${match[1]}\\s*\\(\\s*["']python3?["']`))
+    .some(pattern => pattern.test(source));
   const fallback = /(?:\?\?|\|\|)\s*["']python3?["']/;
   const assigned = /\b(?:const|let)\s+\w+\s*=\s*["']python3?["']/;
   const bare = JSON.stringify("python3");
   const barePython = JSON.stringify("python");
   assert.ok(direct.test(`spawn(${bare}, ["-m", "loopx.cli"])`));
   assert.ok(direct.test(`spawn(${barePython}, ["-m", "loopx.cli"])`));
   assert.ok(direct.test(`spawnSync(${barePython}, ["-c", "raise SystemExit(0)"])`));
+  assert.ok(promisified.test(`promisify(execFile)(${bare}, ["-m", "loopx.cli"])`));
+  assert.ok(promisified.test(`util.promisify(execFileSync)(${barePython}, [])`));
+  assert.ok(aliasedLaunch(`const run = promisify(execFile);\nrun(${bare}, ["-m", "loopx.cli"]);`));
+  assert.ok(aliasedLaunch(`const run = util.promisify(spawnSync);\nawait run(${barePython}, []);`));
   assert.ok(fallback.test(`process.env.LOOPX_TEST_PYTHON ?? ${bare}`));
   assert.ok(fallback.test(`process.env.LOOPX_TEST_PYTHON ?? ${barePython}`));
   assert.ok(fallback.test(`process.env.NEW_TEST_PYTHON || ${bare}`));
@@ -97,6 +109,10 @@ test("test and browser smokes may not introduce bare python or python3 subproces
   assert.ok(assigned.test(`const testInterpreter = ${bare}`));
   assert.equal(direct.test(`validation_command_argv: [${bare}, "-m", "pytest"]`), false);
   assert.equal(direct.test(`validation_command_argv: [${barePython}, "-m", "pytest"]`), false);
+  assert.equal(promisified.test(`promisify(execFile)(${JSON.stringify("/usr/bin/python3")}, [])`), false);
+  // A resolved interpreter or an unrelated helper argument is not a launch.
+  assert.equal(aliasedLaunch(`const run = promisify(execFile);\nrun(PYTHON, ["-m", "loopx.cli"]);`), false);
+  assert.equal(direct.test(`qualificationHelperArgv(${bare})`), false);
   // An absolute path or a versioned executable is a resolved interpreter, not a bare alias.
   assert.equal(direct.test(`spawnSync(${JSON.stringify("/usr/bin/python3")}, [])`), false);
   assert.equal(assigned.test(`const executable = ${JSON.stringify("/opt/loopx-qualification/bin/python")}`), false);
@@ -106,7 +122,8 @@ test("test and browser smokes may not introduce bare python or python3 subproces
       if (entry.isDirectory()) inspect(path);
       else if (/\.(?:cjs|js|mjs|mts|ts)$/.test(entry.name)) {
         const source = readFileSync(join(root, path), "utf8");
-        if (direct.test(source) || fallback.test(source) || assigned.test(source)) offenders.push(path);
+        if (direct.test(source) || promisified.test(source) || aliasedLaunch(source)
+          || fallback.test(source) || assigned.test(source)) offenders.push(path);
       }
     }
   }