wsServer.test.ts

import * as Http from "node:http";
import fs from "node:fs";
import os from "node:os";
import path from "node:path";

import * as NodeServices from "@effect/platform-node/NodeServices";
import { Effect, Exit, Layer, PlatformError, PubSub, Scope, Stream } from "effect";
import { describe, expect, it, afterEach, vi } from "vitest";
import { createServer } from "./wsServer";
import WebSocket from "ws";
import { deriveServerPaths, ServerConfig, type ServerConfigShape } from "./config";
import { makeServerProviderLayer, makeServerRuntimeServicesLayer } from "./serverLayers";
import { OrchestrationProjectionSnapshotQueryLive } from "./orchestration/Layers/ProjectionSnapshotQuery";
import { EnvironmentVariablesLive } from "./persistence/Services/EnvironmentVariables";

import {
  DEFAULT_TERMINAL_ID,
  EDITORS,
  EventId,
  ORCHESTRATION_WS_CHANNELS,
  ORCHESTRATION_WS_METHODS,
  ProviderItemId,
  ThreadId,
  TurnId,
  WS_CHANNELS,
  WS_METHODS,
  type WebSocketResponse,
  type ProviderRuntimeEvent,
  type ServerProviderStatus,
  type KeybindingsConfig,
  type ResolvedKeybindingsConfig,
  type WsPushChannel,
  type WsPushMessage,
  type WsPush,
} from "@okcode/contracts";
import { compileResolvedKeybindingRule, DEFAULT_KEYBINDINGS } from "./keybindings";
import type {
  TerminalClearInput,
  TerminalCloseInput,
  TerminalEvent,
  TerminalOpenInput,
  TerminalResizeInput,
  TerminalSessionSnapshot,
  TerminalWriteInput,
} from "@okcode/contracts";
import { TerminalManager, type TerminalManagerShape } from "./terminal/Services/Manager";
import { makeSqlitePersistenceLive, SqlitePersistenceMemory } from "./persistence/Layers/Sqlite";
import { SqlClient, SqlError } from "effect/unstable/sql";
import { ProviderService, type ProviderServiceShape } from "./provider/Services/ProviderService";
import { ProviderHealth, type ProviderHealthShape } from "./provider/Services/ProviderHealth";
import { ProviderRuntimeEventFeedLive } from "./provider/Layers/ProviderRuntimeEventFeed";
import {
  ProviderRuntimeEventFeed,
  type ProviderRuntimeEventFeedShape,
} from "./provider/Services/ProviderRuntimeEventFeed";
import { Open, type OpenShape } from "./open";
import { GitManager, type GitManagerShape } from "./git/Services/GitManager.ts";
import type { GitCoreShape } from "./git/Services/GitCore.ts";
import { GitCore } from "./git/Services/GitCore.ts";
import { GitActionExecutionError, GitCommandError } from "./git/Errors.ts";
import { MigrationError } from "@effect/sql-sqlite-bun/SqliteMigrator";
import { serverBuildInfo } from "./buildInfo";
import {
  ProjectionSnapshotQuery,
  type ProjectionSnapshotQueryShape,
} from "./orchestration/Services/ProjectionSnapshotQuery";
import { createAttachmentId } from "./attachmentStore";

const asEventId = (value: string): EventId => EventId.makeUnsafe(value);
const asProviderItemId = (value: string): ProviderItemId => ProviderItemId.makeUnsafe(value);
const asThreadId = (value: string): ThreadId => ThreadId.makeUnsafe(value);
const asTurnId = (value: string): TurnId => TurnId.makeUnsafe(value);

const defaultOpenService: OpenShape = {
  openBrowser: () => Effect.void,
  openInEditor: () => Effect.void,
  openInFileManager: () => Effect.void,
  revealInFileManager: () => Effect.void,
};

const defaultProviderStatuses: ReadonlyArray<ServerProviderStatus> = [
  {
    provider: "codex",
    status: "ready",
    available: true,
    authStatus: "authenticated",
    checkedAt: "2026-01-01T00:00:00.000Z",
  },
];

const defaultProviderHealthService: ProviderHealthShape = {
  getStatuses: Effect.succeed(defaultProviderStatuses),
};

const defaultCodexConfigSummary = {
  selectedModelProviderId: null,
  entries: [],
  parseError: null,
  detectedLocalBackends: {
    ollama: { reachable: false },
    lmstudio: { reachable: false },
  },
} as const;

const expectedServerBuildInfo = expect.objectContaining({
  surface: "server",
  version: serverBuildInfo.version,
});

class MockTerminalManager implements TerminalManagerShape {
  private readonly sessions = new Map<string, TerminalSessionSnapshot>();
  private readonly listeners = new Set<(event: TerminalEvent) => void>();

  private key(threadId: string, terminalId: string): string {
    return `${threadId}\u0000${terminalId}`;
  }

  emitEvent(event: TerminalEvent): void {
    for (const listener of this.listeners) {
      listener(event);
    }
  }

  subscriptionCount(): number {
    return this.listeners.size;
  }

  readonly open: TerminalManagerShape["open"] = (input: TerminalOpenInput) =>
    Effect.sync(() => {
      const now = new Date().toISOString();
      const terminalId = input.terminalId ?? DEFAULT_TERMINAL_ID;
      const snapshot: TerminalSessionSnapshot = {
        threadId: input.threadId,
        terminalId,
        cwd: input.cwd,
        status: "running",
        pid: 4242,
        history: "",
        exitCode: null,
        exitSignal: null,
        updatedAt: now,
      };
      this.sessions.set(this.key(input.threadId, terminalId), snapshot);
      queueMicrotask(() => {
        this.emitEvent({
          type: "started",
          threadId: input.threadId,
          terminalId,
          createdAt: now,
          snapshot,
        });
      });
      return snapshot;
    });

  readonly write: TerminalManagerShape["write"] = (input: TerminalWriteInput) =>
    Effect.sync(() => {
      const terminalId = input.terminalId ?? DEFAULT_TERMINAL_ID;
      const existing = this.sessions.get(this.key(input.threadId, terminalId));
      if (!existing) {
        throw new Error(`Unknown terminal thread: ${input.threadId}`);
      }
      queueMicrotask(() => {
        this.emitEvent({
          type: "output",
          threadId: input.threadId,
          terminalId,
          createdAt: new Date().toISOString(),
          data: input.data,
        });
      });
    });

  readonly resize: TerminalManagerShape["resize"] = (_input: TerminalResizeInput) => Effect.void;

  readonly clear: TerminalManagerShape["clear"] = (input: TerminalClearInput) =>
    Effect.sync(() => {
      const terminalId = input.terminalId ?? DEFAULT_TERMINAL_ID;
      queueMicrotask(() => {
        this.emitEvent({
          type: "cleared",
          threadId: input.threadId,
          terminalId,
          createdAt: new Date().toISOString(),
        });
      });
    });

  readonly restart: TerminalManagerShape["restart"] = (input: TerminalOpenInput) =>
    Effect.sync(() => {
      const now = new Date().toISOString();
      const terminalId = input.terminalId ?? DEFAULT_TERMINAL_ID;
      const snapshot: TerminalSessionSnapshot = {
        threadId: input.threadId,
        terminalId,
        cwd: input.cwd,
        status: "running",
        pid: 5252,
        history: "",
        exitCode: null,
        exitSignal: null,
        updatedAt: now,
      };
      this.sessions.set(this.key(input.threadId, terminalId), snapshot);
      queueMicrotask(() => {
        this.emitEvent({
          type: "restarted",
          threadId: input.threadId,
          terminalId,
          createdAt: now,
          snapshot,
        });
      });
      return snapshot;
    });

  readonly close: TerminalManagerShape["close"] = (input: TerminalCloseInput) =>
    Effect.sync(() => {
      if (input.terminalId) {
        this.sessions.delete(this.key(input.threadId, input.terminalId));
        return;
      }
      for (const key of this.sessions.keys()) {
        if (key.startsWith(`${input.threadId}\u0000`)) {
          this.sessions.delete(key);
        }
      }
    });

  readonly subscribe: TerminalManagerShape["subscribe"] = (listener) =>
    Effect.sync(() => {
      this.listeners.add(listener);
      return () => {
        this.listeners.delete(listener);
      };
    });

  readonly dispose: TerminalManagerShape["dispose"] = Effect.void;
}

// ---------------------------------------------------------------------------
// WebSocket test harness
//
// Incoming messages are split into two channels:
//   - pushChannel: server push envelopes (type === "push")
//   - responseChannel: request/response envelopes (have an "id" field)
//
// This means sendRequest never has to skip push messages and waitForPush
// never has to skip response messages, eliminating a class of ordering bugs.
// ---------------------------------------------------------------------------

interface MessageChannel<T> {
  queue: T[];
  waiters: Array<{
    resolve: (value: T) => void;
    reject: (error: Error) => void;
    timeoutId: ReturnType<typeof setTimeout> | null;
  }>;
}

interface SocketChannels {
  push: MessageChannel<WsPush>;
  response: MessageChannel<WebSocketResponse>;
}

const channelsBySocket = new WeakMap<WebSocket, SocketChannels>();

function enqueue<T>(channel: MessageChannel<T>, item: T) {
  const waiter = channel.waiters.shift();
  if (waiter) {
    if (waiter.timeoutId !== null) clearTimeout(waiter.timeoutId);
    waiter.resolve(item);
    return;
  }
  channel.queue.push(item);
}

function dequeue<T>(channel: MessageChannel<T>, timeoutMs: number): Promise<T> {
  const queued = channel.queue.shift();
  if (queued !== undefined) {
    return Promise.resolve(queued);
  }

  return new Promise((resolve, reject) => {
    const waiter = {
      resolve,
      reject,
      timeoutId: setTimeout(() => {
        const index = channel.waiters.indexOf(waiter);
        if (index >= 0) channel.waiters.splice(index, 1);
        reject(new Error(`Timed out waiting for WebSocket message after ${timeoutMs}ms`));
      }, timeoutMs) as ReturnType<typeof setTimeout>,
    };
    channel.waiters.push(waiter);
  });
}

function isWsPushEnvelope(message: unknown): message is WsPush {
  if (typeof message !== "object" || message === null) return false;
  if (!("type" in message) || !("channel" in message)) return false;
  return (message as { type?: unknown }).type === "push";
}

function asWebSocketResponse(message: unknown): WebSocketResponse | null {
  if (typeof message !== "object" || message === null) return null;
  if (!("id" in message)) return null;
  const id = (message as { id?: unknown }).id;
  if (typeof id !== "string") return null;
  return message as WebSocketResponse;
}

function connectWsOnce(port: number, token?: string): Promise<WebSocket> {
  return new Promise((resolve, reject) => {
    const query = token ? `?token=${encodeURIComponent(token)}` : "";
    const ws = new WebSocket(`ws://127.0.0.1:${port}/${query}`);
    const channels: SocketChannels = {
      push: { queue: [], waiters: [] },
      response: { queue: [], waiters: [] },
    };
    channelsBySocket.set(ws, channels);

    ws.on("message", (raw) => {
      const parsed = JSON.parse(String(raw));
      if (isWsPushEnvelope(parsed)) {
        enqueue(channels.push, parsed);
      } else {
        const response = asWebSocketResponse(parsed);
        if (response) {
          enqueue(channels.response, response);
        }
      }
    });

    ws.once("open", () => resolve(ws));
    ws.once("error", () => reject(new Error("WebSocket connection failed")));
  });
}

async function connectWs(port: number, token?: string, attempts = 5): Promise<WebSocket> {
  let lastError: unknown = new Error("WebSocket connection failed");

  for (let attempt = 0; attempt < attempts; attempt += 1) {
    try {
      return await connectWsOnce(port, token);
    } catch (error) {
      lastError = error;
      if (attempt < attempts - 1) {
        await new Promise((resolve) => setTimeout(resolve, 25));
      }
    }
  }

  throw lastError;
}

/** Connect and wait for the server.welcome push. Returns [ws, welcomeData]. */
async function connectAndAwaitWelcome(
  port: number,
  token?: string,
): Promise<[WebSocket, WsPushMessage<typeof WS_CHANNELS.serverWelcome>]> {
  const ws = await connectWs(port, token);
  const welcome = await waitForPush(ws, WS_CHANNELS.serverWelcome);
  return [ws, welcome];
}

async function sendRequest(
  ws: WebSocket,
  method: string,
  params?: unknown,
): Promise<WebSocketResponse> {
  const channels = channelsBySocket.get(ws);
  if (!channels) throw new Error("WebSocket not initialized");

  const id = crypto.randomUUID();
  const body =
    method === ORCHESTRATION_WS_METHODS.dispatchCommand
      ? { _tag: method, command: params }
      : params && typeof params === "object" && !Array.isArray(params)
        ? { _tag: method, ...(params as Record<string, unknown>) }
        : { _tag: method };
  ws.send(JSON.stringify({ id, body }));

  // Response channel only contains responses — no push filtering needed
  while (true) {
    const response = await dequeue(channels.response, 60_000);
    if (response.id === id || response.id === "unknown") {
      return response;
    }
  }
}

async function waitForPush<C extends WsPushChannel>(
  ws: WebSocket,
  channel: C,
  predicate?: (push: WsPushMessage<C>) => boolean,
  maxMessages = 120,
  idleTimeoutMs = 5_000,
): Promise<WsPushMessage<C>> {
  const channels = channelsBySocket.get(ws);
  if (!channels) throw new Error("WebSocket not initialized");

  for (let remaining = maxMessages; remaining > 0; remaining--) {
    const push = await dequeue(channels.push, idleTimeoutMs);
    if (push.channel !== channel) continue;
    const typed = push as WsPushMessage<C>;
    if (!predicate || predicate(typed)) return typed;
  }
  throw new Error(`Timed out waiting for push on ${channel}`);
}

async function rewriteKeybindingsAndWaitForPush(
  ws: WebSocket,
  keybindingsPath: string,
  contents: string,
  predicate: (push: WsPushMessage<typeof WS_CHANNELS.serverConfigUpdated>) => boolean,
  attempts = 3,
): Promise<WsPushMessage<typeof WS_CHANNELS.serverConfigUpdated>> {
  let lastError: unknown;
  for (let attempt = 0; attempt < attempts; attempt++) {
    fs.writeFileSync(keybindingsPath, contents, "utf8");
    try {
      return await waitForPush(ws, WS_CHANNELS.serverConfigUpdated, predicate, 20, 3_000);
    } catch (error) {
      lastError = error;
    }
  }
  throw lastError;
}

async function requestPath(
  port: number,
  requestPath: string,
): Promise<{ statusCode: number; body: string }> {
  return new Promise((resolve, reject) => {
    const req = Http.request(
      {
        hostname: "127.0.0.1",
        port,
        path: requestPath,
        method: "GET",
      },
      (res) => {
        const chunks: Buffer[] = [];
        res.on("data", (chunk) => {
          chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
        });
        res.on("end", () => {
          resolve({
            statusCode: res.statusCode ?? 0,
            body: Buffer.concat(chunks).toString("utf8"),
          });
        });
      },
    );
    req.once("error", reject);
    req.end();
  });
}

function compileKeybindings(bindings: KeybindingsConfig): ResolvedKeybindingsConfig {
  const resolved: Array<ResolvedKeybindingsConfig[number]> = [];
  for (const binding of bindings) {
    const compiled = compileResolvedKeybindingRule(binding);
    if (!compiled) {
      throw new Error(`Unexpected invalid keybinding in test setup: ${binding.command}`);
    }
    resolved.push(compiled);
  }
  return resolved;
}

const DEFAULT_RESOLVED_KEYBINDINGS = compileKeybindings([...DEFAULT_KEYBINDINGS]);
const VALID_EDITOR_IDS = new Set(EDITORS.map((editor) => editor.id));

function expectAvailableEditors(value: unknown): void {
  expect(Array.isArray(value)).toBe(true);
  for (const editorId of value as unknown[]) {
    expect(typeof editorId).toBe("string");
    expect(VALID_EDITOR_IDS.has(editorId as (typeof EDITORS)[number]["id"])).toBe(true);
  }
}

function ensureParentDir(filePath: string): void {
  fs.mkdirSync(path.dirname(filePath), { recursive: true });
}

function deriveServerPathsSync(baseDir: string, devUrl: URL | undefined) {
  return Effect.runSync(
    deriveServerPaths(baseDir, devUrl).pipe(Effect.provide(NodeServices.layer)),
  );
}

function makeWorkspaceFixture(name: string): { baseDir: string; cwd: string } {
  const baseDir = fs.mkdtempSync(path.join(os.tmpdir(), "okcode-ws-fixture-"));
  const cwd = path.join(baseDir, name);
  fs.mkdirSync(cwd, { recursive: true });
  return { baseDir, cwd };
}

describe("WebSocket Server", () => {
  let server: Http.Server | null = null;
  let serverScope: Scope.Closeable | null = null;
  let originalCodexHome: string | undefined;
  const connections: WebSocket[] = [];
  const tempDirs: string[] = [];

  function makeTempDir(prefix: string): string {
    const dir = fs.mkdtempSync(path.join(os.tmpdir(), prefix));
    tempDirs.push(dir);
    return dir;
  }

  async function createTestServer(
    options: {
      persistenceLayer?: Layer.Layer<
        SqlClient.SqlClient,
        SqlError.SqlError | MigrationError | PlatformError.PlatformError
      >;
      cwd?: string;
      autoBootstrapProjectFromCwd?: boolean;
      logWebSocketEvents?: boolean;
      devUrl?: string;
      authToken?: string;
      baseDir?: string;
      staticDir?: string;
      providerLayer?: Layer.Layer<ProviderService, never>;
      providerRuntimeEventFeed?: ProviderRuntimeEventFeedShape;
      providerHealth?: ProviderHealthShape;
      open?: OpenShape;
      gitManager?: GitManagerShape;
      gitCore?: Pick<GitCoreShape, "listBranches" | "initRepo" | "syncCurrentBranch">;
      terminalManager?: TerminalManagerShape;
      projectionSnapshotQuery?: ProjectionSnapshotQueryShape;
    } = {},
  ): Promise<Http.Server> {
    if (serverScope) {
      throw new Error("Test server is already running");
    }

    const baseDir = options.baseDir ?? makeTempDir("okcode-ws-base-");
    originalCodexHome = process.env.CODEX_HOME;
    const codexHome = path.join(baseDir, ".codex");
    fs.mkdirSync(codexHome, { recursive: true });
    process.env.CODEX_HOME = codexHome;
    const devUrl = options.devUrl ? new URL(options.devUrl) : undefined;
    const derivedPaths = deriveServerPathsSync(baseDir, devUrl);
    const cwd = options.cwd ?? path.join(baseDir, "project");
    fs.mkdirSync(cwd, { recursive: true });
    const scope = await Effect.runPromise(Scope.make("sequential"));
    const persistenceLayer = options.persistenceLayer ?? SqlitePersistenceMemory;
    const providerLayer = options.providerLayer ?? makeServerProviderLayer();
    const providerRuntimeEventFeedLayer = options.providerRuntimeEventFeed
      ? Layer.succeed(ProviderRuntimeEventFeed, options.providerRuntimeEventFeed)
      : ProviderRuntimeEventFeedLive;
    const openLayer = Layer.succeed(Open, options.open ?? defaultOpenService);
    const serverConfigLayer = Layer.succeed(ServerConfig, {
      mode: "web",
      port: 0,
      host: undefined,
      cwd,
      baseDir,
      ...derivedPaths,
      staticDir: options.staticDir,
      devUrl,
      noBrowser: true,
      authToken: options.authToken,
      autoBootstrapProjectFromCwd: options.autoBootstrapProjectFromCwd ?? false,
      logWebSocketEvents: options.logWebSocketEvents ?? Boolean(options.devUrl),
    } satisfies ServerConfigShape);
    const infrastructureLayer = providerLayer.pipe(
      Layer.provideMerge(persistenceLayer),
      Layer.provideMerge(providerRuntimeEventFeedLayer),
    );
    const projectionSnapshotQueryLayer = options.projectionSnapshotQuery
      ? Layer.succeed(ProjectionSnapshotQuery, options.projectionSnapshotQuery)
      : OrchestrationProjectionSnapshotQueryLive;
    const runtimeOverrides = Layer.mergeAll(
      Layer.succeed(ProviderHealth, options.providerHealth ?? defaultProviderHealthService),
      options.gitManager ? Layer.succeed(GitManager, options.gitManager) : Layer.empty,
      options.gitCore
        ? Layer.succeed(GitCore, options.gitCore as unknown as GitCoreShape)
        : Layer.empty,
      options.terminalManager
        ? Layer.succeed(TerminalManager, options.terminalManager)
        : Layer.empty,
      projectionSnapshotQueryLayer,
    );

    const runtimeLayer = Layer.merge(
      Layer.merge(
        makeServerRuntimeServicesLayer().pipe(Layer.provide(infrastructureLayer)),
        infrastructureLayer,
      ),
      runtimeOverrides,
    );
    const dependenciesLayer = Layer.empty.pipe(
      Layer.provideMerge(runtimeLayer),
      Layer.provideMerge(providerRuntimeEventFeedLayer),
      Layer.provideMerge(openLayer),
      Layer.provideMerge(serverConfigLayer),
      Layer.provideMerge(NodeServices.layer),
    );
    const runtimeServices = await Effect.runPromise(
      Layer.build(
        dependenciesLayer.pipe(
          Layer.provideMerge(EnvironmentVariablesLive),
          Layer.provideMerge(projectionSnapshotQueryLayer),
          Layer.provideMerge(serverConfigLayer),
          Layer.provideMerge(persistenceLayer),
        ),
      ).pipe(Scope.provide(scope)),
    );

    try {
      const runtime = await Effect.runPromise(
        createServer().pipe(Effect.provide(runtimeServices), Scope.provide(scope)),
      );
      serverScope = scope;
      return runtime;
    } catch (error) {
      await Effect.runPromise(Scope.close(scope, Exit.void));
      if (originalCodexHome !== undefined) {
        process.env.CODEX_HOME = originalCodexHome;
      } else {
        delete process.env.CODEX_HOME;
      }
      originalCodexHome = undefined;
      throw error;
    }
  }

  async function closeTestServer() {
    if (!serverScope) return;
    const scope = serverScope;
    serverScope = null;
    await Effect.runPromise(Scope.close(scope, Exit.void));
    if (originalCodexHome !== undefined) {
      process.env.CODEX_HOME = originalCodexHome;
    } else {
      delete process.env.CODEX_HOME;
    }
    originalCodexHome = undefined;
  }

  afterEach(async () => {
    for (const ws of connections) {
      ws.close();
    }
    connections.length = 0;
    await closeTestServer();
    server = null;
    for (const dir of tempDirs.splice(0, tempDirs.length)) {
      fs.rmSync(dir, { recursive: true, force: true });
    }
    vi.restoreAllMocks();
  });

  it("sends welcome message on connect", async () => {
    const { cwd } = makeWorkspaceFixture("project");
    server = await createTestServer({ cwd });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;
    expect(port).toBeGreaterThan(0);

    const [ws, welcome] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    expect(welcome.type).toBe("push");
    expect(welcome.data).toEqual({
      cwd,
      projectName: "project",
    });
  });

  it("serves persisted attachments from stateDir", async () => {
    const baseDir = makeTempDir("okcode-state-attachments-");
    const { attachmentsDir } = deriveServerPathsSync(baseDir, undefined);
    const attachmentPath = path.join(attachmentsDir, "thread-a", "message-a", "0.png");
    fs.mkdirSync(path.dirname(attachmentPath), { recursive: true });
    fs.writeFileSync(attachmentPath, Buffer.from("hello-attachment"));

    const { cwd } = makeWorkspaceFixture("project");
    server = await createTestServer({ cwd, baseDir });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;
    expect(port).toBeGreaterThan(0);

    const response = await fetch(`http://127.0.0.1:${port}/attachments/thread-a/message-a/0.png`);
    expect(response.status).toBe(200);
    expect(response.headers.get("content-type")).toContain("image/png");
    const bytes = Buffer.from(await response.arrayBuffer());
    expect(bytes).toEqual(Buffer.from("hello-attachment"));
  });

  it("serves persisted attachments by attachment id", async () => {
    const baseDir = makeTempDir("okcode-state-attachment-id-");
    const { attachmentsDir } = deriveServerPathsSync(baseDir, undefined);
    const attachmentId = createAttachmentId("thread-preview");
    if (!attachmentId) {
      throw new Error("Failed to create a safe test attachment id.");
    }
    const attachmentPath = path.join(attachmentsDir, `${attachmentId}.patch`);
    fs.mkdirSync(path.dirname(attachmentPath), { recursive: true });
    fs.writeFileSync(attachmentPath, Buffer.from("diff --git a/a.ts b/a.ts\n"));

    const { cwd } = makeWorkspaceFixture("project");
    server = await createTestServer({ cwd, baseDir });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;
    expect(port).toBeGreaterThan(0);

    const response = await fetch(`http://127.0.0.1:${port}/attachments/${attachmentId}`);
    expect(response.status).toBe(200);
    expect(response.headers.get("content-type")).toContain("text/x-diff");
    expect(await response.text()).toContain("diff --git");
  });

  it("serves persisted attachments for URL-encoded paths", async () => {
    const baseDir = makeTempDir("okcode-state-attachments-encoded-");
    const { attachmentsDir } = deriveServerPathsSync(baseDir, undefined);
    const attachmentPath = path.join(
      attachmentsDir,
      "thread%20folder",
      "message%20folder",
      "file%20name.png",
    );
    fs.mkdirSync(path.dirname(attachmentPath), { recursive: true });
    fs.writeFileSync(attachmentPath, Buffer.from("hello-encoded-attachment"));

    const { cwd } = makeWorkspaceFixture("project");
    server = await createTestServer({ cwd, baseDir });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;
    expect(port).toBeGreaterThan(0);

    const response = await fetch(
      `http://127.0.0.1:${port}/attachments/thread%20folder/message%20folder/file%20name.png`,
    );
    expect(response.status).toBe(200);
    expect(response.headers.get("content-type")).toContain("image/png");
    const bytes = Buffer.from(await response.arrayBuffer());
    expect(bytes).toEqual(Buffer.from("hello-encoded-attachment"));
  });

  it("serves static index for root path", async () => {
    const baseDir = makeTempDir("okcode-state-static-root-");
    const staticDir = makeTempDir("okcode-static-root-");
    fs.writeFileSync(path.join(staticDir, "index.html"), "<h1>static-root</h1>", "utf8");

    const { cwd } = makeWorkspaceFixture("project");
    server = await createTestServer({ cwd, baseDir, staticDir });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;
    expect(port).toBeGreaterThan(0);

    const response = await fetch(`http://127.0.0.1:${port}/`);
    expect(response.status).toBe(200);
    expect(await response.text()).toContain("static-root");
  });

  it("rejects static path traversal attempts", async () => {
    const baseDir = makeTempDir("okcode-state-static-traversal-");
    const staticDir = makeTempDir("okcode-static-traversal-");
    fs.writeFileSync(path.join(staticDir, "index.html"), "<h1>safe</h1>", "utf8");

    const { cwd } = makeWorkspaceFixture("project");
    server = await createTestServer({ cwd, baseDir, staticDir });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;
    expect(port).toBeGreaterThan(0);

    const response = await requestPath(port, "/..%2f..%2fetc/passwd");
    expect(response.statusCode).toBe(400);
    expect(response.body).toBe("Invalid static file path");
  });

  it("bootstraps the cwd project on startup when enabled", async () => {
    const { cwd } = makeWorkspaceFixture("bootstrap-workspace");
    server = await createTestServer({
      cwd,
      autoBootstrapProjectFromCwd: true,
    });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;
    expect(port).toBeGreaterThan(0);

    const [ws, welcome] = await connectAndAwaitWelcome(port);
    connections.push(ws);
    expect(welcome.data).toEqual(
      expect.objectContaining({
        cwd,
        projectName: "bootstrap-workspace",
        bootstrapProjectId: expect.any(String),
        bootstrapThreadId: expect.any(String),
      }),
    );

    const snapshotResponse = await sendRequest(ws, ORCHESTRATION_WS_METHODS.getSnapshot);
    expect(snapshotResponse.error).toBeUndefined();
    const snapshot = snapshotResponse.result as {
      projects: Array<{
        id: string;
        workspaceRoot: string;
        title: string;
        defaultModel: string | null;
      }>;
      threads: Array<{
        id: string;
        projectId: string;
        title: string;
        model: string;
        branch: string | null;
        worktreePath: string | null;
      }>;
    };
    const bootstrapProjectId = (welcome.data as { bootstrapProjectId?: string }).bootstrapProjectId;
    const bootstrapThreadId = (welcome.data as { bootstrapThreadId?: string }).bootstrapThreadId;
    expect(bootstrapProjectId).toBeDefined();
    expect(bootstrapThreadId).toBeDefined();

    expect(snapshot.projects).toEqual(
      expect.arrayContaining([
        expect.objectContaining({
          id: bootstrapProjectId,
          workspaceRoot: cwd,
          title: "bootstrap-workspace",
          defaultModel: "gpt-5-codex",
        }),
      ]),
    );
    expect(snapshot.threads).toEqual(
      expect.arrayContaining([
        expect.objectContaining({
          id: bootstrapThreadId,
          projectId: bootstrapProjectId,
          title: "New thread",
          model: "gpt-5-codex",
          branch: null,
          worktreePath: null,
        }),
      ]),
    );
  });

  it("includes bootstrap ids in welcome when cwd project and thread already exist", async () => {
    const baseDir = makeTempDir("okcode-state-bootstrap-existing-");
    const { dbPath } = deriveServerPathsSync(baseDir, undefined);
    const persistenceLayer = makeSqlitePersistenceLive(dbPath).pipe(
      Layer.provide(NodeServices.layer),
    );
    const { cwd } = makeWorkspaceFixture("bootstrap-existing");

    server = await createTestServer({
      cwd,
      baseDir,
      persistenceLayer,
      autoBootstrapProjectFromCwd: true,
    });
    let addr = server.address();
    let port = typeof addr === "object" && addr !== null ? addr.port : 0;
    expect(port).toBeGreaterThan(0);

    const [firstWs, firstWelcome] = await connectAndAwaitWelcome(port);
    connections.push(firstWs);
    const firstBootstrapProjectId = (firstWelcome.data as { bootstrapProjectId?: string })
      .bootstrapProjectId;
    const firstBootstrapThreadId = (firstWelcome.data as { bootstrapThreadId?: string })
      .bootstrapThreadId;
    expect(firstBootstrapProjectId).toBeDefined();
    expect(firstBootstrapThreadId).toBeDefined();

    firstWs.close();
    await closeTestServer();
    server = null;

    server = await createTestServer({
      cwd,
      baseDir,
      persistenceLayer,
      autoBootstrapProjectFromCwd: true,
    });
    addr = server.address();
    port = typeof addr === "object" && addr !== null ? addr.port : 0;
    expect(port).toBeGreaterThan(0);

    const [secondWs, secondWelcome] = await connectAndAwaitWelcome(port);
    connections.push(secondWs);
    expect(secondWelcome.data).toEqual(
      expect.objectContaining({
        cwd,
        projectName: "bootstrap-existing",
        bootstrapProjectId: firstBootstrapProjectId,
        bootstrapThreadId: firstBootstrapThreadId,
      }),
    );
  });

  it("logs outbound websocket push events in dev mode", async () => {
    const logSpy = vi.spyOn(console, "log").mockImplementation(() => {
      // Keep test output clean while verifying websocket logs.
    });

    const { cwd } = makeWorkspaceFixture("project");
    server = await createTestServer({
      cwd,
      devUrl: "http://localhost:5173",
    });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;
    expect(port).toBeGreaterThan(0);

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    expect(
      logSpy.mock.calls.some((call) => {
        const [message] = call;
        if (typeof message !== "string") return false;
        return (
          message.includes("[ws]") &&
          message.includes("outgoing push") &&
          message.includes(`channel="${WS_CHANNELS.serverWelcome}"`)
        );
      }),
    ).toBe(true);
  });

  it("responds to server.getConfig", async () => {
    const baseDir = makeTempDir("okcode-state-get-config-");
    const { keybindingsConfigPath: keybindingsPath } = deriveServerPathsSync(baseDir, undefined);
    ensureParentDir(keybindingsPath);
    fs.writeFileSync(keybindingsPath, "[]", "utf8");

    const { cwd } = makeWorkspaceFixture("workspace");
    server = await createTestServer({ cwd, baseDir });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const response = await sendRequest(ws, WS_METHODS.serverGetConfig);
    expect(response.error).toBeUndefined();
    expect(response.result).toEqual({
      cwd,
      keybindingsConfigPath: keybindingsPath,
      keybindings: DEFAULT_RESOLVED_KEYBINDINGS,
      issues: [],
      providers: defaultProviderStatuses,
      codexConfig: defaultCodexConfigSummary,
      availableEditors: expect.any(Array),
      buildInfo: expectedServerBuildInfo,
    });
    expectAvailableEditors((response.result as { availableEditors: unknown }).availableEditors);
  });

  it("refreshes provider statuses on each server.getConfig call", async () => {
    const { cwd } = makeWorkspaceFixture("workspace");
    let callCount = 0;
    const providerHealth: ProviderHealthShape = {
      getStatuses: Effect.sync(() => {
        callCount += 1;
        return [
          {
            provider: "codex",
            status: callCount <= 2 ? "ready" : "error",
            available: callCount <= 2,
            authStatus: callCount <= 2 ? "authenticated" : "unauthenticated",
            checkedAt: `2026-01-01T00:00:0${callCount}.000Z`,
          },
        ] satisfies ReadonlyArray<ServerProviderStatus>;
      }),
    };

    server = await createTestServer({ cwd, providerHealth });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const firstResponse = await sendRequest(ws, WS_METHODS.serverGetConfig);
    const secondResponse = await sendRequest(ws, WS_METHODS.serverGetConfig);
    const firstResult = firstResponse.result as
      | { readonly providers?: ReadonlyArray<{ readonly checkedAt?: string }> }
      | undefined;
    const secondResult = secondResponse.result as
      | { readonly providers?: ReadonlyArray<{ readonly checkedAt?: string }> }
      | undefined;
    const firstProvider = firstResult?.providers?.[0];
    const secondProvider = secondResult?.providers?.[0];

    expect(firstResponse.result).toEqual(
      expect.objectContaining({
        providers: expect.arrayContaining([
          expect.objectContaining({
            provider: "codex",
            status: "ready",
            available: true,
            authStatus: "authenticated",
          }),
        ]),
      }),
    );
    expect(secondResponse.result).toEqual(
      expect.objectContaining({
        providers: expect.arrayContaining([
          expect.objectContaining({
            provider: "codex",
            status: "error",
            available: false,
            authStatus: "unauthenticated",
          }),
        ]),
      }),
    );
    expect(firstProvider?.checkedAt).toEqual(expect.any(String));
    expect(secondProvider?.checkedAt).toEqual(expect.any(String));
    expect(firstProvider?.checkedAt).not.toEqual(secondProvider?.checkedAt);
  });

  it("bootstraps default keybindings file when missing", async () => {
    const baseDir = makeTempDir("okcode-state-bootstrap-keybindings-");
    const { keybindingsConfigPath: keybindingsPath } = deriveServerPathsSync(baseDir, undefined);
    expect(fs.existsSync(keybindingsPath)).toBe(false);

    const { cwd } = makeWorkspaceFixture("workspace");
    server = await createTestServer({ cwd, baseDir });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const response = await sendRequest(ws, WS_METHODS.serverGetConfig);
    expect(response.error).toBeUndefined();
    expect(response.result).toEqual({
      cwd,
      keybindingsConfigPath: keybindingsPath,
      keybindings: DEFAULT_RESOLVED_KEYBINDINGS,
      issues: [],
      providers: defaultProviderStatuses,
      codexConfig: defaultCodexConfigSummary,
      availableEditors: expect.any(Array),
      buildInfo: expectedServerBuildInfo,
    });
    expectAvailableEditors((response.result as { availableEditors: unknown }).availableEditors);

    const persistedConfig = JSON.parse(
      fs.readFileSync(keybindingsPath, "utf8"),
    ) as KeybindingsConfig;
    expect(persistedConfig).toEqual(DEFAULT_KEYBINDINGS);
  });

  it("falls back to defaults and reports malformed keybindings config issues", async () => {
    const baseDir = makeTempDir("okcode-state-malformed-keybindings-");
    const { keybindingsConfigPath: keybindingsPath } = deriveServerPathsSync(baseDir, undefined);
    ensureParentDir(keybindingsPath);
    fs.writeFileSync(keybindingsPath, "{ not-json", "utf8");

    const { cwd } = makeWorkspaceFixture("workspace");
    server = await createTestServer({ cwd, baseDir });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const response = await sendRequest(ws, WS_METHODS.serverGetConfig);
    expect(response.error).toBeUndefined();
    expect(response.result).toEqual({
      cwd,
      keybindingsConfigPath: keybindingsPath,
      keybindings: DEFAULT_RESOLVED_KEYBINDINGS,
      issues: [
        {
          kind: "keybindings.malformed-config",
          message: expect.stringContaining("expected JSON array"),
        },
      ],
      providers: defaultProviderStatuses,
      codexConfig: defaultCodexConfigSummary,
      availableEditors: expect.any(Array),
      buildInfo: expectedServerBuildInfo,
    });
    expectAvailableEditors((response.result as { availableEditors: unknown }).availableEditors);
    expect(fs.readFileSync(keybindingsPath, "utf8")).toBe("{ not-json");
  });

  it("ignores invalid keybinding entries but keeps valid entries and reports issues", async () => {
    const baseDir = makeTempDir("okcode-state-partial-invalid-keybindings-");
    const { keybindingsConfigPath: keybindingsPath } = deriveServerPathsSync(baseDir, undefined);
    ensureParentDir(keybindingsPath);
    fs.writeFileSync(
      keybindingsPath,
      JSON.stringify([
        { key: "mod+j", command: "terminal.toggle" },
        { key: "mod+shift+d+o", command: "terminal.new" },
        { key: "mod+x", command: "not-a-real-command" },
      ]),
      "utf8",
    );

    const { cwd } = makeWorkspaceFixture("workspace");
    server = await createTestServer({ cwd, baseDir });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const response = await sendRequest(ws, WS_METHODS.serverGetConfig);
    expect(response.error).toBeUndefined();
    const result = response.result as {
      cwd: string;
      keybindingsConfigPath: string;
      keybindings: ResolvedKeybindingsConfig;
      issues: Array<{ kind: string; index?: number; message: string }>;
      providers: ReadonlyArray<ServerProviderStatus>;
      availableEditors: unknown;
    };
    expect(result.cwd).toBe(cwd);
    expect(result.keybindingsConfigPath).toBe(keybindingsPath);
    expect(result.issues).toEqual([
      {
        kind: "keybindings.invalid-entry",
        index: 1,
        message: expect.any(String),
      },
      {
        kind: "keybindings.invalid-entry",
        index: 2,
        message: expect.any(String),
      },
    ]);
    const expectedTerminalToggle = compileResolvedKeybindingRule({
      key: "mod+j",
      command: "terminal.toggle",
    });
    expect(expectedTerminalToggle).not.toBeNull();
    expect(result.keybindings.filter((entry) => entry.command === "terminal.toggle")).toEqual([
      expectedTerminalToggle,
    ]);
    expect(result.keybindings.some((entry) => entry.command === "terminal.new")).toBe(true);
    expect(result.providers).toEqual(defaultProviderStatuses);
    expectAvailableEditors(result.availableEditors);
  });

  it("pushes server.configUpdated issues when keybindings file changes", async () => {
    const baseDir = makeTempDir("okcode-state-keybindings-watch-");
    const { keybindingsConfigPath: keybindingsPath } = deriveServerPathsSync(baseDir, undefined);
    ensureParentDir(keybindingsPath);
    fs.writeFileSync(keybindingsPath, "[]", "utf8");

    const { cwd } = makeWorkspaceFixture("workspace");
    server = await createTestServer({ cwd, baseDir });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const malformedPush = await rewriteKeybindingsAndWaitForPush(
      ws,
      keybindingsPath,
      "{ not-json",
      (push) =>
        Array.isArray(push.data.issues) &&
        Boolean(push.data.issues[0]) &&
        push.data.issues[0]!.kind === "keybindings.malformed-config",
    );
    expect(malformedPush.data).toEqual({
      issues: [{ kind: "keybindings.malformed-config", message: expect.any(String) }],
      providers: defaultProviderStatuses,
    });

    const successPush = await rewriteKeybindingsAndWaitForPush(
      ws,
      keybindingsPath,
      "[]",
      (push) => Array.isArray(push.data.issues) && push.data.issues.length === 0,
    );
    expect(successPush.data).toEqual({ issues: [], providers: defaultProviderStatuses });
  });

  it("falls back to last known provider statuses when a later refresh fails", async () => {
    const baseDir = makeTempDir("okcode-state-provider-status-fallback-");
    const { keybindingsConfigPath: keybindingsPath } = deriveServerPathsSync(baseDir, undefined);
    ensureParentDir(keybindingsPath);
    fs.writeFileSync(keybindingsPath, "[]", "utf8");

    const { cwd } = makeWorkspaceFixture("workspace");
    let callCount = 0;
    const liveStatuses: ReadonlyArray<ServerProviderStatus> = [
      {
        provider: "codex",
        status: "ready",
        available: true,
        authStatus: "authenticated",
        checkedAt: "2026-01-01T00:00:01.000Z",
      },
    ];
    const providerHealth: ProviderHealthShape = {
      getStatuses: Effect.suspend(() => {
        callCount += 1;
        if (callCount <= 2) {
          return Effect.succeed(liveStatuses);
        }
        return Effect.fail(new Error("provider health probe failed")) as unknown as Effect.Effect<
          ReadonlyArray<ServerProviderStatus>,
          never
        >;
      }),
    };

    server = await createTestServer({ cwd, baseDir, providerHealth });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const firstResponse = await sendRequest(ws, WS_METHODS.serverGetConfig);
    expect(firstResponse.result).toEqual(expect.objectContaining({ providers: liveStatuses }));

    const malformedPush = await rewriteKeybindingsAndWaitForPush(
      ws,
      keybindingsPath,
      "{ not-json",
      (push) =>
        Array.isArray(push.data.issues) &&
        Boolean(push.data.issues[0]) &&
        push.data.issues[0]!.kind === "keybindings.malformed-config",
    );

    expect(malformedPush.data).toEqual({
      issues: [{ kind: "keybindings.malformed-config", message: expect.any(String) }],
      providers: liveStatuses,
    });
  });

  it("routes shell.openInEditor through the injected open service", async () => {
    const { cwd } = makeWorkspaceFixture("workspace");
    const openCalls: Array<{ cwd: string; editor: string }> = [];
    const openService: OpenShape = {
      openBrowser: () => Effect.void,
      openInEditor: (input) => {
        openCalls.push({ cwd: input.cwd, editor: input.editor });
        return Effect.void;
      },
      openInFileManager: () => Effect.void,
      revealInFileManager: () => Effect.void,
    };

    server = await createTestServer({ cwd, open: openService });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const response = await sendRequest(ws, WS_METHODS.shellOpenInEditor, {
      cwd,
      editor: "cursor",
    });
    expect(response.error).toBeUndefined();
    expect(openCalls).toEqual([{ cwd, editor: "cursor" }]);
  });

  it("routes shell.openInFileManager through the injected open service", async () => {
    const { cwd } = makeWorkspaceFixture("workspace");
    const openCalls: string[] = [];
    const openService: OpenShape = {
      openBrowser: () => Effect.void,
      openInEditor: () => Effect.void,
      openInFileManager: (input) => {
        openCalls.push(input.path);
        return Effect.void;
      },
      revealInFileManager: () => Effect.void,
    };

    server = await createTestServer({ cwd, open: openService });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const response = await sendRequest(ws, WS_METHODS.shellOpenInFileManager, {
      path: path.join(cwd, "src"),
    });
    expect(response.error).toBeUndefined();
    expect(openCalls).toEqual([path.join(cwd, "src")]);
  });

  it("routes shell.revealInFileManager through the injected open service", async () => {
    const { cwd } = makeWorkspaceFixture("workspace");
    const revealCalls: string[] = [];
    const openService: OpenShape = {
      openBrowser: () => Effect.void,
      openInEditor: () => Effect.void,
      openInFileManager: () => Effect.void,
      revealInFileManager: (input) => {
        revealCalls.push(input.path);
        return Effect.void;
      },
    };

    server = await createTestServer({ cwd, open: openService });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const response = await sendRequest(ws, WS_METHODS.shellRevealInFileManager, {
      path: path.join(cwd, "src", "index.ts"),
    });
    expect(response.error).toBeUndefined();
    expect(revealCalls).toEqual([path.join(cwd, "src", "index.ts")]);
  });

  it("reads keybindings from the configured state directory", async () => {
    const baseDir = makeTempDir("okcode-state-keybindings-");
    const { keybindingsConfigPath: keybindingsPath } = deriveServerPathsSync(baseDir, undefined);
    ensureParentDir(keybindingsPath);
    fs.writeFileSync(
      keybindingsPath,
      JSON.stringify([
        { key: "cmd+j", command: "terminal.toggle" },
        { key: "mod+d", command: "terminal.split", when: "terminalFocus" },
        { key: "mod+n", command: "terminal.new", when: "terminalFocus" },
      ]),
      "utf8",
    );
    const { cwd } = makeWorkspaceFixture("workspace");
    server = await createTestServer({ cwd, baseDir });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const response = await sendRequest(ws, WS_METHODS.serverGetConfig);
    expect(response.error).toBeUndefined();
    const persistedConfig = JSON.parse(
      fs.readFileSync(keybindingsPath, "utf8"),
    ) as KeybindingsConfig;
    expect(response.result).toEqual({
      cwd,
      keybindingsConfigPath: keybindingsPath,
      keybindings: compileKeybindings(persistedConfig),
      issues: [],
      providers: defaultProviderStatuses,
      codexConfig: defaultCodexConfigSummary,
      availableEditors: expect.any(Array),
      buildInfo: expectedServerBuildInfo,
    });
    expectAvailableEditors((response.result as { availableEditors: unknown }).availableEditors);
  });

  it("upserts keybinding rules and updates cached server config", async () => {
    const baseDir = makeTempDir("okcode-state-upsert-keybinding-");
    const { keybindingsConfigPath: keybindingsPath } = deriveServerPathsSync(baseDir, undefined);
    ensureParentDir(keybindingsPath);
    fs.writeFileSync(
      keybindingsPath,
      JSON.stringify([{ key: "mod+j", command: "terminal.toggle" }]),
      "utf8",
    );

    const { cwd } = makeWorkspaceFixture("workspace");
    server = await createTestServer({ cwd, baseDir });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const upsertResponse = await sendRequest(ws, WS_METHODS.serverUpsertKeybinding, {
      key: "mod+shift+r",
      command: "script.run-tests.run",
    });
    expect(upsertResponse.error).toBeUndefined();
    const persistedConfig = JSON.parse(
      fs.readFileSync(keybindingsPath, "utf8"),
    ) as KeybindingsConfig;
    const persistedCommands = new Set(persistedConfig.map((entry) => entry.command));
    for (const defaultRule of DEFAULT_KEYBINDINGS) {
      expect(persistedCommands.has(defaultRule.command)).toBe(true);
    }
    expect(persistedCommands.has("script.run-tests.run")).toBe(true);
    expect(upsertResponse.result).toEqual({
      keybindings: compileKeybindings(persistedConfig),
      issues: [],
    });

    const configResponse = await sendRequest(ws, WS_METHODS.serverGetConfig);
    expect(configResponse.error).toBeUndefined();
    expect(configResponse.result).toEqual({
      cwd,
      keybindingsConfigPath: keybindingsPath,
      keybindings: compileKeybindings(persistedConfig),
      issues: [],
      providers: defaultProviderStatuses,
      codexConfig: defaultCodexConfigSummary,
      availableEditors: expect.any(Array),
      buildInfo: expectedServerBuildInfo,
    });
    expectAvailableEditors(
      (configResponse.result as { availableEditors: unknown }).availableEditors,
    );
  });

  it("returns error for unknown methods", async () => {
    const { cwd } = makeWorkspaceFixture("test");
    server = await createTestServer({ cwd });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const response = await sendRequest(ws, "nonexistent.method");
    expect(response.error).toBeDefined();
    expect(response.error!.message).toContain("Invalid request format");
  });

  it("returns error when requesting turn diff for unknown thread", async () => {
    const { cwd } = makeWorkspaceFixture("test");
    server = await createTestServer({ cwd });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const response = await sendRequest(ws, ORCHESTRATION_WS_METHODS.getTurnDiff, {
      threadId: "thread-missing",
      fromTurnCount: 1,
      toTurnCount: 2,
    });
    expect(response.result).toBeUndefined();
    expect(response.error?.message).toContain("Thread 'thread-missing' not found.");
  });

  it("returns error when requesting turn diff with an inverted range", async () => {
    const { cwd } = makeWorkspaceFixture("test");
    server = await createTestServer({ cwd });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const response = await sendRequest(ws, ORCHESTRATION_WS_METHODS.getTurnDiff, {
      threadId: "thread-any",
      fromTurnCount: 2,
      toTurnCount: 1,
    });
    expect(response.result).toBeUndefined();
    expect(response.error?.message).toContain(
      "fromTurnCount must be less than or equal to toTurnCount",
    );
  });

  it("returns error when requesting full thread diff for unknown thread", async () => {
    const { cwd } = makeWorkspaceFixture("test");
    server = await createTestServer({ cwd });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const response = await sendRequest(ws, ORCHESTRATION_WS_METHODS.getFullThreadDiff, {
      threadId: "thread-missing",
      toTurnCount: 2,
    });
    expect(response.result).toBeUndefined();
    expect(response.error?.message).toContain("Thread 'thread-missing' not found.");
  });

  it("returns retryable error when requested turn exceeds current checkpoint turn count", async () => {
    const { cwd } = makeWorkspaceFixture("test");
    server = await createTestServer({ cwd });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const workspaceRoot = makeTempDir("okcode-ws-diff-project-");
    const createdAt = new Date().toISOString();
    const createProjectResponse = await sendRequest(ws, ORCHESTRATION_WS_METHODS.dispatchCommand, {
      type: "project.create",
      commandId: "cmd-diff-project-create",
      projectId: "project-diff",
      title: "Diff Project",
      workspaceRoot,
      defaultModel: "gpt-5-codex",
      createdAt,
    });
    expect(createProjectResponse.error).toBeUndefined();
    const createThreadResponse = await sendRequest(ws, ORCHESTRATION_WS_METHODS.dispatchCommand, {
      type: "thread.create",
      commandId: "cmd-diff-thread-create",
      threadId: "thread-diff",
      projectId: "project-diff",
      title: "Diff Thread",
      model: "gpt-5-codex",
      runtimeMode: "full-access",
      interactionMode: "chat",
      branch: null,
      worktreePath: null,
      createdAt,
    });
    expect(createThreadResponse.error).toBeUndefined();

    const response = await sendRequest(ws, ORCHESTRATION_WS_METHODS.getTurnDiff, {
      threadId: "thread-diff",
      fromTurnCount: 0,
      toTurnCount: 1,
    });
    expect(response.result).toBeUndefined();
    expect(response.error?.message).toContain("exceeds current turn count");
  });

  it("keeps orchestration domain push behavior for provider runtime events", async () => {
    const runtimeEventPubSub = Effect.runSync(PubSub.unbounded<ProviderRuntimeEvent>());
    const providerRuntimeEventFeed: ProviderRuntimeEventFeedShape = {
      publish: (event) => PubSub.publish(runtimeEventPubSub, event).pipe(Effect.asVoid),
      subscribeWithReplay: () => Stream.fromPubSub(runtimeEventPubSub),
    };
    const { cwd } = makeWorkspaceFixture("test");
    const emitRuntimeEvent = (event: ProviderRuntimeEvent) => {
      Effect.runSync(providerRuntimeEventFeed.publish(event));
    };
    const unsupported = () => Effect.die(new Error("Unsupported provider call in test")) as never;
    const providerService: ProviderServiceShape = {
      startSession: (threadId) =>
        Effect.succeed({
          provider: "codex",
          status: "ready",
          runtimeMode: "full-access",
          threadId,
          createdAt: new Date().toISOString(),
          updatedAt: new Date().toISOString(),
        }),
      sendTurn: ({ threadId }) =>
        Effect.succeed({
          threadId,
          turnId: asTurnId("provider-turn-1"),
        }),
      interruptTurn: () => unsupported(),
      respondToRequest: () => unsupported(),
      respondToUserInput: () => unsupported(),
      stopSession: () => unsupported(),
      listSessions: () => Effect.succeed([]),
      getCapabilities: () => Effect.succeed({ sessionModelSwitch: "in-session" }),
      rollbackConversation: () => unsupported(),
      streamEvents: Stream.empty,
    };
    const providerLayer = Layer.succeed(ProviderService, providerService);

    server = await createTestServer({
      cwd,
      providerLayer,
      providerRuntimeEventFeed: providerRuntimeEventFeed,
    });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const workspaceRoot = makeTempDir("okcode-ws-project-");
    const createdAt = new Date().toISOString();
    const createProjectResponse = await sendRequest(ws, ORCHESTRATION_WS_METHODS.dispatchCommand, {
      type: "project.create",
      commandId: "cmd-ws-project-create",
      projectId: "project-1",
      title: "WS Project",
      workspaceRoot,
      defaultModel: "gpt-5-codex",
      createdAt,
    });
    expect(createProjectResponse.error).toBeUndefined();
    const createThreadResponse = await sendRequest(ws, ORCHESTRATION_WS_METHODS.dispatchCommand, {
      type: "thread.create",
      commandId: "cmd-ws-runtime-thread-create",
      threadId: "thread-1",
      projectId: "project-1",
      title: "Thread 1",
      model: "gpt-5-codex",
      runtimeMode: "full-access",
      interactionMode: "chat",
      branch: null,
      worktreePath: null,
      createdAt,
    });
    expect(createThreadResponse.error).toBeUndefined();

    const startTurnResponse = await sendRequest(ws, ORCHESTRATION_WS_METHODS.dispatchCommand, {
      type: "thread.turn.start",
      commandId: "cmd-ws-runtime-turn-start",
      threadId: "thread-1",
      message: {
        messageId: "msg-ws-runtime-1",
        role: "user",
        text: "hello",
        attachments: [],
      },
      assistantDeliveryMode: "streaming",
      runtimeMode: "approval-required",
      interactionMode: "chat",
      createdAt,
    });
    expect(startTurnResponse.error).toBeUndefined();

    await waitForPush(ws, ORCHESTRATION_WS_CHANNELS.domainEvent, (push) => {
      const event = push.data as { type?: string };
      return event.type === "thread.session-set";
    });

    emitRuntimeEvent({
      type: "turn.started",
      eventId: asEventId("evt-ws-runtime-turn-started"),
      provider: "codex",
      threadId: asThreadId("thread-1"),
      createdAt: new Date().toISOString(),
      turnId: asTurnId("provider-turn-1"),
    } as unknown as ProviderRuntimeEvent);

    await waitForPush(ws, ORCHESTRATION_WS_CHANNELS.domainEvent, (push) => {
      const event = push.data as {
        type?: string;
        payload?: { session?: { activeTurnId?: string } };
      };
      return (
        event.type === "thread.session-set" &&
        event.payload?.session?.activeTurnId === "provider-turn-1"
      );
    });

    emitRuntimeEvent({
      type: "content.delta",
      eventId: asEventId("evt-ws-runtime-message-delta"),
      provider: "codex",
      threadId: asThreadId("thread-1"),
      createdAt: new Date().toISOString(),
      turnId: asTurnId("provider-turn-1"),
      itemId: asProviderItemId("item-1"),
      payload: {
        streamKind: "assistant_text",
        delta: "hello from runtime",
      },
    } as unknown as ProviderRuntimeEvent);

    const streamedPush = await waitForPush(ws, ORCHESTRATION_WS_CHANNELS.domainEvent, (push) => {
      const event = push.data as {
        type?: string;
        payload?: { messageId?: string; text?: string; streaming?: boolean };
      };
      return (
        event.type === "thread.message-sent" &&
        event.payload?.messageId === "assistant:item-1" &&
        event.payload?.streaming === true
      );
    });

    const streamedEvent = streamedPush.data as {
      type: string;
      payload: { messageId: string; text: string; streaming: boolean };
    };
    expect(streamedEvent.type).toBe("thread.message-sent");
    expect(streamedEvent.payload.messageId).toBe("assistant:item-1");
    expect(streamedEvent.payload.text).toBe("hello from runtime");
    expect(streamedEvent.payload.streaming).toBe(true);

    emitRuntimeEvent({
      type: "item.completed",
      eventId: asEventId("evt-ws-runtime-message-complete"),
      provider: "codex",
      threadId: asThreadId("thread-1"),
      createdAt: new Date().toISOString(),
      turnId: asTurnId("provider-turn-1"),
      itemId: asProviderItemId("item-1"),
      payload: {
        itemType: "assistant_message",
        status: "completed",
      },
    } as unknown as ProviderRuntimeEvent);

    const completedPush = await waitForPush(ws, ORCHESTRATION_WS_CHANNELS.domainEvent, (push) => {
      const event = push.data as {
        type?: string;
        payload?: { messageId?: string; streaming?: boolean };
      };
      return (
        event.type === "thread.message-sent" &&
        event.payload?.messageId === "assistant:item-1" &&
        event.payload?.streaming === false
      );
    });

    const completedEvent = completedPush.data as {
      type: string;
      payload: { messageId: string; text: string; streaming: boolean };
    };
    expect(completedEvent.type).toBe("thread.message-sent");
    expect(completedEvent.payload.messageId).toBe("assistant:item-1");
    expect(completedEvent.payload.text).toBe("");
    expect(completedEvent.payload.streaming).toBe(false);
  });

  it("routes terminal RPC methods and broadcasts terminal events", async () => {
    const cwd = makeTempDir("okcode-ws-terminal-cwd-");
    const terminalManager = new MockTerminalManager();
    const { cwd: workspaceCwd } = makeWorkspaceFixture("test");
    server = await createTestServer({
      cwd: workspaceCwd,
      terminalManager,
    });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const open = await sendRequest(ws, WS_METHODS.terminalOpen, {
      threadId: "thread-1",
      cwd,
      cols: 100,
      rows: 24,
    });
    expect(open.error).toBeUndefined();
    expect((open.result as TerminalSessionSnapshot).threadId).toBe("thread-1");
    expect((open.result as TerminalSessionSnapshot).terminalId).toBe(DEFAULT_TERMINAL_ID);

    const write = await sendRequest(ws, WS_METHODS.terminalWrite, {
      threadId: "thread-1",
      data: "echo hello\n",
    });
    expect(write.error).toBeUndefined();

    const resize = await sendRequest(ws, WS_METHODS.terminalResize, {
      threadId: "thread-1",
      cols: 120,
      rows: 30,
    });
    expect(resize.error).toBeUndefined();

    const clear = await sendRequest(ws, WS_METHODS.terminalClear, {
      threadId: "thread-1",
    });
    expect(clear.error).toBeUndefined();

    const restart = await sendRequest(ws, WS_METHODS.terminalRestart, {
      threadId: "thread-1",
      cwd,
      cols: 120,
      rows: 30,
    });
    expect(restart.error).toBeUndefined();

    const close = await sendRequest(ws, WS_METHODS.terminalClose, {
      threadId: "thread-1",
      deleteHistory: true,
    });
    expect(close.error).toBeUndefined();

    const manualEvent: TerminalEvent = {
      type: "output",
      threadId: "thread-1",
      terminalId: DEFAULT_TERMINAL_ID,
      createdAt: new Date().toISOString(),
      data: "manual test output\n",
    };
    terminalManager.emitEvent(manualEvent);

    const push = await waitForPush(
      ws,
      WS_CHANNELS.terminalEvent,
      (candidate) => (candidate.data as TerminalEvent).type === "output",
    );
    expect(push.type).toBe("push");
    expect(push.channel).toBe(WS_CHANNELS.terminalEvent);
  });

  it("opens and restarts terminals without touching the full snapshot query", async () => {
    const cwd = makeTempDir("okcode-ws-terminal-fast-path-");
    const terminalManager = new MockTerminalManager();
    const { cwd: workspaceCwd } = makeWorkspaceFixture("terminal-fast-path");
    const projectionSnapshotQuery: ProjectionSnapshotQueryShape = {
      getSnapshot: () =>
        Effect.die(new Error("terminal fast path should not call getSnapshot on open/restart")),
    };
    server = await createTestServer({
      cwd: workspaceCwd,
      terminalManager,
      projectionSnapshotQuery,
    });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const open = await sendRequest(ws, WS_METHODS.terminalOpen, {
      threadId: "thread-fast-path",
      cwd,
      cols: 100,
      rows: 24,
      env: { TEST_FAST_PATH: "open" },
    });
    expect(open.error).toBeUndefined();
    expect((open.result as TerminalSessionSnapshot).status).toBe("running");

    const restart = await sendRequest(ws, WS_METHODS.terminalRestart, {
      threadId: "thread-fast-path",
      cwd,
      terminalId: DEFAULT_TERMINAL_ID,
      cols: 120,
      rows: 30,
      env: { TEST_FAST_PATH: "restart" },
    });
    expect(restart.error).toBeUndefined();
    expect((restart.result as TerminalSessionSnapshot).status).toBe("running");
  });

  it("detaches terminal event listener on stop for injected manager", async () => {
    const terminalManager = new MockTerminalManager();
    const { cwd } = makeWorkspaceFixture("test");
    server = await createTestServer({
      cwd,
      terminalManager,
    });

    expect(terminalManager.subscriptionCount()).toBe(1);

    await closeTestServer();
    server = null;

    expect(terminalManager.subscriptionCount()).toBe(0);
  });

  it("returns validation errors for invalid terminal open params", async () => {
    const { cwd } = makeWorkspaceFixture("test");
    server = await createTestServer({ cwd });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const response = await sendRequest(ws, WS_METHODS.terminalOpen, {
      threadId: "",
      cwd: "",
      cols: 1,
      rows: 1,
    });
    expect(response.error).toBeDefined();
  });

  it("handles invalid JSON gracefully", async () => {
    const { cwd } = makeWorkspaceFixture("test");
    server = await createTestServer({ cwd });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    // Send garbage
    ws.send("not json at all");

    // Error response goes to the response channel
    const channels = channelsBySocket.get(ws)!;
    let response: WebSocketResponse | null = null;
    for (let attempt = 0; attempt < 5; attempt += 1) {
      const message = await dequeue(channels.response, 5_000);
      if (message.id === "unknown") {
        response = message;
        break;
      }
      if (message.error) {
        response = message;
        break;
      }
    }
    expect(response).toBeDefined();
    expect(response!.error).toBeDefined();
    expect(response!.error!.message).toContain("Invalid request format");
  });

  it("catches websocket message handler rejections and keeps the socket usable", async () => {
    const unhandledRejections: unknown[] = [];
    const onUnhandledRejection = (reason: unknown) => {
      unhandledRejections.push(reason);
    };
    process.on("unhandledRejection", onUnhandledRejection);

    const brokenOpenService: OpenShape = {
      openBrowser: () => Effect.void,
      openInEditor: () =>
        Effect.sync(() => BigInt(1)).pipe(Effect.map((result) => result as unknown as void)),
      openInFileManager: () => Effect.void,
      revealInFileManager: () => Effect.void,
    };
    const { cwd } = makeWorkspaceFixture("test");

    try {
      server = await createTestServer({ cwd, open: brokenOpenService });
      const addr = server.address();
      const port = typeof addr === "object" && addr !== null ? addr.port : 0;

      const [ws] = await connectAndAwaitWelcome(port);
      connections.push(ws);

      ws.send(
        JSON.stringify({
          id: "req-broken-open",
          body: {
            _tag: WS_METHODS.shellOpenInEditor,
            cwd: "/tmp",
            editor: "cursor",
          },
        }),
      );

      await new Promise((resolve) => setTimeout(resolve, 50));
      expect(unhandledRejections).toHaveLength(0);

      const workspace = makeTempDir("okcode-ws-handler-still-usable-");
      fs.writeFileSync(path.join(workspace, "file.txt"), "ok\n", "utf8");
      const response = await sendRequest(ws, WS_METHODS.projectsSearchEntries, {
        cwd: workspace,
        query: "file",
        limit: 5,
      });
      expect(response.error).toBeUndefined();
      expect(response.result).toEqual(
        expect.objectContaining({
          entries: expect.arrayContaining([
            expect.objectContaining({
              path: "file.txt",
              kind: "file",
            }),
          ]),
        }),
      );
    } finally {
      process.off("unhandledRejection", onUnhandledRejection);
    }
  });

  it("returns errors for removed projects CRUD methods", async () => {
    const { cwd } = makeWorkspaceFixture("test");
    server = await createTestServer({ cwd });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const listResponse = await sendRequest(ws, WS_METHODS.projectsList);
    expect(listResponse.result).toBeUndefined();
    expect(listResponse.error?.message).toContain("Invalid request format");

    const addResponse = await sendRequest(ws, WS_METHODS.projectsAdd, {
      cwd: "/tmp/project-a",
    });
    expect(addResponse.result).toBeUndefined();
    expect(addResponse.error?.message).toContain("Invalid request format");

    const removeResponse = await sendRequest(ws, WS_METHODS.projectsRemove, {
      id: "project-a",
    });
    expect(removeResponse.result).toBeUndefined();
    expect(removeResponse.error?.message).toContain("Invalid request format");
  });

  it("supports projects.searchEntries", async () => {
    const workspace = makeTempDir("okcode-ws-workspace-entries-");
    fs.mkdirSync(path.join(workspace, "src", "components"), { recursive: true });
    fs.writeFileSync(
      path.join(workspace, "src", "components", "Composer.tsx"),
      "export {};",
      "utf8",
    );
    fs.writeFileSync(path.join(workspace, "README.md"), "# test", "utf8");
    fs.mkdirSync(path.join(workspace, ".git"), { recursive: true });
    fs.writeFileSync(path.join(workspace, ".git", "HEAD"), "ref: refs/heads/main\n", "utf8");

    const { cwd } = makeWorkspaceFixture("test");
    server = await createTestServer({ cwd });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const response = await sendRequest(ws, WS_METHODS.projectsSearchEntries, {
      cwd: workspace,
      query: "comp",
      limit: 10,
    });
    expect(response.error).toBeUndefined();
    expect(response.result).toEqual({
      entries: expect.arrayContaining([
        expect.objectContaining({ path: "src/components", kind: "directory" }),
        expect.objectContaining({ path: "src/components/Composer.tsx", kind: "file" }),
      ]),
      truncated: false,
    });
  });

  it("supports projects.listDirectory", async () => {
    const workspace = makeTempDir("okcode-ws-list-directory-");
    fs.mkdirSync(path.join(workspace, "src", "components"), { recursive: true });
    fs.writeFileSync(path.join(workspace, "src", "index.ts"), "export {};", "utf8");
    fs.writeFileSync(
      path.join(workspace, "src", "components", "Composer.tsx"),
      "export {};",
      "utf8",
    );

    const { cwd } = makeWorkspaceFixture("test");
    server = await createTestServer({ cwd });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const response = await sendRequest(ws, WS_METHODS.projectsListDirectory, {
      cwd: workspace,
      directoryPath: "src",
    });
    expect(response.error).toBeUndefined();
    expect(response.result).toEqual({
      entries: [
        {
          path: "src/components",
          kind: "directory",
          parentPath: "src",
          hasChildren: true,
        },
        {
          path: "src/index.ts",
          kind: "file",
          parentPath: "src",
          hasChildren: false,
        },
      ],
      truncated: false,
    });
  });

  it("reports whether a workspace path exists on disk", async () => {
    const workspace = makeTempDir("okcode-ws-path-exists-");
    const missingPath = path.join(workspace, "missing-worktree");

    const { cwd } = makeWorkspaceFixture("test");
    server = await createTestServer({ cwd });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const existingResponse = await sendRequest(ws, WS_METHODS.projectsPathExists, {
      path: workspace,
    });
    expect(existingResponse.error).toBeUndefined();
    expect(existingResponse.result).toEqual({ exists: true });

    const missingResponse = await sendRequest(ws, WS_METHODS.projectsPathExists, {
      path: missingPath,
    });
    expect(missingResponse.error).toBeUndefined();
    expect(missingResponse.result).toEqual({ exists: false });
  });

  it("supports projects.writeFile within the workspace root", async () => {
    const workspace = makeTempDir("okcode-ws-write-file-");

    const { cwd } = makeWorkspaceFixture("test");
    server = await createTestServer({ cwd });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const response = await sendRequest(ws, WS_METHODS.projectsWriteFile, {
      cwd: workspace,
      relativePath: "plans/effect-rpc.md",
      contents: "# Plan\n\n- step 1\n",
    });

    expect(response.error).toBeUndefined();
    expect(response.result).toEqual({
      relativePath: "plans/effect-rpc.md",
    });
    expect(fs.readFileSync(path.join(workspace, "plans", "effect-rpc.md"), "utf8")).toBe(
      "# Plan\n\n- step 1\n",
    );
  });

  it("rejects projects.writeFile paths outside the workspace root", async () => {
    const workspace = makeTempDir("okcode-ws-write-file-reject-");

    const { cwd } = makeWorkspaceFixture("test");
    server = await createTestServer({ cwd });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const response = await sendRequest(ws, WS_METHODS.projectsWriteFile, {
      cwd: workspace,
      relativePath: "../escape.md",
      contents: "# no\n",
    });

    expect(response.result).toBeUndefined();
    expect(response.error?.message).toContain(
      "Workspace file path must stay within the project root.",
    );
    expect(fs.existsSync(path.join(workspace, "..", "escape.md"))).toBe(false);
  });

  it("routes git core methods over websocket", async () => {
    const listBranches = vi.fn(() =>
      Effect.succeed({
        branches: [],
        isRepo: false,
        hasOriginRemote: false,
      }),
    );
    const initRepo = vi.fn(() => Effect.void);
    const syncCurrentBranch = vi.fn(() =>
      Effect.fail(
        new GitCommandError({
          operation: "GitCore.test.syncCurrentBranch",
          detail: "No upstream configured",
          command: "git pull",
          cwd: "/repo/path",
        }),
      ),
    );

    const { cwd } = makeWorkspaceFixture("test");
    server = await createTestServer({
      cwd,
      gitCore: {
        listBranches,
        initRepo,
        syncCurrentBranch,
      },
    });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const listResponse = await sendRequest(ws, WS_METHODS.gitListBranches, { cwd: "/repo/path" });
    expect(listResponse.error).toBeUndefined();
    expect(listResponse.result).toEqual({ branches: [], isRepo: false, hasOriginRemote: false });
    expect(listBranches).toHaveBeenCalledWith({ cwd: "/repo/path" });

    const initResponse = await sendRequest(ws, WS_METHODS.gitInit, { cwd: "/repo/path" });
    expect(initResponse.error).toBeUndefined();
    expect(initRepo).toHaveBeenCalledWith({ cwd: "/repo/path" });

    const pullResponse = await sendRequest(ws, WS_METHODS.gitPull, { cwd: "/repo/path" });
    expect(pullResponse.result).toBeUndefined();
    expect(pullResponse.error?.message).toContain("No upstream configured");
    expect(syncCurrentBranch).toHaveBeenCalledWith("/repo/path");
  });

  it("supports git.status over websocket", async () => {
    const statusResult = {
      branch: "feature/test",
      hasWorkingTreeChanges: true,
      hasConflicts: false,
      conflictedFiles: [],
      workingTree: {
        files: [{ path: "src/index.ts", insertions: 7, deletions: 2 }],
        insertions: 7,
        deletions: 2,
      },
      hasUpstream: false,
      aheadCount: 0,
      behindCount: 0,
      pr: null,
    };

    const status = vi.fn(() => Effect.succeed(statusResult));
    const runStackedAction = vi.fn(() => Effect.void as any);
    const resolvePullRequest = vi.fn(() => Effect.void as any);
    const preparePullRequestThread = vi.fn(() => Effect.void as any);
    const gitManager: GitManagerShape = {
      status,
      resolvePullRequest,
      preparePullRequestThread,
      runStackedAction,
      listPullRequests: vi.fn(() => Effect.succeed({ pullRequests: [] })),
    };

    const { cwd } = makeWorkspaceFixture("test");
    server = await createTestServer({ cwd, gitManager });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const response = await sendRequest(ws, WS_METHODS.gitStatus, {
      cwd,
    });
    expect(response.error).toBeUndefined();
    expect(response.result).toEqual(statusResult);
    expect(status).toHaveBeenCalledWith({ cwd });
  });

  it("supports git pull request routing over websocket", async () => {
    const resolvePullRequestResult = {
      pullRequest: {
        number: 42,
        title: "PR thread flow",
        url: "https://github.com/pingdotgg/codething-mvp/pull/42",
        baseBranch: "main",
        headBranch: "feature/pr-threads",
        state: "open" as const,
      },
    };
    const preparePullRequestThreadResult = {
      ...resolvePullRequestResult,
      branch: "feature/pr-threads",
      worktreePath: "/tmp/pr-threads",
    };

    const gitManager: GitManagerShape = {
      status: vi.fn(() => Effect.void as any),
      resolvePullRequest: vi.fn(() => Effect.succeed(resolvePullRequestResult)),
      preparePullRequestThread: vi.fn(() => Effect.succeed(preparePullRequestThreadResult)),
      runStackedAction: vi.fn(() => Effect.void as any),
      listPullRequests: vi.fn(() => Effect.succeed({ pullRequests: [] })),
    };

    const { cwd } = makeWorkspaceFixture("test");
    server = await createTestServer({ cwd, gitManager });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const resolveResponse = await sendRequest(ws, WS_METHODS.gitResolvePullRequest, {
      cwd,
      reference: "#42",
    });
    expect(resolveResponse.error).toBeUndefined();
    expect(resolveResponse.result).toEqual(resolvePullRequestResult);

    const prepareResponse = await sendRequest(ws, WS_METHODS.gitPreparePullRequestThread, {
      cwd,
      reference: "42",
      mode: "worktree",
    });
    expect(prepareResponse.error).toBeUndefined();
    expect(prepareResponse.result).toEqual(preparePullRequestThreadResult);
    expect(gitManager.resolvePullRequest).toHaveBeenCalledWith({
      cwd,
      reference: "#42",
    });
    expect(gitManager.preparePullRequestThread).toHaveBeenCalledWith({
      cwd,
      reference: "42",
      mode: "worktree",
    });
  });

  it("returns errors from git.runStackedAction", async () => {
    const runStackedAction = vi.fn(() =>
      Effect.fail(
        new GitActionExecutionError({
          failure: {
            code: "detached_head",
            phase: "push",
            title: "Checkout a branch first",
            summary: "This action cannot run from a detached HEAD.",
            detail: "Cannot push from detached HEAD.",
            nextSteps: [
              "Create or checkout a branch for this work.",
              "Run the git action again from that branch.",
            ],
            operation: "GitManager.test.runStackedAction",
            rawMessage: "Cannot push from detached HEAD.",
          },
        }),
      ),
    );
    const gitManager: GitManagerShape = {
      status: vi.fn(() => Effect.void as any),
      resolvePullRequest: vi.fn(() => Effect.void as any),
      preparePullRequestThread: vi.fn(() => Effect.void as any),
      runStackedAction,
      listPullRequests: vi.fn(() => Effect.succeed({ pullRequests: [] })),
    };

    const { cwd } = makeWorkspaceFixture("test");
    server = await createTestServer({ cwd, gitManager });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const response = await sendRequest(ws, WS_METHODS.gitRunStackedAction, {
      actionId: "client-action-1",
      cwd,
      action: "commit_push",
    });
    expect(response.result).toBeUndefined();
    expect(response.error?.message).toContain("detached HEAD");
    expect(response.error?.code).toBe("git_action_failed");
    expect(response.error?.data).toEqual(
      expect.objectContaining({
        code: "detached_head",
        phase: "push",
      }),
    );
    expect(runStackedAction).toHaveBeenCalledWith(
      {
        actionId: "client-action-1",
        cwd,
        action: "commit_push",
      },
      expect.objectContaining({
        actionId: "client-action-1",
        progressReporter: expect.any(Object),
      }),
    );
  });

  it("publishes git action progress only to the initiating websocket", async () => {
    const runStackedAction: GitManagerShape["runStackedAction"] = (input, options) =>
      (
        options?.progressReporter?.publish({
          actionId: options?.actionId ?? input.actionId,
          cwd: input.cwd,
          action: "commit",
          kind: "phase_started",
          phase: "commit",
          label: "Committing...",
        }) ?? Effect.void
      ).pipe(
        Effect.as({
          action: "commit" as const,
          branch: { status: "skipped_not_requested" as const },
          commit: {
            status: "created" as const,
            commitSha: "abc1234",
            subject: "Test commit",
          },
          push: { status: "skipped_not_requested" as const },
          pr: { status: "skipped_not_requested" as const },
        }),
      );
    const gitManager: GitManagerShape = {
      status: vi.fn(() => Effect.void as any),
      resolvePullRequest: vi.fn(() => Effect.void as any),
      preparePullRequestThread: vi.fn(() => Effect.void as any),
      runStackedAction,
      listPullRequests: vi.fn(() => Effect.succeed({ pullRequests: [] })),
    };

    const { cwd } = makeWorkspaceFixture("test");
    server = await createTestServer({ cwd, gitManager });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [initiatingWs] = await connectAndAwaitWelcome(port);
    const [otherWs] = await connectAndAwaitWelcome(port);
    connections.push(initiatingWs, otherWs);

    const responsePromise = sendRequest(initiatingWs, WS_METHODS.gitRunStackedAction, {
      actionId: "client-action-2",
      cwd,
      action: "commit",
    });
    const progressPush = await waitForPush(initiatingWs, WS_CHANNELS.gitActionProgress);

    expect(progressPush.data).toEqual({
      actionId: "client-action-2",
      cwd,
      action: "commit",
      kind: "phase_started",
      phase: "commit",
      label: "Committing...",
    });

    await expect(
      waitForPush(otherWs, WS_CHANNELS.gitActionProgress, undefined, 10, 100),
    ).rejects.toThrow("Timed out waiting for WebSocket message after 100ms");
    await expect(responsePromise).resolves.toEqual(
      expect.objectContaining({
        result: expect.objectContaining({
          action: "commit",
        }),
      }),
    );
  });

  it("stops a pending git action for the initiating websocket", async () => {
    const runStackedAction: GitManagerShape["runStackedAction"] = (input, options) =>
      Effect.gen(function* () {
        if (options?.progressReporter) {
          yield* options.progressReporter.publish({
            actionId: options.actionId ?? input.actionId,
            cwd: input.cwd,
            action: input.action,
            kind: "phase_started",
            phase: "commit",
            label: "Committing...",
          });
        }
        return yield* Effect.never;
      });
    const gitManager: GitManagerShape = {
      status: vi.fn(() => Effect.void as any),
      resolvePullRequest: vi.fn(() => Effect.void as any),
      preparePullRequestThread: vi.fn(() => Effect.void as any),
      runStackedAction,
      listPullRequests: vi.fn(() => Effect.succeed({ pullRequests: [] })),
    };

    const { cwd } = makeWorkspaceFixture("test");
    server = await createTestServer({ cwd, gitManager });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    const [ws] = await connectAndAwaitWelcome(port);
    connections.push(ws);

    const actionResponsePromise = sendRequest(ws, WS_METHODS.gitRunStackedAction, {
      actionId: "client-action-stop",
      cwd,
      action: "commit",
    });
    await waitForPush(ws, WS_CHANNELS.gitActionProgress);

    const stopResponse = await sendRequest(ws, WS_METHODS.gitStopAction, {
      cwd,
      actionId: "client-action-stop",
    });

    expect(stopResponse.error).toBeUndefined();
    await expect(actionResponsePromise).resolves.toEqual(
      expect.objectContaining({
        error: expect.objectContaining({
          code: "git_action_stopped",
          message: "Git action stopped.",
        }),
      }),
    );
  });

  it("rejects websocket connections without a valid auth token", async () => {
    const { cwd } = makeWorkspaceFixture("test");
    server = await createTestServer({ cwd, authToken: "secret-token" });
    const addr = server.address();
    const port = typeof addr === "object" && addr !== null ? addr.port : 0;

    await expect(connectWs(port)).rejects.toThrow("WebSocket connection failed");

    const [authorizedWs] = await connectAndAwaitWelcome(port, "secret-token");
    connections.push(authorizedWs);
  });
});