// ---------------------------------------------------------------------------// Realistic reachability smoke test for the composed cloud handler.//// Boots the ACTUAL `cloudApiHandler` — `ExecutorApp.make`'s `toWebHandler`, the// exact handler `start.ts` forwards app-owned requests to — and drives it with// raw `Request`s to prove every served surface is REACHED, not dropped into a// 404 / the SPA fallback. This is the integration complement to// `app-paths.test.ts` (which guards the `start.ts` dispatch decision): together// they cover both halves of the billing-404 class —//   - app-paths.test.ts: "does start.ts forward the /api surface to the handler?"//   - this file:          "does the handler actually serve billing + docs?"//// It catches a route being dropped from `makeCloudExtensionRoutes`, the Autumn// proxy / Swagger being unmounted, the `/api` prefix wiring regressing, etc.//// Runs in the workers pool (real workerd) because the composed app transitively// imports `agents/mcp` (the MCP envelope), which is workerd-only. The asserted// surfaces short-circuit before any real network I/O: the billing proxy 401s// before calling Autumn, the protected API 401/403s at the auth gate, and the// spec / Swagger / discovery docs are static.// --------------------------------------------------------------------------- import { describe, expect, it } from "@effect/vitest"; import { cloudApiHandler } from "./app"; const handler = cloudApiHandler().handler; const call = (method: string, path: string, init: RequestInit = {}) =>  handler(new Request(`http://test.local${path}`, { method, ...init })); describe("cloud composed-handler reachability", () => {  it("serves the Autumn billing proxy (401 JSON, NOT a 404 SPA fallback)", async () => {    const res = await call("POST", "/api/billing/customer", {      headers: { "content-type": "application/json" },      body: "{}",    });    // The regression returned the TanStack SPA fallback (200 text/html). The real    // handler reaches the billing route and rejects the unauthenticated call.    expect(res.status).toBe(401);    expect(res.headers.get("content-type")).toContain("application/json");    expect(await res.json()).toEqual({ error: "Unauthorized", code: "unauthorized" });  });   it("serves Swagger UI at /api/docs", async () => {    const res = await call("GET", "/api/docs");    expect(res.status).toBe(200);    expect(res.headers.get("content-type")).toContain("text/html");    expect((await res.text()).toLowerCase()).toContain("swagger");  });   it("serves the OpenAPI spec at /api/openapi.json", async () => {    const res = await call("GET", "/api/openapi.json");    expect(res.status).toBe(200);    expect(res.headers.get("content-type")).toContain("application/json");    const spec = (await res.json()) as { paths?: Record<string, unknown> };    expect(spec.paths).toBeDefined();    // The spec is prefixed with /api, so a real v2 route like integrations is present.    expect(Object.keys(spec.paths ?? {}).some((p) => p.includes("/integrations"))).toBe(true);  });   it("reaches the protected API auth gate at /api/integrations (error JSON, NOT SPA HTML)", async () => {    const res = await call("GET", "/api/integrations");    expect([401, 403]).toContain(res.status);    expect(res.headers.get("content-type")).toContain("application/json");    expect(await res.json()).toHaveProperty("code");  });   // (The MCP envelope + its /.well-known/* discovery docs are exercised by the  // mcp-flow / mcp-miniflare suites; the dispatch half is pinned in  // app-paths.test.ts. They proxy to WorkOS, unreachable from this isolate, so  // they are not re-asserted here.)});