Consolidate low-signal tests from recent integrations and jobs work

[cursor]

Agents added many verification tests while shipping OAuth apps/connections (#979), job retention/filters (#973/#975), durable publish escalation (#976), reindex D1 retries (#978), storage-bucket ownership (#965), and related MCP/Sentry carve-outs. This pass folds those suites toward the repo testing principles: fewer longer workflow tests, structured contracts over copy pins, and no one-case-per-filter / duplicate Playwright coverage.

Changes

• Integrations: merge OAuth app setup/reuse/prefill matrices and account-integrations loader journeys; drop SQL predicate alias pin
• Reindex / remote connector: fold retry+exhaustion pairs; merge hello invalid/transient/hard-failure outcomes; keep page-walk tests separate
• Account jobs: one filter unit journey + one E2E list/filter/detail journey
• Values/secrets/MCP servers: merge reserved-prefix and plan-quota workflows; stop pinning instructional error copy
• Durable publish: drop redundant force/non-force escalation case (covered by publish idempotency parts)
• Entitlements: rewrite package_service_states backfill fixture to exercise real rescue instead of empty no-op
• Delete run-history-legacy-guardrail.node.test.ts source-scan regression

Net: 46 fewer test() cases, −569 lines across 22 files. Behavior under test is unchanged.

System recap — composes existing primitives (low risk)

Mode: recap · Base: main @ f8803a0f · Head: 7cdaf04d

Classification: composes — test-only consolidation; no production behavior, contracts, or primitives changed.

Primitives touched

Primitive	Group	Impact
integrations	assistant	composes — OAuth app/setup test journeys
app-ui	surfaces	composes — account jobs/integrations filter tests
jobs	assistant	composes — reindex retry journey
connector-ingress	surfaces	composes — hello/secret-lookup outcomes
mcp-client-servers	assistant	composes — OAuth callback + server resolve
mcp-server	surfaces	composes — values/secrets/publish test trim
capability-registry	assistant	composes — durable escalation journey
entitlements	auth	composes — backfill fixture rewrite
storage-buckets	storage	composes — register/list journey

System map

Test-only consolidation across recent OAuth, jobs, connector, and MCP suites — no production edges change.

Legend: green = composes (wiring only) · amber = extended by this PR · red = new primitive · gray = context (unchanged, included only when an edge crosses it).

flowchart LR
	integrations["integrations<br/>OAuth integrations"]:::touched
	appUi["app-ui<br/>Browser app"]:::touched
	jobs["jobs<br/>Scheduled jobs"]:::touched
	connectorIngress["connector-ingress<br/>Remote connector ingress"]:::touched
	mcpClientServers["mcp-client-servers<br/>MCP client servers"]:::touched
	mcpServer["mcp-server<br/>MCP endpoint"]:::touched
	classDef touched fill:#1a7f37,color:#fff
	classDef extended fill:#9a6700,color:#fff
	classDef added fill:#cf222e,color:#fff
	classDef untouched fill:#57606a,color:#fff

Loading

  

[github-actions]

🔎 Preview deployed: https://kody-pr-982.kody-a99.workers.dev

Worker: kody-pr-982
D1: kody-pr-982-db
KV: kody-pr-982-oauth-kv

Mocks:

• cloudflare: https://kody-pr-982-mock-cloudflare.kody-a99.workers.dev/__mocks (kody-pr-982-mock-cloudflare)