fix(opencode): resolve race conditions and update tests for kilo compatibility

Remove eager publish call in indexing initialization that caused
premature event emission. Add foreign key constraint tolerance in
next-message projector to handle writes racing against deleted
sessions. Fix test environment isolation for gateway headers and
permission tests, update auth test assertions to use "kilo" username,
and remove stale indexing route from httpapi-bridge expectations.

packages/opencode/test/kilocode/kilo-gateway-headers.test.ts

@@ -1,6 +1,6 @@
-import { describe, it, expect, afterEach } from "bun:test"
+import { describe, it, expect, afterEach, beforeEach } from "bun:test"
 import { buildKiloHeaders, getFeatureHeader, getEditorNameHeader } from "@kilocode/kilo-gateway"
-import { HEADER_FEATURE, ENV_FEATURE, ENV_VERSION, DEFAULT_EDITOR_NAME } from "@kilocode/kilo-gateway"
+import { HEADER_FEATURE, ENV_FEATURE, ENV_EDITOR_NAME, ENV_VERSION, DEFAULT_EDITOR_NAME } from "@kilocode/kilo-gateway"
 
 describe("getFeatureHeader", () => {
   const original = process.env[ENV_FEATURE]
@@ -31,6 +31,11 @@ describe("getFeatureHeader", () => {
 
 describe("getEditorNameHeader", () => {
   const originalVersion = process.env[ENV_VERSION]
+  const originalEditor = process.env[ENV_EDITOR_NAME]
+
+  beforeEach(() => {
+    delete process.env[ENV_EDITOR_NAME]
+  })
 
   afterEach(() => {
     if (originalVersion === undefined) {
@@ -38,6 +43,12 @@ describe("getEditorNameHeader", () => {
     } else {
       process.env[ENV_VERSION] = originalVersion
     }
+
+    if (originalEditor === undefined) {
+      delete process.env[ENV_EDITOR_NAME]
+    } else {
+      process.env[ENV_EDITOR_NAME] = originalEditor
+    }
   })
 
   it("returns default editor name without version when KILOCODE_VERSION is not set", () => {

packages/opencode/test/kilocode/permission/next.reply-http.test.ts

@@ -1,17 +1,21 @@
 import { afterEach, describe, expect, test } from "bun:test"
+import { Flag } from "@opencode-ai/core/flag/flag"
 import { Permission } from "../../../src/permission"
 import { PermissionID } from "../../../src/permission/schema"
 import { WithInstance } from "../../../src/project/with-instance"
 import { Session } from "../../../src/session/session"
 import { tmpdir } from "../../fixture/fixture"
 
+const original = Flag.KILO_EXPERIMENTAL_HTTPAPI
+
 afterEach(() => {
-  delete process.env["KILO_EXPERIMENTAL_HTTPAPI"]
+  Flag.KILO_EXPERIMENTAL_HTTPAPI = original
 })
 
-async function app() {
+async function app(experimental = false) {
   const { Server } = await import("../../../src/server/server")
-  return Server.Default().app
+  Flag.KILO_EXPERIMENTAL_HTTPAPI = experimental
+  return experimental ? Server.Default().app : Server.Legacy().app
 }
 
 describe("POST /permission/:requestID/reply", () => {
@@ -119,13 +123,12 @@ describe("POST /permission/:requestID/reply", () => {
   })
 
   test("returns 404 for unknown replies when experimental HttpApi is enabled", async () => {
-    process.env["KILO_EXPERIMENTAL_HTTPAPI"] = "1"
     await using tmp = await tmpdir({ git: true })
 
     await WithInstance.provide({
       directory: tmp.path,
       fn: async () => {
-        const server = await app()
+        const server = await app(true)
 
         const response = await server.request("/permission/permission_missing/reply", {
           method: "POST",

packages/opencode/test/server/auth.test.ts

@@ -22,12 +22,12 @@ describe("ServerAuth", () => {
     expect(ServerAuth.headers()).toBeUndefined()
   })
 
-  test("defaults to the opencode username", () => {
+  test("defaults to the kilo username", () => { // kilocode_change
     Flag.KILO_SERVER_PASSWORD = "secret"
     Flag.KILO_SERVER_USERNAME = undefined
 
     expect(ServerAuth.headers()).toEqual({
-      Authorization: `Basic ${Buffer.from("opencode:secret").toString("base64")}`,
+      Authorization: `Basic ${Buffer.from("kilo:secret").toString("base64")}`, // kilocode_change
     })
   })
 
@@ -54,6 +54,6 @@ describe("ServerAuth", () => {
 
     expect(ServerAuth.required(config)).toBe(true)
     expect(ServerAuth.authorized({ username: "alice", password: Redacted.make("secret") }, config)).toBe(true)
-    expect(ServerAuth.authorized({ username: "opencode", password: Redacted.make("secret") }, config)).toBe(false)
+    expect(ServerAuth.authorized({ username: "kilo", password: Redacted.make("secret") }, config)).toBe(false) // kilocode_change
   })
 })

packages/opencode/test/server/httpapi-bridge.test.ts

@@ -230,7 +230,6 @@ describe("HttpApi server", () => {
       "GET /api/session",
       "GET /api/session/{sessionID}/context",
       "GET /api/session/{sessionID}/message",
-      "GET /indexing/status", // kilocode_change - Kilo Effect-only indexing route
       "POST /api/session/{sessionID}/compact",
       "POST /api/session/{sessionID}/prompt",
       "POST /api/session/{sessionID}/wait",