[agentHits]

What:

• App names in application.real.test.ts carry CHECKOUT_ID, the first 8 chars
  of sha256(process.cwd()): real--- and real-nixpacks-.
• pull-request.yml adds an if: always() step to the test job that derives
  the same id from the apps/dokploy path and removes only the real-*-
  swarm services.
• test/setup.ts caps bcrypt cost at 4 for all tests (production code is unchanged), and the 30 s timeout added in ci: run owner pull request checks on the self-hosted mac mini #38 is dropped again.
  Why:
• Tests remove their own services, but a cancelled run (new push, timeout)
  skips that, and 0/1 services pile up on the Mac mini while swarm keeps
  trying to start them.
• Docker on the Mac mini is shared by all runners, so removing every real-*
  service would break a neighbouring PR's tests.
  Risks:
• If the tests ever change vitest's working directory, the ids diverge and
  the step simply removes nothing.
  Checks:
• Commands and results: printf <runner 2 apps/dokploy path> | shasum -a 256
  gives 6b7e0626, matching real-nixpacks-6b7e0626 from the CI log; grep picks
  only names with that id; xargs -r runs nothing on empty input; biome, tsc
  on the file and YAML parsing are clean.
• Limitations: cancelling a run mid-test was not exercised by hand.

🤖 Generated with Claude Code