Initial plan

2026-10-28 00:16:48 +09:00 · 2026-10-05 14:25:10 +00:00
115 changed files with 235 additions and 3479 deletions
@@ -21,7 +21,7 @@ jobs:
          persist-credentials: false

      - name: Set up Ruby
-        uses: ruby/setup-ruby@14594264cd68ce8a2345dd349bc3d138a4ef85c8 # v1.327.0
+        uses: ruby/setup-ruby@a0102e0972be65f351c307e2d64b9314a57c8073 # v1.324.0
        with:
          ruby-version: .ruby-version
          bundler-cache: true
@@ -40,7 +40,7 @@ jobs:
          persist-credentials: false

      - name: Set up Ruby
-        uses: ruby/setup-ruby@14594264cd68ce8a2345dd349bc3d138a4ef85c8 # v1.327.0
+        uses: ruby/setup-ruby@a0102e0972be65f351c307e2d64b9314a57c8073 # v1.324.0
        with:
          ruby-version: .ruby-version
          bundler-cache: true
@@ -48,29 +48,6 @@ jobs:
      - name: Lint code for consistent style
        run: bin/rubocop

-  herb:
-    name: Herb check
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-    steps:
-      - name: Install packages
-        run: sudo apt-get update && sudo apt-get install --no-install-recommends -y libvips
-
-      - name: Checkout code
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-        with:
-          persist-credentials: false
-
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@a0102e0972be65f351c307e2d64b9314a57c8073 # v1.324.0
-        with:
-          ruby-version: .ruby-version
-          bundler-cache: true
-
-      - name: Check that every HTML template compiles through Herb
-        run: bin/rails herb:check
-
  lint-actions:
    name: GitHub Actions audit
    runs-on: ubuntu-latest
@@ -102,7 +79,7 @@ jobs:
        options: --health-cmd "redis-cli ping" --health-interval 10s --health-timeout 5s --health-retries 5
    steps:
      - name: Install packages
-        run: sudo apt-get update && sudo apt-get install --no-install-recommends -y libsqlite3-0 sqlite3 libvips curl ffmpeg
+        run: sudo apt-get update && sudo apt-get install --no-install-recommends -y libsqlite3-0 libvips curl ffmpeg

      - name: Checkout code
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -110,7 +87,7 @@ jobs:
          persist-credentials: false

      - name: Set up Ruby
-        uses: ruby/setup-ruby@14594264cd68ce8a2345dd349bc3d138a4ef85c8 # v1.327.0
+        uses: ruby/setup-ruby@a0102e0972be65f351c307e2d64b9314a57c8073 # v1.324.0
        env:
          REDIS_URL: redis://localhost:6379/0
        with:
@@ -120,9 +97,6 @@ jobs:
      - name: Run tests
        run: bin/rails db:setup test

-      - name: Test benchmark response validation
-        run: bundle exec ruby bench/test_http_client.rb
-
  test_system:
    runs-on: ubuntu-latest
    permissions:
@@ -135,7 +109,7 @@ jobs:
        options: --health-cmd "redis-cli ping" --health-interval 10s --health-timeout 5s --health-retries 5
    steps:
      - name: Install packages
-        run: sudo apt-get update && sudo apt-get install --no-install-recommends -y libsqlite3-0 sqlite3 libvips curl ffmpeg
+        run: sudo apt-get update && sudo apt-get install --no-install-recommends -y libsqlite3-0 libvips curl ffmpeg

      - name: Checkout code
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -143,7 +117,7 @@ jobs:
          persist-credentials: false

      - name: Set up Ruby
-        uses: ruby/setup-ruby@14594264cd68ce8a2345dd349bc3d138a4ef85c8 # v1.327.0
+        uses: ruby/setup-ruby@a0102e0972be65f351c307e2d64b9314a57c8073 # v1.324.0
        env:
          REDIS_URL: redis://localhost:6379/0
        with:
@@ -41,8 +41,7 @@ jobs:
            arch: arm64
    env:
      REGISTRY: ghcr.io
-      # Everything goes to <repo>-edge, with this repository's own token.
-      IMAGE_NAME: ${{ github.repository }}-edge
+      IMAGE_NAME: ${{ github.repository }}
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -88,6 +87,9 @@ jobs:
            type=ref,event=branch
            type=ref,event=tag
            type=sha,format=short,prefix=sha-
+            type=semver,pattern={{version}},enable=${{ startsWith(github.ref, 'refs/tags/v') }}
+            type=semver,pattern={{major}}.{{minor}},enable=${{ startsWith(github.ref, 'refs/tags/v') }}
+            type=semver,pattern={{major}},enable=${{ startsWith(github.ref, 'refs/tags/v') }}
          flavor: |
            latest=false
            suffix=-${{ matrix.arch }}
@@ -126,8 +128,6 @@ jobs:
    name: Create multi-arch manifest and sign
    needs: build
    if: github.event_name != 'pull_request'
-    # Multi-platform tags, signed, in <repo>-edge only. basecamp/release-images
-    # promotes v* tags from there into the release package after a reviewer approves.
    runs-on: ubuntu-latest
    permissions:
      contents: read
@@ -136,7 +136,7 @@ jobs:
    timeout-minutes: 20
    env:
      REGISTRY: ghcr.io
-      IMAGE_NAME: ${{ github.repository }}-edge
+      IMAGE_NAME: ${{ github.repository }}
    steps:
      - name: Set up Docker Buildx (for imagetools)
        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
@@ -166,6 +166,10 @@ jobs:
            type=ref,event=branch
            type=ref,event=tag
            type=sha,format=short,prefix=sha-
+            type=semver,pattern={{version}},enable=${{ startsWith(github.ref, 'refs/tags/v') }}
+            type=semver,pattern={{major}}.{{minor}},enable=${{ startsWith(github.ref, 'refs/tags/v') }}
+            type=semver,pattern={{major}},enable=${{ startsWith(github.ref, 'refs/tags/v') }}
+            type=raw,value=latest,enable=${{ startsWith(github.ref, 'refs/tags/v') }}
          flavor: |
            latest=false
          labels: |
@@ -184,6 +188,10 @@ jobs:
            [ -z "$tag" ] && continue
            echo "Creating manifest for $tag"
            src_tag="$tag"
+            if [[ "$tag" == *:latest && "${GITHUB_REF}" == refs/tags/* ]]; then
+              ref="${GITHUB_REF#refs/tags/}"
+              src_tag="${tag%:latest}:$ref"
+            fi
            if [ -n "${IMAGE_DESCRIPTION:-}" ]; then
              docker buildx imagetools create \
                --tag "$tag" \
@@ -43,6 +43,7 @@ gem "rqrcode"
 gem "rails_autolink"
 gem "geared_pagination"
 gem "jbuilder"
+gem "net-http-persistent"
 gem "surfguard", github: "basecamp/surfguard" # The SSRF address policy behind RestrictedHTTP
 gem "kredis"
 gem "platform_agent"
@@ -23,16 +23,16 @@ GIT

 GIT
  remote: https://github.com/rails/propshaft.git
-  revision: dc979db89cd07c72ee4d11d415ae1cb4fd072623
+  revision: e49a9de659ff27462015e54dd832e86e762a6ddc
  specs:
-    propshaft (1.3.2)
+    propshaft (1.2.1)
      actionpack (>= 7.0.0)
      activesupport (>= 7.0.0)
      rack

 GIT
  remote: https://github.com/rails/rails.git
-  revision: e3d5c569d217c56c022b04acb127a8c24dbe9685
+  revision: 1a02651ac37fb64b4de2a2b73461d86acf9c98fb
  branch: main
  specs:
    actioncable (8.2.0.alpha)
@@ -63,10 +63,10 @@ GIT
      rack-session (>= 1.0.1)
      rack-test (>= 0.6.3)
      rails-dom-testing (~> 2.2)
-      rails-html-sanitizer (~> 1.7)
+      rails-html-sanitizer (~> 1.6)
      useragent (~> 0.16)
    actiontext (8.2.0.alpha)
-      action_text-trix (~> 2.1.16)
+      action_text-trix (~> 2.1.15)
      actionpack (= 8.2.0.alpha)
      activerecord (= 8.2.0.alpha)
      activestorage (= 8.2.0.alpha)
@@ -77,12 +77,11 @@ GIT
      activesupport (= 8.2.0.alpha)
      builder (~> 3.1)
      erubi (~> 1.11)
-      herb (>= 0.10)
      rails-dom-testing (~> 2.2)
-      rails-html-sanitizer (~> 1.7)
+      rails-html-sanitizer (~> 1.6)
    activejob (8.2.0.alpha)
      activesupport (= 8.2.0.alpha)
-      globalid (>= 1.4.0)
+      globalid (>= 0.3.6)
    activemodel (8.2.0.alpha)
      activesupport (= 8.2.0.alpha)
    activerecord (8.2.0.alpha)
@@ -94,7 +93,7 @@ GIT
      activejob (= 8.2.0.alpha)
      activerecord (= 8.2.0.alpha)
      activesupport (= 8.2.0.alpha)
-      marcel (~> 2.0)
+      marcel (~> 1.0)
    activesupport (8.2.0.alpha)
      base64
      bigdecimal
@@ -105,8 +104,6 @@ GIT
      json
      logger (>= 1.4.2)
      minitest (>= 5.1)
-      psych (>= 4)
-      ractor-dispatch (>= 0.3.0)
      securerandom (>= 0.3)
      tzinfo (~> 2.0, >= 2.0.5)
      uri (>= 0.13.1)
@@ -145,7 +142,7 @@ GEM
    base64 (0.3.0)
    bcrypt (3.1.22)
    benchmark (0.5.0)
-    bigdecimal (4.1.3)
+    bigdecimal (3.3.1)
    brakeman (8.0.6)
      racc
    builder (3.3.0)
@@ -162,7 +159,7 @@ GEM
      regexp_parser (>= 1.5, < 3.0)
      xpath (~> 3.2)
    chunky_png (1.4.0)
-    concurrent-ruby (1.3.8)
+    concurrent-ruby (1.3.7)
    connection_pool (2.5.5)
    crack (1.0.0)
      bigdecimal
@@ -173,9 +170,9 @@ GEM
      irb (~> 1.10)
      reline (>= 0.3.8)
    drb (2.2.3)
-    erb (6.0.7)
+    erb (6.0.4)
    erubi (1.13.1)
-    faker (3.8.0)
+    faker (3.5.2)
      i18n (>= 1.8.11, < 2)
    ffi (1.17.2)
    ffi (1.17.2-aarch64-linux-gnu)
@@ -185,22 +182,17 @@ GEM
    geared_pagination (1.2.0)
      activesupport (>= 5.0)
      addressable (>= 2.5.0)
-    globalid (1.4.0)
+    globalid (1.3.0)
      activesupport (>= 6.1)
    hashdiff (1.2.0)
-    herb (0.11.0-aarch64-linux-gnu)
-    herb (0.11.0-arm64-darwin)
-    herb (0.11.0-x86_64-darwin)
-    herb (0.11.0-x86_64-linux-gnu)
-    i18n (1.15.2)
+    i18n (1.14.7)
      concurrent-ruby (~> 1.0)
    image_processing (1.14.0)
      mini_magick (>= 4.9.5, < 6)
      ruby-vips (>= 2.0.17, < 3)
-    io-console (0.9.4)
-    irb (1.18.0)
+    io-console (0.8.1)
+    irb (1.15.3)
      pp (>= 0.6.0)
-      prism (>= 1.3.0)
      rdoc (>= 4.0.0)
      reline (>= 0.4.2)
    jbuilder (2.14.1)
@@ -227,28 +219,28 @@ GEM
      net-imap
      net-pop
      net-smtp
-    marcel (2.1.0)
+    marcel (1.1.0)
    matrix (0.4.3)
    mini_magick (5.3.1)
      logger
    mini_mime (1.1.5)
-    minitest (6.0.6)
-      drb (~> 2.0)
-      prism (~> 1.5)
+    minitest (5.26.2)
    mocha (3.1.0)
      ruby2_keywords (>= 0.0.5)
    mono_logger (1.1.2)
    multi_json (1.17.0)
    mustermann (3.0.4)
      ruby2_keywords (~> 0.0.1)
-    net-imap (0.6.7)
+    net-http-persistent (4.0.6)
+      connection_pool (~> 2.2, >= 2.2.4)
+    net-imap (0.6.4.1)
      date
      net-protocol
    net-pop (0.1.2)
      net-protocol
-    net-protocol (0.4.0)
+    net-protocol (0.2.2)
      timeout
-    net-smtp (0.5.2)
+    net-smtp (0.5.1)
      net-protocol
    nio4r (2.7.5)
    nokogiri (1.19.4-aarch64-linux-gnu)
@@ -268,18 +260,18 @@ GEM
    platform_agent (1.0.1)
      activesupport (>= 5.2.0)
      useragent (~> 0.16.3)
-    pp (0.6.4)
+    pp (0.6.3)
      prettyprint
    prettyprint (0.2.0)
-    prism (1.9.0)
-    psych (5.5.0)
+    prism (1.4.0)
+    psych (5.2.6)
      date
      stringio
    public_suffix (6.0.2)
    puma (7.2.1)
      nio4r (~> 2.0)
    racc (1.8.1)
-    rack (3.2.7)
+    rack (3.2.6)
    rack-protection (4.2.1)
      base64 (>= 0.1.0)
      logger (>= 1.6.0)
@@ -289,9 +281,8 @@ GEM
      rack (>= 3.0.0)
    rack-test (2.2.0)
      rack (>= 1.3)
-    rackup (2.3.1)
+    rackup (2.2.1)
      rack (>= 3)
-    ractor-dispatch (0.3.0)
    rails-dom-testing (2.3.0)
      activesupport (>= 5.0.0)
      minitest
@@ -304,24 +295,19 @@ GEM
      activesupport (> 3.1)
      railties (> 3.1)
    rainbow (3.1.1)
-    rake (13.4.2)
-    rbs (4.2.0)
-      logger
-      prism (>= 1.6.0)
-      tsort
-    rdoc (8.1.0)
+    rake (13.3.1)
+    rdoc (6.16.1)
      erb
-      prism (>= 1.6.0)
-      rbs (>= 4.0.0)
+      psych (>= 4.0.0)
      tsort
    redis (5.4.1)
      redis-client (>= 0.22.0)
-    redis-client (0.30.1)
+    redis-client (0.25.2)
      connection_pool
    redis-namespace (1.11.0)
      redis (>= 4)
    regexp_parser (2.11.2)
-    reline (0.7.0)
+    reline (0.6.3)
      io-console (~> 0.5)
    resque (2.7.0)
      mono_logger (~> 1)
@@ -369,9 +355,9 @@ GEM
      ffi (~> 1.12)
      logger
    ruby2_keywords (0.0.5)
-    rubyzip (3.7.0)
+    rubyzip (3.4.0)
    securerandom (0.4.1)
-    selenium-webdriver (4.49.0)
+    selenium-webdriver (4.35.0)
      base64 (~> 0.2)
      logger (~> 1.4)
      rexml (~> 3.2, >= 3.2.5)
@@ -396,8 +382,8 @@ GEM
    sqlite3 (2.9.6-x86_64-linux-gnu)
    stimulus-rails (1.3.4)
      railties (>= 6.0.0)
-    stringio (3.2.0)
-    thor (1.5.0)
+    stringio (3.1.8)
+    thor (1.4.0)
    thruster (0.1.23-aarch64-linux)
    thruster (0.1.23-arm64-darwin)
    thruster (0.1.23-x86_64-darwin)
@@ -426,7 +412,7 @@ GEM
    websocket-extensions (0.1.5)
    xpath (3.2.0)
      nokogiri (~> 1.8)
-    zeitwerk (2.8.3)
+    zeitwerk (2.7.3)

 PLATFORMS
  aarch64-linux
@@ -449,6 +435,7 @@ DEPENDENCIES
  kredis
  lexxy (~> 0.9.24)
  mocha
+  net-http-persistent
  ostruct
  platform_agent
  propshaft!
@@ -49,28 +49,20 @@ If you'd rather run the Docker image yourself, you can read more about that in t
 > that people have someone to contact if they need help with their account. If that bothers you, put in any
 > email address you want and create yourself a new admin account.

-Authenticated room, message, sidebar and search pages use a bounded 64 MiB cache per worker.
-Set `CAMPFIRE_RESPONSE_CACHE_MB=0` to disable it. Every request still checks authentication
-and room access; commits from any SQLite writer invalidate pages, and CSRF masks stay fresh.
-Native HTML, JSON and stream fragments have a separate 64 MiB memory limit per worker;
-shared rate limits retain their existing store.
-
 ## Other implementations

-Campfire also has implementations in Django, Laravel, Express, Elixir, Go, Rust and C:
+Campfire also has implementations in Django, Laravel, Express, Elixir, Go and Rust:

-| HTTP workload (requests/sec) | Rails | [Django](https://github.com/basecamp/once-campfire-django) | [Laravel](https://github.com/basecamp/once-campfire-laravel) | [Express](https://github.com/basecamp/once-campfire-express) | [Elixir](https://github.com/basecamp/once-campfire-elixir) | [Go](https://github.com/basecamp/once-campfire-go) | [Rust](https://github.com/basecamp/once-campfire-rust) | [C](https://github.com/basecamp/once-campfire-c) |
-|---|---:|---:|---:|---:|---:|---:|---:|---:|
-| Room page | 710 | 414 | 1,696 | 42,481 | 1,126 | 52,512 | 105,909 | 137,505 |
-| Messages page | 1,113 | 454 | 1,890 | 74,779 | 1,407 | 54,100 | 103,301 | 142,669 |
-| Sidebar | 1,901 | 576 | 3,364 | 94,460 | 3,621 | 58,714 | 120,930 | 151,001 |
-| Search | 1,332 | 549 | 2,615 | 83,493 | 2,127 | 60,444 | 121,502 | 148,766 |
-| Post a message | 226 | 113 | 567 | 2,121 | 1,392 | 9,000 | 8,004 | 7,486 |
+| HTTP workload (requests/sec) | Rails | [Django](https://github.com/basecamp/once-campfire-django) | [Laravel](https://github.com/basecamp/once-campfire-laravel) | [Express](https://github.com/basecamp/once-campfire-express) | [Elixir](https://github.com/basecamp/once-campfire-elixir) | [Go](https://github.com/basecamp/once-campfire-go) | [Rust](https://github.com/basecamp/once-campfire-rust) |
+|---|---:|---:|---:|---:|---:|---:|---:|
+| Room page | 241 | 170 | 164 | 559 | 722 | 3,860 | 36,260 |
+| Messages page | 413 | 196 | 175 | 777 | 1,053 | 5,573 | 40,872 |
+| Sidebar | 552 | 615 | 715 | 4,125 | 1,275 | 19,753 | 34,672 |
+| Search | 435 | 315 | 305 | 1,294 | 1,156 | 7,053 | 33,299 |
+| Post a message | 273 | 154 | 137 | 256 | 801 | 4,767 | 6,896 |

-[Shared verification](https://github.com/basecamp/once-campfire-verification) · [Detailed results](https://github.com/basecamp/once-campfire-verification/blob/main/docs/performance-review.md).
-
-Measured with 16 concurrent clients on an AMD Ryzen AI MAX+ 395 with 32 GB RAM,
-with four hardware cores allocated to each app.
+Measured with 16 concurrent clients on an AMD Ryzen AI MAX+ 395,
+with four hardware threads allocated to each app.

 ## Development

@@ -22,6 +22,6 @@ class PresenceChannel < RoomChannel
    end

    def broadcast_read_room
-      ActionCable.server.broadcast "user_#{current_user.id}_reads", { room_id: membership.room_id, at: Time.current.to_f }
+      ActionCable.server.broadcast "user_#{current_user.id}_reads", { room_id: membership.room_id }
    end
 end
@@ -2,7 +2,7 @@ class Accounts::UsersController < ApplicationController
  before_action :ensure_can_administer, :set_user, only: %i[ update destroy ]

  def index
-    set_page_and_extract_portion_from User.visible_to(Current.user).ordered.member, per_page: 500
+    set_page_and_extract_portion_from User.active.ordered.without_bots, per_page: 500
  end

  def update
@@ -3,9 +3,9 @@ class AccountsController < ApplicationController
  before_action :set_account

  def edit
-    users = User.visible_to(Current.user).ordered
-    @administrators = users.administrator
-    set_page_and_extract_portion_from users.member, per_page: 500
+    users = account_users.ordered.without_bots
+    @administrators, @members = users.partition(&:administrator?)
+    set_page_and_extract_portion_from users, per_page: 500
  end

  def update
@@ -21,4 +21,12 @@ class AccountsController < ApplicationController
    def account_params
      params.require(:account).permit(:name, :logo, settings: {})
    end
+
+    def account_users
+      if Current.user.can_administer?
+        User.where(status: [ :active, :banned ])
+      else
+        User.active
+      end
+    end
 end
@@ -1,4 +1,4 @@
 class ApplicationController < ActionController::Base
-  include AllowBrowser, Authentication, Authorization, BlockBannedRequests, SetCurrentRequest, SetPlatform, TrackedRoomVisit, VersionHeaders, CachedResponses
+  include AllowBrowser, Authentication, Authorization, BlockBannedRequests, SetCurrentRequest, SetPlatform, TrackedRoomVisit, VersionHeaders
  include Turbo::Streams::Broadcasts, Turbo::Streams::StreamName
 end
@@ -1,114 +0,0 @@
-module CachedResponses
-  extend ActiveSupport::Concern
-
-  CACHE_HEADERS = %w[ content-type cache-control etag last-modified vary ].freeze
-  CSRF_TAG = /<meta\b[^>]*\bname="csrf-token"[^>]*>|<input\b[^>]*\bname="authenticity_token"[^>]*>/
-
-  included do
-    prepend_before_action :capture_response_cache_version
-  end
-
-  def perform_caching
-    return false unless super && @response_cache_version.present? && !ActiveRecord::Base.connection.transaction_open?
-
-    # Check again after authentication, before the first native fragment lookup.
-    # Later renders retain this immutable namespace and cannot poison a new epoch.
-    unless defined?(@fragment_cache_snapshot_valid)
-      @fragment_cache_snapshot_valid = @response_cache_version == ResponseCache.instance.version
-    end
-    @fragment_cache_snapshot_valid
-  end
-
-  # Keep the class store (including shared rate limits) and Rails.cache unchanged.
-  def cache_store
-    FragmentCache.store
-  end
-
-  def combined_fragment_cache_key(key)
-    @fragment_cache_namespace ||= [
-      @response_cache_version, request.base_url, request.script_name, request.format.to_s, I18n.locale,
-      Current.user&.id, (Digest::SHA256.hexdigest(Current.session.token) if Current.session),
-      (Digest::SHA256.hexdigest(real_csrf_token) if request.format.html? || request.format.turbo_stream?)
-    ].freeze
-    super([ @fragment_cache_namespace, key ])
-  end
-
-  private
-    def capture_response_cache_version
-      # Capture for native HTML/JSON/stream renders too, even with page reuse off.
-      # Detached renderers do not run callbacks and therefore render uncached.
-      @response_cache_version = ResponseCache.instance.version
-    end
-
-    # Register after room authorization, but before presentation queries.
-    def cache_read_response
-      if cacheable_read_request?
-        token = form_authenticity_token
-        key = response_cache_key
-        original_session = session.to_hash.deep_dup
-
-        return yield if key.bytesize > ResponseCache::MAX_KEY_BYTES
-
-        entry = ResponseCache.instance.read(key, @response_cache_version)
-        rendered = false
-        unless entry
-          ResponseCache.instance.synchronize_render(key, @response_cache_version) do
-            entry = ResponseCache.instance.read(key, @response_cache_version)
-            if !entry && ResponseCache.instance.version == @response_cache_version
-              yield
-              rendered = true
-              cache_completed_response(key, original_session)
-            end
-          end
-        end
-
-        if entry
-          response.headers.merge!(entry[:headers])
-          self.response_body = entry[:body].gsub(entry[:marker], token)
-        elsif !rendered
-          # A queued request retains its pre-auth snapshot. If it has expired,
-          # render outside the stripe instead of blocking the next generation.
-          yield
-        end
-      else
-        yield
-      end
-    end
-
-    def cache_completed_response(key, original_session)
-      if response.status == 200 && response.media_type == "text/html" && session.to_hash == original_session
-        marker = "campfire-csrf-#{SecureRandom.hex(32)}"
-        # Replace only framework token attributes, never a matching token in
-        # message text. Postprocessing also leaves fragment caches untouched.
-        body = csrf_neutral_body(response.body, marker)
-        headers = response.headers.slice(*CACHE_HEADERS).to_h.freeze
-        ResponseCache.instance.write(key, @response_cache_version, { body: body.freeze, marker: marker.freeze, headers: headers }.freeze)
-      end
-    end
-
-    def cacheable_read_request?
-      ResponseCache.instance.budget.positive? && @response_cache_version && request.get? && request.format.html? && Current.session &&
-        !authenticated_by.bot_key? && flash.empty? &&
-        !request.headers["If-None-Match"] && !request.headers["If-Modified-Since"] &&
-        !Rails.application.config.content_security_policy_nonce_generator &&
-        !ActiveRecord::Base.connection.transaction_open?
-    end
-
-    def response_cache_key
-      ActiveSupport::JSON.encode([
-        controller_path, request.fullpath, request.base_url, request.user_agent,
-        request.headers["Accept"], request.headers["Turbo-Frame"], I18n.locale,
-        # Tokens are hydrated per request, including clients that replay an old
-        # cookie. Their raw CSRF secret does not select a presentation variant.
-        Current.user.id, Current.session.token, session.to_hash.except("_csrf_token"),
-        cookies.to_h.except("_campfire_session", "session_token")
-      ])
-    end
-
-    def csrf_neutral_body(body, marker)
-      body.gsub(CSRF_TAG) do |tag|
-        attribute = tag.start_with?("<meta") ? "content" : "value"
-        tag.sub(/\b#{attribute}="[^"]*"/, %(#{attribute}="#{marker}"))
-      end
-    end
-end
@@ -8,6 +8,6 @@ module SetCurrentRequest
  end

  def default_url_options
-    { host: Current.request_host, port: Current.request&.optional_port, protocol: Current.request_protocol }.compact_blank
+    { host: Current.request_host, protocol: Current.request_protocol }.compact_blank
  end
 end
@@ -36,7 +36,7 @@ class Messages::BoostsController < ApplicationController

    def broadcast_create
      @boost.broadcast_append_to @boost.message.room, :messages,
-        target: helpers.dom_id(@boost.message, :boosts), partial: "messages/boosts/boost", attributes: { maintain_scroll: true }
+        target: "boosts_message_#{@boost.message.client_message_id}", partial: "messages/boosts/boost", attributes: { maintain_scroll: true }
    end

    def broadcast_remove
@@ -37,7 +37,7 @@ class Messages::ByBotsController < MessagesController
    end

    def set_pagination_headers
-      headers["X-Total-Count"] = @room.messages_count.to_s
+      headers["X-Total-Count"] = @room.messages.count.to_s

      if next_page = next_page_params
        headers["Link"] = %(<#{room_bot_messages_url(@room, params[:bot_key], **next_page)}>; rel="next")
@@ -4,7 +4,6 @@ class MessagesController < ApplicationController
  before_action :set_room, except: :create
  before_action :set_message, only: %i[ show edit update destroy ]
  before_action :ensure_can_administer, only: %i[ edit update destroy ]
-  around_action :cache_read_response, only: :index

  layout false, only: :index

@@ -12,14 +11,7 @@ class MessagesController < ApplicationController
    @messages = find_paged_messages

    if @messages.any?
-      body = render_to_string(:index)
-      # Creator, body and boost edits can change HTML without touching messages.
-      # Masked CSRF tokens remain fresh while the presentation validator stays stable.
-      fresh_when etag: Digest::SHA256.hexdigest(csrf_neutral_body(body, "")), template: false
-      unless performed?
-        response.content_type = "text/html"
-        self.response_body = body
-      end
+      fresh_when @messages
    else
      head :no_content
    end
@@ -2,7 +2,6 @@ class RoomsController < ApplicationController
  before_action :set_room, only: %i[ show destroy ]
  before_action :ensure_can_administer, only: %i[ destroy ]
  before_action :remember_last_room_visited, only: :show
-  around_action :cache_read_response, only: :show

  def index
    redirect_to room_url(Current.user.rooms.last)
@@ -13,7 +12,7 @@ class RoomsController < ApplicationController
  end

  def destroy
-    @room.destroy_later
+    @room.destroy

    broadcast_remove_room
    redirect_to root_url
@@ -1,5 +1,4 @@
 class SearchesController < ApplicationController
-  around_action :cache_read_response, only: :index
  before_action :set_messages

  def index
@@ -21,7 +20,7 @@ class SearchesController < ApplicationController
  private
    def set_messages
      if query.present?
-        @messages = Message.search_reachable(Current.user, query)
+        @messages = Current.user.reachable_messages.search(query).with_presentation.last_page_of(100)
      else
        @messages = Message.none
      end
@@ -1,9 +1,8 @@
 class UnfurlLinksController < ApplicationController
-  # The pasted link decides which hosts an unfurl looks up and fetches from, and how quickly they answer.
-  DEADLINE = 10.seconds
-
  def create
-    if opengraph = unfurl(url_param)
+    opengraph = Opengraph::Metadata.from_url(url_param)
+
+    if opengraph.valid?
      render json: opengraph
    else
      head :no_content
@@ -14,14 +13,4 @@ class UnfurlLinksController < ApplicationController
    def url_param
      params.require(:url)
    end
-
-    # One deadline for everything the link leads to: DNS lookups, redirects, the page, the image check.
-    def unfurl(url)
-      Timeout.timeout(DEADLINE) do
-        Opengraph::Metadata.from_url(url).then { |opengraph| opengraph if opengraph.valid? }
-      end
-    rescue Timeout::Error
-      Rails.logger.warn "Gave up unfurling #{url} after #{DEADLINE.inspect}"
-      nil
-    end
 end
@@ -1,11 +1,9 @@
 class Users::SidebarsController < ApplicationController
  DIRECT_PLACEHOLDERS = 20
-  around_action :cache_read_response, only: :show

  def show
-    visible_memberships = Current.user.memberships.visible
-    @direct_memberships = visible_memberships.with_direct_rooms
-    @other_memberships  = visible_memberships.with_ordered_room.without_direct_rooms
+    @direct_memberships, @other_memberships = Current.user.memberships.visible.with_ordered_room.partition { |membership| membership.room.direct? }
+    @direct_memberships = @direct_memberships.sort_by { |membership| membership.room.updated_at }.reverse

    @direct_placeholder_users = find_direct_placeholder_users
  end
@@ -17,16 +17,11 @@ class Messages::AttachmentPresentation
    attr_reader :message, :context
    delegate :tag, :link_to, :broadcast_image_tag, :rails_blob_path, :url_for, to: :context

-    # Previews are made when the message is posted, within limits. One that wasn't, because the file was too large or
-    # the preview failed, isn't attempted again from here: its URL would make it on every view.
    def render_preview
-      case
-      when message.attachment.video?
+      if message.attachment.video?
        video_preview_tag
-      when message.attachment.representation(:thumb).processed?
-        lightboxed_image_preview_tag
      else
-        render_link
+        lightboxed_image_preview_tag
      end
    end

@@ -35,17 +30,11 @@ class Messages::AttachmentPresentation

      inline_media_dimension_constraints(width, height) do
        tag.video \
-          src: rails_blob_path(message.attachment), poster: video_poster_url,
+          src: rails_blob_path(message.attachment), poster: url_for(message.attachment.preview(format: :webp, resize_to_limit: [ Message::THUMBNAIL_MAX_WIDTH, Message::THUMBNAIL_MAX_HEIGHT ])),
          controls: true, preload: :none, width: "100%", height: "100%", class: "message__attachment"
      end
    end

-    # A preview is processed once the frame is drawn, but the poster is a variant of that frame, which can fail on its own.
-    def video_poster_url
-      poster = message.attachment.preview(:poster)
-      url_for(poster) if poster.processed? && poster.image.variant(poster.variation).processed?
-    end
-
    def lightboxed_image_preview_tag
      width, height = preview_dimensions

@@ -36,7 +36,6 @@ module MessagesHelper
        controller: "reply",
        user_id: message.creator_id,
        message_id: message.id,
-        client_message_id: message.client_message_id,
        message_timestamp: message_timestamp_milliseconds,
        message_updated_at: message.updated_at.to_fs(:epoch),
        sort_value: message_timestamp_milliseconds,
@@ -46,7 +46,6 @@ export default class extends Controller {
  }

  messageTargetConnected(target) {
-    this.#reconcilePendingMessage(target)
    this.#formatter.format(target, ThreadStyle.thread)
  }

@@ -126,25 +125,6 @@ export default class extends Controller {

  // Internal

-  // The composer inserts a pending message client-side using the client_message_id
-  // as its DOM id. The server broadcast now renders the real message with a DOM id
-  // derived from the record's primary key, so it no longer replaces the pending
-  // element by id. Reconcile by matching the server message's client_message_id and
-  // dropping our own pending placeholder. Only elements flagged data-pending-message
-  // (client-side placeholders, never broadcast) are removed, so a message another
-  // member posted reusing this client_message_id can never displace a real one.
-  #reconcilePendingMessage(target) {
-    const clientMessageId = target.dataset.clientMessageId
-
-    if (target.dataset.messageId && clientMessageId) {
-      const selector = `[data-pending-message][data-client-message-id="${CSS.escape(clientMessageId)}"]`
-
-      this.messagesTarget.querySelectorAll(selector).forEach((pending) => {
-        if (pending !== target) pending.remove()
-      })
-    }
-  }
-
  async #ensureUpToDate() {
    if (!this.#paginator.upToDate) {
      await this.#paginator.resetToLastPage()
@@ -16,7 +16,7 @@ export default class extends Controller {
    })
  }

-  #read = ({ room_id, at }) => {
-    this.dispatch("read", { detail: { roomId: room_id, at } })
+  #read = ({ room_id }) => {
+    this.dispatch("read", { detail: { roomId: room_id } })
  }
 }
@@ -7,13 +7,8 @@ export default class extends Controller {
  static classes = [ "unread" ]

  #disconnected = true
-  #connection = 0
-  #discardDirectEditor = false
-  #readAt = new Map()

  async connect() {
-    this.element.addEventListener("turbo:click", this.#directNavigation)
-    this.element.addEventListener("turbo:before-frame-render", this.#preserveDirectEditor)
    this.channel ??= await cable.subscribeTo({ channel: "UnreadRoomsChannel" }, {
      connected: this.#channelConnected.bind(this),
      disconnected: this.#channelDisconnected.bind(this),
@@ -22,11 +17,7 @@ export default class extends Controller {
  }

  disconnect() {
-    this.element.removeEventListener("turbo:click", this.#directNavigation)
-    this.element.removeEventListener("turbo:before-frame-render", this.#preserveDirectEditor)
-    this.#discardDirectEditor = false
    ignoringBriefDisconnects(this.element, () => {
-      this.#channelDisconnected()
      this.channel?.unsubscribe()
      this.channel = null
    })
@@ -36,58 +27,19 @@ export default class extends Controller {
    this.read({ detail: { roomId: Current.room.id } })
  }

-  read({ detail: { roomId, at } }) {
+  read({ detail: { roomId } }) {
    const room = this.#findRoomTarget(roomId)

-    if (at) {
-      this.#readAt.set(Number(roomId), Math.max(Number(at), this.#readAt.get(Number(roomId)) ?? 0))
-    }
-
    if (room) {
      room.classList.remove(this.unreadClass)
      this.dispatch("read", { detail: { targetId: roomId } })
    }
  }

-  // Preserve the live picker through background refreshes, but allow deliberate navigation.
-  #directNavigation = event => {
-    if (event.target.closest("a")?.dataset.turboFrame === this.element.id) {
-      this.#discardDirectEditor = true
-    }
-  }
-
-  #preserveDirectEditor = event => {
-    if (event.target !== this.element) return
-    const discard = this.#discardDirectEditor
-    this.#discardDirectEditor = false
-    if (discard) return
-
-    const current = this.element.querySelector("#direct_rooms_control")
-    const incoming = event.detail.newFrame.querySelector("#direct_rooms_control")
-    if (!current?.querySelector('[data-autocomplete-target="input"]') || !incoming) return
-
-    // Turbo's Bardo moves the actual element, keeping input, selections and controllers.
-    const controls = [ current, incoming ].map(element => [ element, element.hasAttribute("data-turbo-permanent") ])
-    for (const [ element ] of controls) element.setAttribute("data-turbo-permanent", "")
-    const render = event.detail.render
-    event.detail.render = (...args) => {
-      try {
-        return render(...args)
-      } finally {
-        for (const [ element, permanent ] of controls) element.toggleAttribute("data-turbo-permanent", permanent)
-      }
-    }
-  }
-
-  async #channelConnected() {
+  #channelConnected() {
    if (this.#disconnected) {
      this.#disconnected = false
-      const connection = ++this.#connection
-      // Reloading an unfinished frame aborts its response body reader.
-      await this.element.loaded
-      if (this.element.isConnected && !this.#disconnected && connection === this.#connection) {
-        this.element.reload()
-      }
+      this.element.reload()
    }
  }

@@ -95,11 +47,11 @@ export default class extends Controller {
    this.#disconnected = true
  }

-  #unread({ roomId, at }) {
+  #unread({ roomId }) {
    const unreadRoom = this.#findRoomTarget(roomId)

    if (unreadRoom) {
-      if (Current.room.id != roomId && !this.#readSince(roomId, at)) {
+      if (Current.room.id != roomId) {
        unreadRoom.classList.add(this.unreadClass)
      }

@@ -107,12 +59,6 @@ export default class extends Controller {
    }
  }

-  // Notices fan out one member at a time, so one can arrive after the member has already
-  // read the room in another tab. It still reorders the room, but doesn't mark it unread.
-  #readSince(roomId, at) {
-    return Number(at) <= this.#readAt.get(Number(roomId))
-  }
-
  #findRoomTarget(roomId) {
    return this.roomTargets.find(roomTarget => roomTarget.dataset.roomId == roomId)
  }
@@ -1,5 +0,0 @@
-class Message::BroadcastUnreadRoomJob < ApplicationJob
-  def perform(message)
-    message.broadcast_unread_room
-  end
-end
@@ -1,8 +0,0 @@
-class Room::DestroyJob < ApplicationJob
-  discard_on ActiveJob::DeserializationError
-
-  def perform(room, former_member_ids)
-    room.reset_remote_connections_of(former_member_ids)
-    room.destroy_one_message_at_a_time
-  end
-end
@@ -1,9 +0,0 @@
-# Native view caches share one byte budget across every database generation.
-class FragmentCache
-  STORE = ActiveSupport::Cache::MemoryStore.new(size: 64.megabytes)
-  private_constant :STORE
-
-  def self.store
-    STORE
-  end
-end
@@ -9,8 +9,7 @@ class Membership < ApplicationRecord
  enum :involvement, %w[ invisible nothing mentions everything ].index_by(&:itself), prefix: :involved_in

  scope :with_ordered_room, -> { includes(:room).joins(:room).order("LOWER(rooms.name)") }
-  scope :with_direct_rooms, -> { includes(:room).joins(:room).merge(Room.directs).order(rooms: { updated_at: :desc }) }
-  scope :without_direct_rooms, -> { joins(:room).merge(Room.without_directs) }
+  scope :without_direct_rooms, -> { joins(:room).where.not(room: { type: "Rooms::Direct" }) }

  scope :visible, -> { where.not(involvement: :invisible) }
  scope :unread,  -> { where.not(unread_at: nil) }
@@ -24,6 +24,10 @@ class Message < ApplicationRecord
    body.to_plain_text.presence || attachment&.filename&.to_s || ""
  end

+  def to_key
+    [ client_message_id ]
+  end
+
  def content_type
    case
    when attachment?    then "attachment"
@@ -4,14 +4,9 @@ module Message::Attachment
  THUMBNAIL_MAX_WIDTH = 1200
  THUMBNAIL_MAX_HEIGHT = 800

-  # Decoding a picture, or a video's frame, costs in proportion to its pixels, however small the file. The largest
-  # phone photos have 200 million.
-  THUMBNAIL_MAX_PIXELS = 250_000_000
-
  included do
    has_one_attached :attachment do |attachable|
      attachable.variant :thumb, resize_to_limit: [ THUMBNAIL_MAX_WIDTH, THUMBNAIL_MAX_HEIGHT ]
-      attachable.variant :poster, format: :webp, resize_to_limit: [ THUMBNAIL_MAX_WIDTH, THUMBNAIL_MAX_HEIGHT ]
    end
  end

@@ -35,25 +30,12 @@ module Message::Attachment
      attachment&.analyze
    end

-    # A file that ffmpeg or libvips can't decode is still the message: post it without a preview.
    def process_attachment_thumbnail
-      return if too_many_pixels_to_preview?
-
      case
      when attachment.video?
-        attachment.preview(:poster).processed
+        attachment.preview(format: :webp).processed
      when attachment.representable?
        attachment.representation(:thumb).processed
      end
-    rescue ActiveStorage::PreviewError, Vips::Error => error
-      Rails.logger.warn "Posted #{attachment.filename} without a preview: #{error.class}: #{error.message.lines.first&.chomp}"
-    end
-
-    # Without a size, the analyzer couldn't read the file's header, and the previewer wouldn't either.
-    def too_many_pixels_to_preview?
-      if attachment.image? || attachment.video?
-        width, height = attachment.metadata.values_at(:width, :height)
-        width.nil? || height.nil? || width * height > THUMBNAIL_MAX_PIXELS
-      end
    end
 end
@@ -1,29 +1,21 @@
 module Message::Broadcasts
  def broadcast_create
    broadcast_append_to room, :messages, target: [ room, :messages ]
-    broadcast_unread_room_later
+    broadcast_unread_room
  end

  def broadcast_remove
    broadcast_remove_to room, :messages
  end

-  # Fanned out to the room's members rather than published on one global stream, so
-  # that the timing of activity in a room only reaches people who are in it. Of those,
-  # only the ones who still have it unread or are in it now: by the time this runs,
-  # someone may have opened the room and moved on, and would see it marked unread again.
-  def broadcast_unread_room
-    payload = ActiveSupport::JSON.encode(roomId: room.id, at: created_at.to_f)
-
-    room.memberships.unread.or(room.memberships.connected).pluck(:user_id).each do |user_id|
-      ActionCable.server.broadcast UnreadRoomsChannel.stream_name_for(user_id), payload, coder: nil
-    end
-  end
-
  private
-    # The fanout is one publish per member, which in a big room takes far longer than the
-    # rest of posting a message, so it runs in a job rather than while the poster waits.
-    def broadcast_unread_room_later
-      Message::BroadcastUnreadRoomJob.perform_later(self)
+    # Fanned out to the room's members rather than published on one global stream, so
+    # that the timing of activity in a room only reaches people who are in it.
+    def broadcast_unread_room
+      payload = ActiveSupport::JSON.encode(roomId: room.id)
+
+      room.memberships.pluck(:user_id).each do |user_id|
+        ActionCable.server.broadcast UnreadRoomsChannel.stream_name_for(user_id), payload, coder: nil
+      end
    end
 end
@@ -36,10 +36,7 @@ module Message::Pagination
    scope :page_after, ->(message) { after(message).first_page }

    scope :page_created_since, ->(time) { where("created_at > ?", time).first_page }
-    # Sorting on +created_at, which no index covers, has SQLite find the few messages updated since
-    # through (room_id, updated_at) and sort just those, instead of walking the whole room by
-    # (room_id, created_at) looking for them.
-    scope :page_updated_since, ->(time) { Page.load(where("updated_at > ?", time).reorder(Arel.sql("+messages.created_at")), :last, PAGE_SIZE) }
+    scope :page_updated_since, ->(time) { where("updated_at > ?", time).last_page }
  end

  class_methods do
@@ -52,7 +49,7 @@ module Message::Pagination
    end

    def paged?
-      offset(PAGE_SIZE).exists?
+      count > PAGE_SIZE
    end
  end
 end
@@ -3,8 +3,7 @@ module Message::Searchable

  included do
    after_create_commit  :create_in_index
-    before_update        -> { @attachment_replaced = attachment_changes.key?("attachment") }
-    after_update_commit  :update_in_index, if: :indexed_text_changed?
+    after_update_commit  :update_in_index
    after_destroy_commit :remove_from_index

    scope :search, ->(query) { joins("join message_search_index idx on messages.id = idx.rowid").where("idx.body match ?", match_terms(query)).ordered }
@@ -18,43 +17,11 @@ module Message::Searchable
    end
  end

-  class_methods do
-    def search_reachable(user, query, size: 100)
-      relation = user.reachable_messages.search(query).with_presentation
-      probe = connection.select_rows(sanitize_sql([ <<~SQL, user.id, match_terms(query) ]))
-        SELECT m.id, mm.user_id IS NOT NULL FROM message_search_index idx
-        JOIN messages m ON m.id = idx.rowid
-        LEFT JOIN memberships mm ON mm.room_id = m.room_id AND mm.user_id = ?
-        WHERE idx.body MATCH ? ORDER BY idx.rowid DESC LIMIT 1000
-      SQL
-      ids = probe.filter_map { |id, reachable| id if reachable == 1 }.first(size)
-
-      # A scoped fallback preserves older reachable hits behind a large private history.
-      if ids.size < size && probe.size == 1000
-        relation.last_page_of_matches(size)
-      else
-        Message::Pagination::Page.load(relation.where(id: ids).reorder(:id), :last, size)
-      end
-    end
-
-    # Orders by the index's rowid, which is the message id, so SQLite walks the full-text index
-    # newest first and stops at the page. Ordering by created_at sorted every match before paging.
-    def last_page_of_matches(size)
-      Message::Pagination::Page.load(reorder("idx.rowid"), :last, size)
-    end
-  end
-
  private
    def create_in_index
      execute_sql_with_binds "insert into message_search_index(rowid, body) values (?, ?)", id, plain_text_body
    end

-    # Boosts touch their message too: rewrite the index only when the body was saved or the attachment replaced.
-    # Active Storage clears attachment_changes in its own after_commit, before this one runs.
-    def indexed_text_changed?
-      association(:rich_text_body).target&.saved_change_to_body? || @attachment_replaced
-    end
-
    def update_in_index
      execute_sql_with_binds "update message_search_index set body = ? where rowid = ?", plain_text_body, id
    end
@@ -5,7 +5,6 @@ class Opengraph::Fetch
  ALLOWED_DOCUMENT_CONTENT_TYPE = "text/html"
  MAX_BODY_SIZE = 5.megabytes
  MAX_REDIRECTS = 10
-  TIMEOUT = 7.seconds # to connect (TLS included), and for each read and write, as Webhook does

  class TooManyRedirectsError < StandardError; end
  class RedirectDeniedError < StandardError; end
@@ -23,11 +22,9 @@ class Opengraph::Fetch
  end

  private
-    # The timeouts bound each operation. A host can still send its headers or body a byte at a time,
-    # in as many reads as it likes: UnfurlLinksController puts the whole unfurl under one deadline.
    def request(url, request_class, ip:)
      MAX_REDIRECTS.times do
-        Net::HTTP.start(url.host, url.port, ipaddr: ip, use_ssl: url.scheme == "https", **timeouts) do |http|
+        Net::HTTP.start(url.host, url.port, ipaddr: ip, use_ssl: url.scheme == "https") do |http|
          http.request request_class.new(url) do |response|
            if response.is_a?(Net::HTTPRedirection)
              url, ip = resolve_redirect(response["location"])
@@ -41,11 +38,6 @@ class Opengraph::Fetch
      raise TooManyRedirectsError
    end

-    # Without max_retries: 0, Net::HTTP sends a GET or HEAD that timed out a second time.
-    def timeouts
-      { open_timeout: TIMEOUT, read_timeout: TIMEOUT, write_timeout: TIMEOUT, max_retries: 0 }
-    end
-
    def resolve_redirect(location)
      url = URI.parse(location)
      raise RedirectDeniedError unless url.is_a?(URI::HTTP)
@@ -14,9 +14,9 @@ class Push::Subscription < ApplicationRecord
  validates :endpoint, presence: true
  validate :validate_endpoint_url

-  def notification(badge: user.memberships.unread.count, **params)
+  def notification(**params)
    # Defer DNS lookup to the delivery worker to prevent rebinding
-    WebPush::Notification.new(**params, badge: badge, endpoint: endpoint, endpoint_ip_resolver: method(:resolved_endpoint_ip), p256dh_key: p256dh_key, auth_key: auth_key)
+    WebPush::Notification.new(**params, badge: user.memberships.unread.count, endpoint: endpoint, endpoint_ip_resolver: method(:resolved_endpoint_ip), p256dh_key: p256dh_key, auth_key: auth_key)
  end

  # Validate at point of use, not just when saved.
@@ -1,98 +0,0 @@
-require "sqlite3"
-
-# A read-only observer sees commits from every writer, including other runtimes.
-# PRAGMA data_version can only be compared on the same persistent connection.
-class ResponseCache
-  MAX_ENTRY_BYTES = 1.megabyte
-  MAX_KEY_BYTES = 2.kilobytes
-
-  def self.instance
-    INSTANCE
-  end
-
-  def initialize
-    @mutex = Mutex.new
-    @entries = {}
-    @bytes = 0
-    @render_locks = Array.new(16) { Mutex.new }
-  end
-
-  def budget
-    [ ENV.fetch("CAMPFIRE_RESPONSE_CACHE_MB", "64").to_i, 0 ].max.megabytes
-  end
-
-  def version
-    @mutex.synchronize { current_version }
-  rescue SQLite3::Exception
-    clear
-    nil
-  end
-
-  def read(key, version)
-    @mutex.synchronize do
-      @entries[key]&.first if current_version == version
-    end
-  rescue SQLite3::Exception
-    clear
-    nil
-  end
-
-  # Collapse cold renders without retaining a mutex for every viewer or URL.
-  # Rendering must never hold the observer/entry mutex: controllers read it too.
-  def synchronize_render(key, version, &block)
-    @render_locks[[ key, version ].hash % @render_locks.length].synchronize(&block)
-  end
-
-  def write(key, version, entry)
-    size = key.bytesize + entry[:body].bytesize + entry[:headers].sum { |name, value| name.bytesize + value.bytesize } + 256
-    return if key.bytesize > MAX_KEY_BYTES || size > [ budget, MAX_ENTRY_BYTES ].min
-
-    @mutex.synchronize do
-      return unless current_version == version
-      return if @entries.key?(key)
-
-      while @entries.any? && @bytes + size > budget
-        _, (_, removed_size) = @entries.shift
-        @bytes -= removed_size
-      end
-      @entries[key] = [ entry, size ]
-      @bytes += size
-    end
-  rescue SQLite3::Exception
-    clear
-  end
-
-  def clear
-    @mutex.synchronize do
-      @entries.clear
-      @bytes = 0
-      @observer&.close
-      @observer = @database = @version = nil
-    end
-  end
-
-  private
-    def current_version
-      database = File.expand_path(ActiveRecord::Base.connection_db_config.database)
-      if @database != database || !@observer
-        @entries.clear
-        @bytes = 0
-        @observer&.close
-        @observer = nil
-        @observer = SQLite3::Database.new(database, readonly: true)
-        @database = database
-        @namespace = SecureRandom.hex(16)
-        @version = nil
-      end
-
-      version = @observer.get_first_value("PRAGMA data_version")
-      if @version != version
-        @entries.clear
-        @bytes = 0
-        @version = version
-      end
-      [ @database, @namespace, @version ]
-    end
-
-  INSTANCE = new
-end
@@ -45,34 +45,6 @@ class Room < ApplicationRecord
    end
  end

-  # Takes the room away from its members at once, and leaves its messages to Room::DestroyJob. Destroying them in
-  # the room's own transaction held the database's write lock, and stopped every other write, until the last one.
-  # An open room is closed first, so that no one who joins the account before the job runs is let in.
-  def destroy_later
-    room = open? ? becomes!(Rooms::Closed) : self
-
-    former_member_ids = transaction do
-      room.save!
-      room.memberships.pluck(:user_id).tap { room.memberships.delete_all }
-    end
-
-    Room::DestroyJob.perform_later(room, former_member_ids)
-  end
-
-  # Deleting the memberships skips the reset that revoking one does, so the former members get it here, all at once,
-  # before the messages go: their connections stop receiving the room's streams. It's done in the job, not the
-  # request, because it costs a Redis round trip per member.
-  def reset_remote_connections_of(user_ids)
-    User.where(id: user_ids).find_each(&:reset_remote_connections)
-  end
-
-  # Each message is destroyed in its own transaction, so other writes get through in between. Any message posted
-  # meanwhile goes with the room.
-  def destroy_one_message_at_a_time
-    messages.find_each(&:destroy)
-    destroy
-  end
-
  def receive(message)
    unread_memberships(message)
    push_later(message)
@@ -53,12 +53,9 @@ class Room::MessagePusher
      relevant_subscriptions.merge(Membership.involved_in_mentions).where(user_id: mentionees.ids)
    end

-    # Banning keeps the user's subscriptions, so that unbanning brings their notifications back,
-    # but nobody who can't sign in should be sent what's said in their rooms meanwhile.
    def relevant_subscriptions
      Push::Subscription
        .joins(user: :memberships)
-        .merge(User.active)
        .merge(Membership.visible.disconnected.where(room: room).where.not(user: message.creator))
    end

@@ -1,99 +0,0 @@
-# Keeps rooms.messages_count correct for ordinary SQLite writes — Rails, bulk SQL,
-# and foreign connections — without ActiveRecord counter_cache callbacks that
-# those paths skip (and that would double-count if combined with triggers).
-# Foreign REPLACE writes require PRAGMA recursive_triggers=ON so SQLite also
-# fires the delete trigger. Migrations rebuilding messages must call ensure!
-# before reading counters inside that migration; database tasks repair afterwards.
-class Room::MessagesCount
-  INSERT_TRIGGER = "messages_ai_rooms_messages_count"
-  DELETE_TRIGGER = "messages_ad_rooms_messages_count"
-  UPDATE_TRIGGER = "messages_au_rooms_messages_count"
-  TRIGGERS = [ INSERT_TRIGGER, DELETE_TRIGGER, UPDATE_TRIGGER ].freeze
-
-  class << self
-    def install!(connection = ActiveRecord::Base.connection)
-      with_immediate_write(connection) do
-        replace_triggers!(connection)
-      end
-    end
-
-    def uninstall!(connection = ActiveRecord::Base.connection)
-      TRIGGERS.each do |name|
-        connection.execute("DROP TRIGGER IF EXISTS #{name}")
-      end
-    end
-
-    def backfill!(connection = ActiveRecord::Base.connection)
-      connection.execute <<~SQL
-        UPDATE rooms SET messages_count = (
-          SELECT COUNT(*) FROM messages WHERE messages.room_id = rooms.id
-        )
-      SQL
-    end
-
-    # schema.rb does not dump SQLite triggers; reinstall after schema:load.
-    # Repair rechecks, rebuilds counts, and installs triggers in one write txn
-    # so concurrent writers and concurrent boot repairs cannot observe a gap.
-    def ensure!(connection = ActiveRecord::Base.connection)
-      return unless connection.adapter_name.match?(/sqlite/i)
-      return unless connection.data_source_exists?(:rooms)
-      return unless connection.column_exists?(:rooms, :messages_count)
-      return if triggers_installed?(connection)
-
-      with_immediate_write(connection) do
-        next if triggers_installed?(connection)
-
-        uninstall!(connection)
-        backfill!(connection)
-        create_triggers!(connection)
-      end
-    end
-
-    def trigger_installed?(connection, name)
-      connection.select_value(
-        "SELECT 1 FROM sqlite_master WHERE type = 'trigger' AND name = #{connection.quote(name)}"
-      ).present?
-    end
-
-    def triggers_installed?(connection = ActiveRecord::Base.connection)
-      TRIGGERS.all? { |name| trigger_installed?(connection, name) }
-    end
-
-    private
-      def with_immediate_write(connection)
-        if connection.transaction_open?
-          yield
-        else
-          connection.raw_connection.transaction(:immediate) { yield }
-        end
-      end
-
-      def replace_triggers!(connection)
-        uninstall!(connection)
-        create_triggers!(connection)
-      end
-
-      def create_triggers!(connection)
-        connection.execute <<~SQL
-          CREATE TRIGGER #{INSERT_TRIGGER} AFTER INSERT ON messages
-          BEGIN
-            UPDATE rooms SET messages_count = messages_count + 1 WHERE id = NEW.room_id;
-          END
-        SQL
-        connection.execute <<~SQL
-          CREATE TRIGGER #{DELETE_TRIGGER} AFTER DELETE ON messages
-          BEGIN
-            UPDATE rooms SET messages_count = messages_count - 1 WHERE id = OLD.room_id;
-          END
-        SQL
-        connection.execute <<~SQL
-          CREATE TRIGGER #{UPDATE_TRIGGER} AFTER UPDATE OF room_id ON messages
-          WHEN OLD.room_id IS NOT NEW.room_id
-          BEGIN
-            UPDATE rooms SET messages_count = messages_count - 1 WHERE id = OLD.room_id;
-            UPDATE rooms SET messages_count = messages_count + 1 WHERE id = NEW.room_id;
-          END
-        SQL
-      end
-  end
-end
@@ -7,15 +7,12 @@ class Rooms::Direct < Room
    end

    private
-      # Among the first user's rooms, the one whose members are exactly these users: as many
-      # memberships as users, and all of them theirs.
+      # FIXME: Find a more performant algorithm that won't be a problem on accounts with 10K+ direct rooms,
+      # which could be to store the membership id list as a hash on the room, and use that for lookup.
      def find_for(users)
-        user_ids = users.pluck(:id).uniq
-
-        where(id: Membership.where(user_id: user_ids.first).select(:room_id))
-          .joins(:memberships).group(:id)
-          .having("COUNT(*) = :size AND COUNT(CASE WHEN memberships.user_id IN (:user_ids) THEN 1 END) = :size", size: user_ids.size, user_ids: user_ids)
-          .first
+        all.joins(:users).detect do |room|
+          Set.new(room.user_ids) == Set.new(users.pluck(:id))
+        end
      end
  end

@@ -50,18 +50,8 @@ class User < ApplicationRecord
  end

  private
-    # One statement, which SQLite runs under the write lock, so no room is closed between reading the open ones and
-    # inserting. A room that Room#destroy_later closes is either closed before, and skipped, or after, and takes this
-    # membership away with the others. A room that granted itself to every user when it was created is skipped too,
-    # as insert_all did.
    def grant_membership_to_open_rooms
-      now = Time.current
-
-      Membership.connection.execute Membership.sanitize_sql([ <<~SQL, id, now, now ])
-        insert into memberships (room_id, user_id, created_at, updated_at)
-        select id, ?, ?, ? from rooms where type = 'Rooms::Open'
-        on conflict do nothing
-      SQL
+      Membership.insert_all(Rooms::Open.pluck(:id).collect { |room_id| { room_id: room_id, user_id: id } })
    end

    def deactived_email_address
@@ -1,11 +1,6 @@
 module User::Bannable
  extend ActiveSupport::Concern

-  included do
-    # Administrators still see banned users, so they can lift the ban.
-    scope :visible_to, ->(user) { user.can_administer? ? where(status: %i[ active banned ]) : active }
-  end
-
  def ban
    transaction do
      create_bans_from_sessions
@@ -11,11 +11,6 @@ module User::Mentionable
    "users/mention"
  end

-  # How a mention appears inside the editor, matching the prompt's editor template.
-  def to_editor_content_attachment_partial_path
-    "users/mention"
-  end
-
  def attachable_plain_text_representation(caption)
    "@#{name}"
  end
@@ -63,7 +63,7 @@ class Webhook < ApplicationRecord
    end

    def extract_attachment_from(response)
-      if response.code == "200" && response.content_type && mime_type = Mime::Type.lookup(response.content_type)
+      if response.content_type && mime_type = Mime::Type.lookup(response.content_type)
        ActiveStorage::Blob.create_and_upload! \
          io: StringIO.new(response.body), filename: "attachment.#{mime_type.symbol}", content_type: mime_type.to_s
      end
@@ -76,9 +76,10 @@
        <% end %>

        <label class="switch">
-          <%= tag.input type: "checkbox", class: "switch__input",
-                checked: Current.account.settings.restrict_room_creation_to_administrators?,
-                data: { action: "change->form#submit" } %>
+          <input type="checkbox"
+                class="switch__input"
+                <%= "checked" if Current.account.settings.restrict_room_creation_to_administrators? %>
+                data-action="change->form#submit">
          <span class="switch__btn round"></span>
          <span class="for-screen-reader">
            Must be admin to create new rooms
@@ -101,11 +102,11 @@
      <turbo-frame id="account_users">
        <%= render partial: "accounts/users/user", collection: @administrators, as: :user %>

-        <% if @administrators.any? && @page.records.any? %>
+        <% if @administrators.any? && @members.any? %>
          <hr class="separator full-width" style="--border-style: solid">
        <% end %>

-        <%= render partial: "accounts/users/user", collection: @page.records, as: :user %>
+        <%= render partial: "accounts/users/user", collection: @members, as: :user %>
        <%= render "accounts/users/next_page_container", page: @page.next_param unless @page.last? %>
      </turbo-frame>
    </menu>
@@ -1,13 +0,0 @@
-<%# Files are posted as a message's own attachment, which gets its preview when it's posted; the composer adds none to
-    the rich text. One that's there anyway is shown by its name, with no preview: Action Text's partial links to a URL
-    that makes one on view, and nothing else in the app would make it. %>
-<figure class="attachment attachment--file attachment--<%= blob.filename.extension %>">
-  <figcaption class="attachment__caption">
-    <% if caption = blob.try(:caption) %>
-      <%= caption %>
-    <% else %>
-      <span class="attachment__name"><%= blob.filename %></span>
-      <span class="attachment__size"><%= number_to_human_size blob.byte_size %></span>
-    <% end %>
-  </figcaption>
-</figure>
@@ -40,9 +40,9 @@
      <div class="flash" data-controller="element-removal" data-action="animationend->element-removal#remove">
        <div class="flash__inner shadow" style="<%= "--flash-background: var(--color-negative)" if flash[:alert] %>">
          <% if flash[:alert] %>
-            <%= image_tag "alert.svg", aria: { hidden: true }, size: 24, class: "colorize--white" %>
+            <%= image_tag "alert.svg", aria: { hidden: true }, size: 24, class: "colorize--white" %></span>
          <% else %>
-            <%= image_tag "check.svg", aria: { hidden: true }, size: 24, class: "colorize--white" %>
+            <%= image_tag "check.svg", aria: { hidden: true }, size: 24, class: "colorize--white" %></span>
          <% end %>
        </div>
        <span class="for-screen-reader" role="alert" aria-atomic="true"><%= notice %></span>
@@ -1,7 +1,7 @@
 <%# Be sure to check/update messages/_template.html.erb when changing this file %>

 <%# Bump this version when the message presentation filters change what they emit. Editing this line changes the template digest, which busts BOTH this fragment cache and the collection cache that keys on this partial's digest (helper Ruby changes alone don't). %>
-<% cache [ message, "presentation-v6" ] do %>
+<% cache [ message, "presentation-v3" ] do %>
  <%= message_tag message do %>
    <h2 class="message__day-separator"><%= local_datetime_tag message.created_at, style: :date %></h2>

@@ -2,8 +2,6 @@
  <div class="message message--me $messageClasses$"
      id="message_$clientMessageId$"
      data-format-message-target="message"
-      data-pending-message="true"
-      data-client-message-id="$clientMessageId$"
      data-user-id="<%= Current.user.id %>"
      data-message-timestamp="$messageTimestamp$"
      data-messages-target="message">
@@ -1,18 +1,20 @@
-<div id="<%= dom_id(boost) %>"
-    class="boost boost-item flex-inline postion--relative max-width align-center fill-white gap"
-    data-controller="boost-delete" data-boost-delete-perform-class="boost--deleting" data-boost-delete-reveal-class="expanded" data-boost-delete-booster-id-value="<%= boost.booster.id %>">
-  <figure class="avatar boost__avatar flex-item-no-shrink">
-    <%= avatar_tag boost.booster, aria: { label: "#{boost.booster.name} boosted #{boost.content}" } %>
-  </figure>
+<% cache boost do %>
+  <div id="<%= dom_id(boost) %>"
+      class="boost boost-item flex-inline postion--relative max-width align-center fill-white gap"
+      data-controller="boost-delete" data-boost-delete-perform-class="boost--deleting" data-boost-delete-reveal-class="expanded" data-boost-delete-booster-id-value="<%= boost.booster.id %>">
+    <figure class="avatar boost__avatar flex-item-no-shrink">
+      <%= avatar_tag boost.booster, aria: { label: "#{boost.booster.name} boosted #{boost.content}" } %>
+    </figure>

-  <%= tag.span boost.content, role: "button",
-        class: [ "txt-small", { "txt-medium": boost.content.all_emoji? } ],
-        data: { action: "click->boost-delete#reveal keydown.enter->boost-delete#reveal:prevent", boost_delete_target: "content" } %>
+    <%= tag.span boost.content, role: "button",
+          class: [ "txt-small", { "txt-medium": boost.content.all_emoji? } ],
+          data: { action: "click->boost-delete#reveal keydown.enter->boost-delete#reveal:prevent", boost_delete_target: "content" } %>

-  <%= button_to message_boost_path(boost.message, boost), method: :delete, data: { action: "boost-delete#perform", boost_delete_target: "button" },
-        class: "btn btn--negative flex-item-justify-end boost__delete" do %>
-    <%= image_tag "minus.svg", size: 20, aria: { hidden: "true" } %>
-    <span class="for-screen-reader">Delete this boost</span>
-  <% end %>
-</div>
-<span id="delete_boost_accessible_label" class="for-screen-reader">Press enter to delete this boost</span>
+    <%= button_to message_boost_path(boost.message, boost), method: :delete, data: { action: "boost-delete#perform", boost_delete_target: "button" },
+          class: "btn btn--negative flex-item-justify-end boost__delete" do %>
+      <%= image_tag "minus.svg", size: 20, aria: { hidden: "true" } %>
+      <span class="for-screen-reader">Delete this boost</span>
+    <% end %>
+  </div>
+  <span id="delete_boost_accessible_label" class="for-screen-reader">Press enter to delete this boost</span>
+<% end %>
@@ -2,7 +2,7 @@
  <div class="boosts flex flex-wrap align-center gap full-width" style="--column-gap: 0.4ch; --row-gap: 0"
      data-controller="turbo-streaming" data-action="turbo:submit-start->turbo-streaming#unsubscribe">
    <div class="flex-inline flex-wrap gap" id="<%= dom_id(message, :boosts) %>" data-turbo-streaming-target="container">
-      <%= render partial: "messages/boosts/boost", collection: message.boosts.loaded? ? message.boosts.sort_by(&:created_at) : message.boosts.ordered.includes(:booster) %>
+      <%= render partial: "messages/boosts/boost", collection: message.boosts.ordered, cached: true %>
    </div>

    <%= turbo_frame_tag message, :new_boost do %>
@@ -6,8 +6,8 @@
      <%= image_tag "disclosure.svg", aria: { hidden: "true" }, size: 10, class: "disclosure" %>
    </summary>

-    <% case %>
-      <% when platform.firefox? && platform.android? %>
+    <% case
+      when platform.firefox? && platform.android? %>
        <ol>
          <li>Tap <em><%= image_tag "lock.svg", alt: "the View site information button", size: 20 %></em> in the address bar.</li>
          <li>Tap <em>Notification</em> to change to <em>Allowed</em>.</li>
@@ -6,10 +6,10 @@
      <%= image_tag "disclosure.svg", aria: { hidden: "true" }, size: 10, class: "disclosure" %>
    </summary>

-    <% case %>
-      <% when platform.edge? %>
+    <% case
+      when platform.edge? %>
        <ol>
-          <li>Click <em><%= image_tag "external/install-edge.svg", alt: "the app available - install Campfire chat button", size: 16 %></em>in the address bar.</li>
+          <li>Click <em><%= image_tag "install-edge.svg", alt: "the app available - install Campfire chat button", size: 16 %></em>in the address bar.</li>
          <li>Click <em>Install</em>.</li>
        </ol>
      <% when platform.chrome? && platform.android? %>
@@ -5,8 +5,8 @@
    <%= image_tag "disclosure.svg", aria: { hidden: "true" }, size: 10, class: "disclosure" %>
  </summary>

-  <% case %>
-    <% when platform.firefox? && platform.android? %>
+  <% case
+    when platform.firefox? && platform.android? %>
      <ol>
        <li>Tap the <em><%= image_tag "menu-dots-vertical.svg", alt: "More options", size: 16 %></em> menu button.</li>
        <li>Tap <em>Settings</em>.</li>
@@ -1,2 +1 @@
-<%= auto_submit_form_with method: :put do %>
-<% end %>
+<%= auto_submit_form_with method: :put %>
@@ -22,6 +22,5 @@ CSRF disabling. Unread fanout excludes adapter I/O.
 The HTTP driver uses production Puma/Redis with one worker and five threads. Ruby threads
 each maintain a keep-alive connection, request uncompressed responses, and consume the
 whole body. Login uses normal CSRF protection; all warmup and measured responses must be
-HTTP 200 without transport errors, complete HTML, exact independently seeded message windows
-and the visible sidebar rooms; this applies to every warmup and measured response. Measurements exclude Thruster, TLS and gzip. Client
+HTTP 200 without transport errors. Measurements exclude Thruster, TLS and gzip. Client
 CPU, JIT warmup and GC can affect throughput; repeat runs and check client saturation.
@@ -3,7 +3,6 @@
 require "socket"
 require_relative "support"
 require_relative "http_client"
-require_relative "response_contract"

 include BenchmarkSupport
 options = parse_options("Compare HTTP throughput with Ruby keep-alive clients; every response must be HTTP 200.",
@@ -59,10 +58,9 @@ begin
      cookie = client.login(labels)
      results = {}
      paths.each do |name, path|
-        contract = BenchmarkResponseContract.new(name, File.join(data, "storage/db/production.sqlite3"), labels)
-        client.measure(path, cookie, concurrency: 1, duration: 3, contract: contract)
+        client.measure(path, cookie, concurrency: 1, duration: 3)
        concurrencies.each do |concurrency|
-          results["#{name}_#{concurrency}"] = client.measure(path, cookie, concurrency: concurrency, duration: options[:duration], contract: contract)
+          results["#{name}_#{concurrency}"] = client.measure(path, cookie, concurrency: concurrency, duration: options[:duration])
        end
      end
      write_json(File.join(options[:output], "#{side}-#{iteration + 1}.json"), results)
@@ -33,12 +33,12 @@ class BenchmarkHTTPClient
    cookie_header(cookies)
  end

-  def measure(path, cookie, concurrency:, duration:, contract:)
+  def measure(path, cookie, concurrency:, duration:)
    start = clock
    deadline = start + duration
    workers = Array.new(concurrency) do
      Thread.new do
-        result = { latencies: [], statuses: Hash.new(0), bytes: 0, errors: 0, invalid_responses: 0 }
+        result = { latencies: [], statuses: Hash.new(0), bytes: 0, errors: 0 }
        while clock < deadline
          begin
            connection.start do |http|
@@ -48,7 +48,6 @@ class BenchmarkHTTPClient
                result[:latencies] << (clock - requested) * 1000
                result[:statuses][response.code] += 1
                result[:bytes] += response.body.bytesize
-                result[:invalid_responses] += 1 unless contract.valid?(response)
              end
            end
          rescue IOError, SystemCallError, Timeout::Error, SocketError, Net::HTTPBadResponse
@@ -65,10 +64,9 @@ class BenchmarkHTTPClient
    statuses = Hash.new(0)
    samples.each { |sample| sample[:statuses].each { |status, count| statuses[status] += count } }
    errors = samples.sum { |sample| sample[:errors] }
-    invalid = samples.sum { |sample| sample[:invalid_responses] }
-    raise "#{path}: HTTP statuses #{statuses}, #{errors} transport errors, #{invalid} invalid bodies" unless errors.zero? && invalid.zero? && statuses.keys == [ "200" ]
+    raise "#{path}: HTTP statuses #{statuses}, #{errors} transport errors" unless errors.zero? && statuses.keys == [ "200" ]
    { path: path, conc: concurrency, gzip: false, secs: elapsed, rps: latencies.size / elapsed,
-      ok: latencies.size, statuses: statuses, errors: errors, invalid_responses: invalid, validation: "route-contract-v1",
+      ok: latencies.size, statuses: statuses, errors: errors,
      avg_bytes: samples.sum { |sample| sample[:bytes] } / latencies.size,
      latency_ms: { p50: percentile(latencies, 0.50), p95: percentile(latencies, 0.95), p99: percentile(latencies, 0.99) } }
  end
@@ -1,43 +0,0 @@
-require "json"
-require "open3"
-require "cgi"
-
-# Independent seed SQL determines the required result window before any response is sampled.
-class BenchmarkResponseContract
-  def initialize(kind, database, labels)
-    @kind = kind
-    room = Integer(labels.fetch("rooms.watercooler"))
-    user = labels.fetch("emails.david").gsub("'", "''")
-    @ids = case kind
-    when "room"
-      query(database, "SELECT id FROM messages WHERE room_id=#{room} ORDER BY created_at DESC LIMIT 40").reverse.map { |row| row.fetch("id") }
-    when "messages"
-      before = Integer(labels.fetch("messages.busy_060"))
-      query(database, "SELECT id FROM messages WHERE room_id=#{room} AND created_at<(SELECT created_at FROM messages WHERE id=#{before}) ORDER BY created_at DESC LIMIT 40").reverse.map { |row| row.fetch("id") }
-    when "search"
-      query(database, "SELECT m.id FROM message_search_index idx JOIN messages m ON m.id=idx.rowid JOIN memberships mm ON mm.room_id=m.room_id JOIN users u ON u.id=mm.user_id WHERE u.email_address='#{user}' AND idx.body MATCH 'coffee' ORDER BY m.id DESC LIMIT 100").reverse.map { |row| row.fetch("id") }
-    when "sidebar"
-      @names = query(database, "SELECT r.name FROM rooms r JOIN memberships mm ON mm.room_id=r.id JOIN users u ON u.id=mm.user_id WHERE u.email_address='#{user}' AND r.type='Rooms::Open' AND mm.involvement<>'invisible'").map { |row| CGI.escapeHTML(row.fetch("name")) }
-      nil
-    else
-      raise "Unknown route contract #{kind}"
-    end
-  end
-
-  def valid?(response)
-    body = response.body.to_s
-    return false unless response.code == "200" && response["content-type"].to_s.split(";").first == "text/html" &&
-      [ nil, "identity" ].include?(response["content-encoding"]) && !body.empty? && body.dup.force_encoding("UTF-8").valid_encoding?
-    return false if @kind != "messages" && !(body.lstrip.start_with?("<!DOCTYPE html>") && body.rstrip.end_with?("</html>"))
-    return false if @ids && body.scan(/data-message-id="(\d+)"/).flatten.map(&:to_i) != @ids
-    return false if @names && (!body.include?("shared_rooms") || @names.any? { |name| !body.include?(name) })
-    true
-  end
-
-  private
-    def query(database, sql)
-      output, errors, status = Open3.capture3("sqlite3", "-readonly", "-json", database, sql)
-      raise "Cannot read benchmark seed: #{errors}" unless status.success?
-      JSON.parse(output)
-    end
-end
@@ -1,71 +0,0 @@
-require "minitest/autorun"
-require "fileutils"
-require "socket"
-require "sqlite3"
-require "tmpdir"
-require_relative "http_client"
-require_relative "response_contract"
-
-class BenchmarkHTTPClientTest < Minitest::Test
-  def setup
-    @directory = Dir.mktmpdir("campfire-benchmark-test")
-    database = File.join(@directory, "seed.sqlite3")
-    SQLite3::Database.new(database).tap do |db|
-      db.execute("CREATE TABLE messages (id INTEGER PRIMARY KEY, room_id INTEGER, created_at TEXT)")
-      db.execute("INSERT INTO messages VALUES (42, 1, '2026-10-01'), (43, 1, '2026-10-02')")
-      db.close
-    end
-    @contract = BenchmarkResponseContract.new("room", database, "rooms.watercooler" => 1, "emails.david" => "david@example.com")
-    @body = '<!DOCTYPE html><html><article data-message-id="42">coffee</article><article data-message-id="43">meeting</article></html>'
-  end
-
-  def teardown
-    FileUtils.remove_entry(@directory)
-  end
-
-  def test_seeded_contract_rejects_error_pages_truncation_wrong_windows_and_encoding
-    assert @contract.valid?(response(@body))
-    refute @contract.valid?(response("Something went wrong"))
-    refute @contract.valid?(response(@body.delete_suffix("</html>")))
-    refute @contract.valid?(response(@body.sub('data-message-id="42"', 'data-message-id="99"')))
-    refute @contract.valid?(response(@body, "text/plain"))
-    refute @contract.valid?(response(@body + "\xFF".b))
-    refute @contract.valid?(response(@body, "text/html", "500"))
-  end
-
-  def test_intermittent_200_error_page_rejects_the_loaded_run
-    server = TCPServer.new("127.0.0.1", 0)
-    worker = Thread.new do
-      loop do
-        socket = server.accept
-        count = 0
-        while socket.gets
-          while (line = socket.gets) && line != "\r\n"
-          end
-          body = count % 8 == 0 ? "Something went wrong" : @body
-          count += 1
-          socket.write("HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nContent-Length: #{body.bytesize}\r\n\r\n#{body}")
-        end
-        socket.close
-      end
-    rescue IOError, SystemCallError
-      nil
-    end
-    client = BenchmarkHTTPClient.new("http://127.0.0.1:#{server.addr[1]}")
-    error = assert_raises(RuntimeError) { client.measure("/rooms/1", "", concurrency: 1, duration: 0.1, contract: @contract) }
-    assert_match(/HTTP statuses \{"200"\s*=>\s*\d+\}, 0 transport errors, [1-9]\d* invalid bodies/, error.message)
-  ensure
-    server&.close
-    worker&.kill
-    worker&.join
-  end
-
-  private
-    def response(body, type = "text/html", status = "200")
-      Net::HTTPResponse.new("1.1", status, "OK").tap do |result|
-        result["content-type"] = type
-        result.instance_variable_set(:@body, body)
-        result.instance_variable_set(:@read, true)
-      end
-    end
-end
@@ -80,5 +80,5 @@ Rails.application.configure do
  config.action_controller.raise_on_missing_callback_actions = true

  # Visit /rails/locks to see the locks
-  config.middleware.insert_before ActionDispatch::Executor, ActionDispatch::DebugLocks
+  config.middleware.insert_before Rack::Sendfile, ActionDispatch::DebugLocks
 end
@@ -1,20 +1,5 @@
-require "rails_ext/time_limited_video_previewer"
-
 ActiveSupport.on_load(:active_storage_blob) do
  ActiveStorage::DiskController.after_action only: :show do
    response.set_header("Cache-Control", "max-age=3600, public")
  end
 end
-
-Rails.application.configure do
-  # Rails' filter takes the second of the frames it selects (the first one, keyframes, scene changes), so a video
-  # with a single keyframe and no scene change is decoded to its end. Selecting any frame from 5 seconds on stops
-  # it there.
-  config.active_storage.video_preview_arguments =
-    "-vf 'select=eq(n\\,0)+eq(key\\,1)+gt(scene\\,0.015)+gte(t\\,5),loop=loop=-1:size=2,trim=start_frame=1'" \
-    " -frames:v 1 -f image2"
-
-  config.active_storage.previewers = config.active_storage.previewers.map do |previewer|
-    previewer == ActiveStorage::Previewer::VideoPreviewer ? TimeLimitedVideoPreviewer : previewer
-  end
-end
@@ -1,24 +0,0 @@
-require "jbuilder/jbuilder_template"
-
-# Jbuilder 2.14.1 uses Rails.cache directly; use the same bounded store as ERB
-# while retaining its native keys and controller instrumentation.
-module BoundedJbuilderFragments
-  private
-    def _read_fragment_cache(key, options = nil)
-      @context.controller.instrument_fragment_cache :read_fragment, key do
-        @context.controller.cache_store.read(key, options)
-      end
-    end
-
-    def _write_fragment_cache(key, options = nil)
-      @context.controller.instrument_fragment_cache :write_fragment, key do
-        yield.tap { |value| @context.controller.cache_store.write(key, value, options) }
-      end
-    end
-end
-
-JbuilderTemplate.prepend(BoundedJbuilderFragments)
-
-Rails.application.config.to_prepare do
-  ActionView::PartialRenderer.collection_cache = FragmentCache.store
-end
@@ -1,5 +0,0 @@
-# schema.rb cannot dump SQLite triggers. Cover existing DBs that lost them.
-Rails.application.config.after_initialize do
-  Room::MessagesCount.ensure!
-rescue ActiveRecord::NoDatabaseError, ActiveRecord::ConnectionNotEstablished
-end
@@ -6,11 +6,3 @@ if Rails.env.production? && ENV["SKIP_TELEMETRY"].blank?
    config.release = ENV["GIT_REVISION"]
  end
 end
-
-# sentry-rails declares its Action Cable handle_open and handle_close wrappers private,
-# but Rails 8.2 calls them from outside the connection, so every /cable connection fails.
-# Remove once sentry-rails ships getsentry/sentry-ruby#2972 (issue #2975).
-ActiveSupport.on_load(:action_cable_connection) do
-  require "sentry/rails/action_cable"
-  Sentry::Rails::ActionCableExtensions::Connection.send(:public, :handle_open, :handle_close)
-end
@@ -1,2 +1,2 @@
 # Used to match JavaScripts (new Date).getTime() for sorting
-ActiveSupport::TimeFormats.register(:epoch, ->(time) { (time.to_f * 1000).to_i })
+Time::DATE_FORMATS[:epoch] = ->(time) { (time.to_f * 1000).to_i }
@@ -1,5 +1,4 @@
 require "web-push"
-require "web_push/connections"
 require "web_push/pool"
 require "web_push/notification"

@@ -18,31 +17,43 @@ end

 module WebPush::PersistentRequest
  def perform
-    # Pin the connection to the public IP resolved (and guarded) by
-    # Push::Subscription so delivery can't be rebound to a private address
-    # between resolution and connect. There is no unpinned path: a delivery
-    # without a resolved IP is not sent.
-    endpoint_ip = @options[:endpoint_ip] or raise ArgumentError, "Push deliveries must be pinned to a resolved endpoint IP"
-
-    # The explicit nil proxy address disables proxy discovery from
-    # http_proxy/https_proxy. An egress proxy would open the TCP connection
-    # itself and re-resolve the endpoint host, so http.ipaddr would no longer
-    # pin the destination and the DNS-rebinding guarantee would be lost.
-    # Push delivery to public vendor endpoints goes direct.
-    http = Net::HTTP.new(uri.host, uri.port, nil)
-    http.ipaddr = endpoint_ip
-    http.use_ssl = true
-    http.ssl_timeout = @options[:ssl_timeout] unless @options[:ssl_timeout].nil?
-    http.open_timeout = @options[:open_timeout] unless @options[:open_timeout].nil?
-    http.read_timeout = @options[:read_timeout] unless @options[:read_timeout].nil?
+    if endpoint_ip = @options[:endpoint_ip]
+      # Pin the connection to the public IP resolved (and guarded) by
+      # Push::Subscription so delivery can't be rebound to a private address
+      # between resolution and connect. Bypasses the shared persistent pool,
+      # which would re-resolve the host itself.
+      #
+      # The explicit nil proxy address disables proxy discovery from
+      # http_proxy/https_proxy. An egress proxy would open the TCP connection
+      # itself and re-resolve the endpoint host, so http.ipaddr would no longer
+      # pin the destination and the DNS-rebinding guarantee would be lost. This
+      # path is already committed to a direct connection (it bypasses the pool);
+      # push delivery to public vendor endpoints goes direct.
+      http = Net::HTTP.new(uri.host, uri.port, nil)
+      http.ipaddr = endpoint_ip
+      http.use_ssl = true
+      http.ssl_timeout = @options[:ssl_timeout] unless @options[:ssl_timeout].nil?
+      http.open_timeout = @options[:open_timeout] unless @options[:open_timeout].nil?
+      http.read_timeout = @options[:read_timeout] unless @options[:read_timeout].nil?
+    elsif @options[:connection]
+      http = @options[:connection]
+    else
+      http = Net::HTTP.new(uri.host, uri.port, *proxy_options)
+      http.use_ssl = true
+      http.ssl_timeout = @options[:ssl_timeout] unless @options[:ssl_timeout].nil?
+      http.open_timeout = @options[:open_timeout] unless @options[:open_timeout].nil?
+      http.read_timeout = @options[:read_timeout] unless @options[:read_timeout].nil?
+    end

    req = Net::HTTP::Post.new(uri.request_uri, headers)
    req.body = body

-    # WebPush::Connections reuses an open connection only for this same host
-    # and pinned IP, so the guarantee holds for every request it sends.
-    resp = @options[:connection] ? @options[:connection].request(http, req) : http.request(req)
-    verify_response(resp)
+    if http.is_a?(Net::HTTP::Persistent)
+      response = http.request uri, req
+    else
+      resp = http.request(req)
+      verify_response(resp)
+    end

    resp
  end
@@ -1,5 +1,5 @@
 class AddRoomIdAndCreatedAtIndexToMessages < ActiveRecord::Migration[8.2]
  def change
-    add_index :messages, %i[ room_id created_at ], if_not_exists: true
+    add_index :messages, %i[ room_id created_at ]
  end
 end
@@ -1,5 +0,0 @@
-class AddRoomIdAndUpdatedAtIndexToMessages < ActiveRecord::Migration[8.2]
-  def change
-    add_index :messages, %i[ room_id updated_at ], if_not_exists: true
-  end
-end
@@ -1,15 +0,0 @@
-class AddMessagesCountToRooms < ActiveRecord::Migration[8.2]
-  def up
-    add_column :rooms, :messages_count, :integer, null: false, default: 0
-
-    # Backfill before installing triggers so the COUNT rewrite does not race with
-    # concurrent inserts, and so we never rely on Rails callbacks for the tally.
-    Room::MessagesCount.backfill!(connection)
-    Room::MessagesCount.install!(connection)
-  end
-
-  def down
-    Room::MessagesCount.uninstall!(connection)
-    remove_column :rooms, :messages_count
-  end
-end
@@ -10,7 +10,7 @@
 #
 # It's strongly recommended that you check this file into your version control system.

-ActiveRecord::Schema[8.2].define(version: 2026_10_07_190000) do
+ActiveRecord::Schema[8.2].define(version: 2026_10_04_225000) do
  create_table "accounts", force: :cascade do |t|
    t.datetime "created_at", null: false
    t.text "custom_styles"
@@ -102,7 +102,6 @@ ActiveRecord::Schema[8.2].define(version: 2026_10_07_190000) do
    t.datetime "updated_at", null: false
    t.index ["creator_id"], name: "index_messages_on_creator_id"
    t.index ["room_id", "created_at"], name: "index_messages_on_room_id_and_created_at"
-    t.index ["room_id", "updated_at"], name: "index_messages_on_room_id_and_updated_at"
    t.index ["room_id"], name: "index_messages_on_room_id"
  end

@@ -124,7 +123,6 @@ ActiveRecord::Schema[8.2].define(version: 2026_10_07_190000) do
    t.string "name"
    t.string "type", null: false
    t.datetime "updated_at", null: false
-    t.integer "messages_count", default: 0, null: false
  end

  create_table "searches", force: :cascade do |t|
@@ -184,4 +182,3 @@ ActiveRecord::Schema[8.2].define(version: 2026_10_07_190000) do
  # Note that virtual tables may not work with other database engines. Be careful if changing database.
  create_virtual_table "message_search_index", "fts5", ["body", "tokenize=porter"]
 end
-
@@ -1,27 +0,0 @@
-# Rails waits for ffmpeg however long it takes, and a video's preview is drawn inside the request that posts it.
-# This previewer gives ffmpeg a wall-clock limit, kills it past that, and reports a failed preview, so the message
-# is posted without one.
-class TimeLimitedVideoPreviewer < ActiveStorage::Previewer::VideoPreviewer
-  TIME_LIMIT = 10 # seconds
-
-  private
-    def capture(*argv, to:)
-      to.binmode
-
-      open_tempfile do |err|
-        IO.popen(argv, in: IO::NULL, err: err) do |out|
-          Timeout.timeout(TIME_LIMIT) { IO.copy_stream(out, to) }
-        rescue Timeout::Error
-          Process.kill :KILL, out.pid
-          raise ActiveStorage::PreviewError, "#{argv.first} took longer than #{TIME_LIMIT} seconds"
-        end
-        err.rewind
-
-        unless $?.success?
-          raise ActiveStorage::PreviewError, "#{argv.first} failed (status #{$?.exitstatus}): #{err.read.to_s.chomp}"
-        end
-      end
-
-      to.rewind
-    end
-end
@@ -1,29 +0,0 @@
-# Repair the database selected by each schema-load or migration operation.
-# db:prepare calls DatabaseTasks directly, bypassing Rake enhancements;
-# method hooks also run on every invocation.
-module RoomMessagesCountDatabaseTasks
-  def load_schema(...)
-    super.tap { repair_room_messages_count }
-  end
-
-  def migrate(...)
-    super.tap { repair_room_messages_count }
-  end
-
-  private
-    def repair_room_messages_count
-      migration_connection_pool.with_connection do |connection|
-        Room::MessagesCount.ensure!(connection)
-      end
-    end
-end
-
-ActiveRecord::Tasks::DatabaseTasks.singleton_class.prepend(RoomMessagesCountDatabaseTasks)
-
-namespace :room_messages_count do
-  task ensure: :environment do
-    ActiveRecord::Base.connection_pool.with_connection do |connection|
-      Room::MessagesCount.ensure!(connection)
-    end
-  end
-end
@@ -1,120 +0,0 @@
-# This is in lib so we can use it in a thread pool without the Rails executor
-#
-# Keeps TLS connections to push services open between deliveries, so a push doesn't pay for a new TCP and TLS
-# handshake every time. Each connection is pinned to the address Push::Subscription resolved and guarded for the
-# delivery that opened it, and is handed out again only to a delivery whose own resolution, just made, returned that
-# same address for the same host. Net::HTTP reconnects to its pinned address, never to a new lookup of the host.
-class WebPush::Connections
-  class ConnectionLost < StandardError; end
-  class StaleConnection < StandardError; end
-
-  # Where a request failed. Before writing it, Net::HTTP checks an idle connection (:checking) and connects again
-  # if the push service closed it (:connecting); then it writes (:sent). Only a failed check means a dead idle
-  # connection that a new one can replace without sending the push twice.
-  module Stages
-    attr_reader :stage
-
-    private
-      def begin_transport(...)
-        @stage = :checking
-        super.tap { @stage = :sent }
-      end
-
-      def connect(...)
-        @stage = :connecting if @stage == :checking
-        super
-      end
-  end
-
-  def initialize(keep_alive_timeout: 30, max_idle: 150)
-    @keep_alive_timeout = keep_alive_timeout
-    @max_idle = max_idle
-    @idle = Hash.new { |idle, address| idle[address] = [] }
-    @mutex = Mutex.new
-    @pid = Process.pid
-  end
-
-  def request(http, request)
-    unless http.ipaddr && !http.proxy? && http.use_ssl? && !http.started?
-      raise ArgumentError, "Only new, direct TLS connections pinned to an address are pooled"
-    end
-    address = [ http.address, http.port, http.ipaddr ]
-
-    if idle = checkout(address)
-      begin
-        return send_over(idle, request, reused: true).tap { checkin(address, idle) }
-      rescue StaleConnection
-        # The push service had closed it: a new connection takes the push
-      end
-    end
-
-    http.extend Stages
-    http.keep_alive_timeout = @keep_alive_timeout
-    http.start
-    send_over(http, request, reused: false).tap { checkin(address, http) }
-  end
-
-  def shutdown
-    @mutex.synchronize do
-      forget_after_fork
-      @shut_down = true
-      @idle.each_value { |connections| connections.each { |http, _| close(http) } }
-      @idle.clear
-    end
-  end
-
-  private
-    def send_over(http, request, reused:)
-      http.request(request)
-    rescue IOError, SystemCallError, OpenSSL::SSL::SSLError => error
-      close(http)
-      # Only a connection that was idle can have been dead already: on a new one the error is the push service's
-      raise StaleConnection if reused && http.stage == :checking
-      # The push service may have it: don't send it twice, and don't report a dropped connection as a TLS failure
-      raise ConnectionLost, "#{error.class}: #{error.message}" if http.stage == :sent
-      raise
-    end
-
-    def checkout(address)
-      @mutex.synchronize do
-        forget_after_fork
-        close_expired
-        @idle[address].pop&.first
-      end
-    end
-
-    def checkin(address, http)
-      @mutex.synchronize do
-        close_expired
-        if @shut_down || @idle.values.sum(&:size) >= @max_idle
-          close(http)
-        else
-          @idle[address].push [ http, now ]
-        end
-      end
-    end
-
-    # A forked process must not write on its parent's TLS sessions. They're left to the parent, not closed.
-    def forget_after_fork
-      unless @pid == Process.pid
-        @idle = Hash.new { |idle, address| idle[address] = [] }
-        @pid = Process.pid
-      end
-    end
-
-    def close_expired
-      @idle.each_value do |connections|
-        connections.reject! { |http, idle_since| (now - idle_since > @keep_alive_timeout).tap { |expired| close(http) if expired } }
-      end
-      @idle.delete_if { |_, connections| connections.empty? }
-    end
-
-    def close(http)
-      http.finish if http.started?
-    rescue IOError, SystemCallError, OpenSSL::SSL::SSLError
-    end
-
-    def now
-      Process.clock_gettime(Process::CLOCK_MONOTONIC)
-    end
-end
@@ -5,17 +5,13 @@ class WebPush::Pool
  def initialize(invalid_subscription_handler:)
    @delivery_pool = Concurrent::ThreadPoolExecutor.new(max_threads: 50, max_queue: 10000)
    @invalidation_pool = Concurrent::FixedThreadPool.new(1)
-    @connection = WebPush::Connections.new
+    @connection = Net::HTTP::Persistent.new(name: "web_push", pool_size: 150)
    @invalid_subscription_handler = invalid_subscription_handler
  end

  def queue(payload, subscriptions)
-    subscriptions.find_in_batches do |batch|
-      unread_counts = Membership.unread.where(user_id: batch.map(&:user_id)).group(:user_id).count
-
-      batch.each do |subscription|
-        deliver_later(payload, subscription, badge: unread_counts.fetch(subscription.user_id, 0))
-      end
+    subscriptions.find_each do |subscription|
+      deliver_later(payload, subscription)
    end
  end

@@ -26,9 +22,9 @@ class WebPush::Pool
  end

  private
-    def deliver_later(payload, subscription, badge:)
+    def deliver_later(payload, subscription)
      # Ensure any AR operations happen before we post to the thread pool
-      notification = subscription.notification(**payload, badge: badge)
+      notification = subscription.notification(**payload)
      subscription_id = subscription.id

      delivery_pool.post do
@@ -40,16 +40,6 @@ class PresenceChannelTest < ActionCable::Channel::TestCase
    end
  end

-  test "subscribing tells the user's other tabs when they read the room" do
-    membership = users(:david).memberships.first
-
-    freeze_time do
-      assert_broadcast_on "user_#{users(:david).id}_reads", { room_id: membership.room_id, at: Time.current.to_f } do
-        subscribe room_id: membership.room_id
-      end
-    end
-  end
-
  test "unsubscribing marks the membership as disconnected" do
    membership = users(:david).memberships.first
    subscribe room_id: membership.room_id
@@ -8,7 +8,7 @@ class UnreadRoomsChannelTest < ActionCable::Channel::TestCase

    assert subscription.confirmed?
    assert_has_stream "user_#{users(:jz).id}_unreads"
-    assert_not_includes subscription.stream_names, "unread_rooms"
+    assert_not_includes subscription.streams, "unread_rooms"
  end

  test "an outsider is not told about activity in a room they can't see" do
@@ -16,9 +16,7 @@ class UnreadRoomsChannelTest < ActionCable::Channel::TestCase
    assert_not direct.users.include?(users(:jz)), "jz must be an outsider for this test to mean anything"

    broadcasts = capture_unread_broadcasts_for(users(:jz)) do
-      perform_enqueued_jobs only: Message::BroadcastUnreadRoomJob do
-        direct.messages.create!(body: "Private", creator: users(:kevin), client_message_id: "outsider").broadcast_create
-      end
+      direct.messages.create!(body: "Private", creator: users(:kevin), client_message_id: "outsider").broadcast_create
    end

    assert_empty broadcasts
@@ -26,16 +24,12 @@ class UnreadRoomsChannelTest < ActionCable::Channel::TestCase

  test "a member is told about activity in their own room" do
    direct = rooms(:bender_and_kevin)
-    message = nil

    broadcasts = capture_unread_broadcasts_for(users(:kevin)) do
-      perform_enqueued_jobs only: Message::BroadcastUnreadRoomJob do
-        message = direct.messages.create!(body: "Private", creator: users(:bender), client_message_id: "member")
-        message.broadcast_create
-      end
+      direct.messages.create!(body: "Private", creator: users(:bender), client_message_id: "member").broadcast_create
    end

-    assert_equal [ { "roomId" => direct.id, "at" => message.created_at.to_f } ], broadcasts
+    assert_equal [ direct.id ], broadcasts.collect { |broadcast| broadcast["roomId"] }
  end

  private
@@ -43,7 +37,7 @@ class UnreadRoomsChannelTest < ActionCable::Channel::TestCase
      stub_connection(current_user: user)
      subscribe

-      stream = subscription.stream_names.sole
+      stream = subscription.streams.sole
      before = ActionCable.server.pubsub.broadcasts(stream).size

      yield
@@ -10,16 +10,6 @@ class AccountsControllerTest < ActionDispatch::IntegrationTest
    assert_response :ok
  end

-  test "edit shows whether room creation is restricted to administrators" do
-    get edit_account_url
-    assert_select "label.switch input.switch__input[type=checkbox]:not([checked])"
-
-    accounts(:signal).update!(settings: { restrict_room_creation_to_administrators: true })
-
-    get edit_account_url
-    assert_select "label.switch input.switch__input[type=checkbox][checked][data-action='change->form#submit']"
-  end
-
  test "edit groups administrators separately from members with a divider" do
    get edit_account_url

@@ -52,19 +42,6 @@ class AccountsControllerTest < ActionDispatch::IntegrationTest
    end
  end

-  test "edit lists a page of members and the next page carries on from it" do
-    User.insert_all 501.times.map { |i| { name: "Member #{i}", email_address: "member#{i}@37signals.com" } }
-    users(:kevin).banned!
-
-    get edit_account_url
-    first_page = listed_user_ids
-    get account_users_url(page: 2, format: :turbo_stream)
-    next_page = listed_user_ids
-
-    assert_not_empty next_page
-    assert_equal User.where(status: [ :active, :banned ]).without_bots.ids.sort, (first_page + next_page).sort
-  end
-
  test "update" do
    assert users(:david).administrator?

@@ -81,9 +58,4 @@ class AccountsControllerTest < ActionDispatch::IntegrationTest
    put account_url, params: { account: { name: "Different" } }
    assert_response :forbidden
  end
-
-  private
-    def listed_user_ids
-      response.body.scan(%r{href="/users/(\d+)"}).flatten.map(&:to_i)
-    end
 end
@@ -1,165 +0,0 @@
-require "test_helper"
-
-class CachedResponsesTest < ActionDispatch::IntegrationTest
-  self.use_transactional_tests = false
-
-  setup do
-    host! "once.campfire.test"
-    sign_in :david
-    @login_cookie = cookies["_campfire_session"]
-    @previous_forgery = ActionController::Base.allow_forgery_protection
-    ActionController::Base.allow_forgery_protection = true
-    @previous_cache = Rails.cache
-    @previous_caching = ActionController::Base.perform_caching
-    Rails.cache = ActiveSupport::Cache::MemoryStore.new
-    ActionController::Base.perform_caching = true
-    @room = rooms(:watercooler)
-    # Establish last-room and CSRF cookies before checking reuse.
-    2.times { get room_url(@room) }
-    ResponseCache.instance.clear
-  end
-
-  teardown do
-    ResponseCache.instance.clear
-    ActionController::Base.allow_forgery_protection = @previous_forgery
-    Rails.cache = @previous_cache
-    ActionController::Base.perform_caching = @previous_caching
-  end
-
-  test "all four read actions reuse completed pages" do
-    urls = [ room_url(@room), room_messages_url(@room), user_sidebar_url(:me), searches_url(q: "hello") ]
-    urls.each do |url|
-      get url
-      assert_response :success
-    end
-    ResponseCache.instance.expects(:write).never
-    urls.each do |url|
-      get url
-      assert_response :success
-    end
-  end
-
-  test "pagination caches the completed HTML rather than silently bypassing admission" do
-    get room_messages_url(@room)
-    assert_response :success
-    assert_equal "text/html", response.media_type
-    MessagesController.any_instance.expects(:find_paged_messages).never
-    get room_messages_url(@room)
-    assert_response :success
-  end
-
-  test "clients without a persisted CSRF session still reuse token-neutral HTML" do
-    cookies["_campfire_session"] = @login_cookie
-    get room_url(@room)
-    first = css_select('meta[name="csrf-token"]').first["content"]
-    cookies["_campfire_session"] = @login_cookie
-    ResponseCache.instance.expects(:write).never
-    get room_url(@room)
-    second = css_select('meta[name="csrf-token"]').first["content"]
-    assert_response :success
-    assert_not_equal first, second
-    assert_no_match /campfire-csrf-/, response.body
-    post room_messages_url(@room, format: :turbo_stream), params: {
-      authenticity_token: second, message: { body: "fresh replay token works", client_message_id: "cache-replay-token" } }
-    assert_response :success
-  end
-
-  test "cached tokens stay fresh and literal token-like text survives" do
-    get room_url(@room)
-    literal = css_select('meta[name="csrf-token"]').first["content"]
-    @room.messages.create!(creator: users(:david), body: "literal #{literal}")
-    get room_url(@room)
-    first = css_select('meta[name="csrf-token"]').first["content"]
-    get room_url(@room)
-    second = css_select('meta[name="csrf-token"]').first["content"]
-    assert_not_equal first, second
-    assert_includes response.body, "literal #{literal}"
-    assert_no_match /campfire-csrf-/, response.body
-
-    post room_messages_url(@room, format: :turbo_stream), params: {
-      authenticity_token: second, message: { body: "cached token works", client_message_id: "cache-token" } }
-    assert_response :success
-  end
-
-  test "local and foreign commits invalidate pages and nested fragments" do
-    message = @room.messages.ordered.last
-    get room_url(@room)
-    @room.messages.create!(creator: users(:david), body: "local commit")
-    get room_url(@room)
-    assert_includes response.body, "local commit"
-
-    foreign_write("UPDATE users SET name = ? WHERE id = ?", "Foreign creator", message.creator_id)
-    get room_url(@room)
-    assert_includes response.body, "Foreign creator"
-    foreign_write("UPDATE action_text_rich_texts SET body = ? WHERE record_type = 'Message' AND record_id = ?", "foreign message body", message.id)
-    get room_url(@room)
-    assert_includes response.body, "foreign message body"
-  end
-
-  test "cached room access and sessions are checked afresh" do
-    get room_url(@room)
-    foreign_write("DELETE FROM memberships WHERE room_id = ? AND user_id = ?", @room.id, users(:david).id)
-    get room_url(@room)
-    assert_redirected_to root_url
-    get user_sidebar_url(:me)
-    foreign_write("DELETE FROM sessions WHERE user_id = ?", users(:david).id)
-    get user_sidebar_url(:me)
-    assert_redirected_to new_session_url
-  end
-
-  test "conditional requests keep native validators" do
-    get room_messages_url(@room)
-    etag = response.headers["ETag"]
-    assert etag.present?
-    get room_messages_url(@room), headers: { "If-None-Match" => etag }
-    assert_response :not_modified
-  end
-
-  test "foreign presentation changes cannot return a false not-modified response" do
-    get room_messages_url(@room)
-    etag = response.headers["ETag"]
-    message = @room.messages.ordered.last
-    foreign_write("UPDATE action_text_rich_texts SET body = ? WHERE record_type = 'Message' AND record_id = ?", "changed presentation", message.id)
-    get room_messages_url(@room), headers: { "If-None-Match" => etag }
-    assert_response :success
-    assert_includes response.body, "changed presentation"
-    assert_not_equal etag, response.headers["ETag"]
-  end
-
-  test "origins and frame variants have separate entries" do
-    get room_url(@room)
-    ResponseCache.instance.expects(:write).twice
-    get room_url(@room), headers: { "Turbo-Frame" => "different-frame" }
-    host! "once.campfire.test:8081"
-    get room_path(@room)
-    assert_response :success
-  end
-
-  test "cache can be disabled" do
-    ResponseCache.instance.stubs(:budget).returns(0)
-    ResponseCache.instance.expects(:read).never
-    2.times { get room_url(@room) }
-    assert_response :success
-  end
-
-  test "a commit after authentication cannot admit captured user fields" do
-    Users::SidebarsController.any_instance.stubs(:set_version_headers).with do
-      foreign_write("UPDATE users SET name = ? WHERE id = ?", "During authentication", users(:david).id)
-      true
-    end
-    get user_sidebar_url(:me)
-    Users::SidebarsController.any_instance.unstub(:set_version_headers)
-    ResponseCache.instance.expects(:write).once
-    get user_sidebar_url(:me)
-    assert_includes response.body, "During authentication"
-  end
-
-  private
-    def foreign_write(sql, *bindings)
-      SQLite3::Database.new(ActiveRecord::Base.connection_db_config.database) do |database|
-        database.execute(sql, bindings)
-      end
-      # Fixtures share this thread's query cache outside the request executor.
-      ActiveRecord::Base.clear_query_caches_for_current_thread
-    end
-end
@@ -1,144 +0,0 @@
-require "test_helper"
-
-class FragmentRenderingTest < ActionDispatch::IntegrationTest
-  self.use_transactional_tests = false
-
-  setup do
-    host! "once.campfire.test"
-    sign_in :david
-    @previous_caching = ActionController::Base.perform_caching
-    @previous_message_caching = MessagesController.perform_caching
-    @class_store = ApplicationController.cache_store
-    @global_store = Rails.cache
-    ActionController::Base.perform_caching = true
-    MessagesController.perform_caching = true
-    FragmentCache.store.clear
-    ResponseCache.instance.clear
-    @room = rooms(:watercooler)
-    @message = @room.messages.ordered.last
-  end
-
-  teardown do
-    ActionController::Base.perform_caching = @previous_caching
-    MessagesController.perform_caching = @previous_message_caching
-    FragmentCache.store.clear
-    ResponseCache.instance.clear
-  end
-
-  test "native collection caching uses the bounded store without replacing shared stores" do
-    assert_same FragmentCache.store, ApplicationController.new.cache_store
-    assert_same FragmentCache.store, ActionView::PartialRenderer.collection_cache
-    assert_same @class_store, ApplicationController.cache_store
-    assert_same @global_store, Rails.cache
-    ResponseCache.instance.stubs(:budget).returns(0)
-    get room_messages_url(@room)
-    assert_response :success
-    hits = []
-    ActiveSupport::Notifications.subscribed(->(event) { hits.concat(event.payload[:hits]) }, "cache_read_multi.active_support") do
-      get room_messages_url(@room)
-    end
-    assert_response :success
-    assert_not_empty hits
-    token = users(:david).sessions.order(:id).last.token
-    assert_not_includes hits.join, token
-  end
-
-  test "disabled page caching retains fresh native fragments after foreign leaf writes" do
-    ResponseCache.instance.stubs(:budget).returns(0)
-    get room_messages_url(@room)
-    assert_response :success
-    foreign_write("UPDATE action_text_rich_texts SET body = ? WHERE record_type = 'Message' AND record_id = ?", "foreign disabled body", @message.id)
-    get room_messages_url(@room)
-    assert_response :success
-    assert_includes response.body, "foreign disabled body"
-  end
-
-  test "conditional pagination invalidates warmed native fragments without timestamp changes" do
-    get room_messages_url(@room), headers: { "If-None-Match" => "unmatched" }
-    assert_response :success
-    etag = response.headers["ETag"]
-    foreign_write("UPDATE action_text_rich_texts SET body = ? WHERE record_type = 'Message' AND record_id = ?", "foreign conditional body", @message.id)
-    get room_messages_url(@room), headers: { "If-None-Match" => etag }
-    assert_response :success
-    assert_includes response.body, "foreign conditional body"
-  end
-
-  test "a foreign commit after capture bypasses old native fragment lookups" do
-    ResponseCache.instance.stubs(:budget).returns(0)
-    get room_messages_url(@room)
-    assert_response :success
-    MessagesController.any_instance.stubs(:set_version_headers).with do
-      foreign_write("UPDATE action_text_rich_texts SET body = ? WHERE record_type = 'Message' AND record_id = ?", "foreign before fragments", @message.id)
-      true
-    end
-    get room_messages_url(@room), headers: { "If-None-Match" => "unmatched" }
-    assert_response :success
-    assert_includes response.body, "foreign before fragments"
-  end
-
-  test "refresh streams recheck native cached creator body and boost presentation" do
-    message = messages(:first)
-    room = message.room
-    get room_refresh_url(room, format: :turbo_stream), params: { since: 0 }
-    assert_response :success
-    foreign_write("UPDATE action_text_rich_texts SET body = ? WHERE record_type = 'Message' AND record_id = ?", "foreign refreshed body", message.id)
-    foreign_write("UPDATE users SET name = ? WHERE id = ?", "Foreign refreshed creator", message.creator_id)
-    foreign_write("UPDATE boosts SET content = ? WHERE message_id = ?", "Foreign refreshed boost", message.id)
-    get room_refresh_url(room, format: :turbo_stream), params: { since: 0 }
-    assert_response :success
-    assert_includes response.body, "foreign refreshed body"
-    assert_includes response.body, "Foreign refreshed creator"
-    assert_includes response.body, "Foreign refreshed boost"
-  end
-
-  test "Jbuilder fragments use the bounded store and do not create HTML token state" do
-    api = open_session { |session| session.host! "once.campfire.test" }
-    path = room_bot_messages_path(@room, users(:bender).bot_key)
-    api.get path
-    assert_equal 200, api.response.status
-    assert_not api.cookies["_campfire_session"]
-    hits = []
-    ActiveSupport::Notifications.subscribed(->(event) { hits << event.payload[:key] if event.payload[:hit] }, "cache_read.active_support") do
-      api.get path
-    end
-    assert_equal 200, api.response.status
-    assert_not_empty hits
-    foreign_write("UPDATE action_text_rich_texts SET body = ? WHERE record_type = 'Message' AND record_id = ?", "foreign JSON body", @message.id)
-    foreign_write("UPDATE users SET name = ? WHERE id = ?", "Foreign JSON creator", @message.creator_id)
-    api.get path
-    json = JSON.parse(api.response.body).find { |message| message["id"] == @message.id }
-    assert_includes json.dig("body", "html"), "foreign JSON body"
-    assert_equal "Foreign JSON creator", json.dig("creator", "name")
-    api.host! "another.campfire.test:8081"
-    api.get path
-    json = JSON.parse(api.response.body).find { |message| message["id"] == @message.id }
-    assert_includes json["url"], "another.campfire.test:8081"
-    assert_same @global_store, Rails.cache
-  end
-
-  test "detached broadcasts bypass fragments without a pre-render model snapshot" do
-    get room_messages_url(@room)
-    foreign_write("UPDATE action_text_rich_texts SET body = ? WHERE record_type = 'Message' AND record_id = ?", "foreign broadcast body", @message.id)
-    FragmentCache.store.expects(:read).never
-    FragmentCache.store.expects(:write).never
-    FragmentCache.store.expects(:read_multi).never
-    FragmentCache.store.expects(:write_multi).never
-    @message.reload.broadcast_create
-    assert_rendered_turbo_stream_broadcast @room, :messages, action: "append", target: [ @room, :messages ] do |stream|
-      assert_includes stream.to_html, "foreign broadcast body"
-    end
-    body = ApplicationController.render(partial: "messages/message", locals: { message: @message.reload })
-    assert_includes body, "foreign broadcast body"
-    collection = ApplicationController.render(partial: "messages/message", collection: [ @message.reload ], cached: true)
-    assert_includes collection, "foreign broadcast body"
-    assert_not ApplicationController.new.perform_caching
-  end
-
-  private
-    def foreign_write(sql, *bindings)
-      SQLite3::Database.new(ActiveRecord::Base.connection_db_config.database) do |database|
-        database.execute(sql, bindings)
-      end
-      ActiveRecord::Base.clear_query_caches_for_current_thread
-    end
-end
@@ -13,15 +13,6 @@ class Messages::BoostsControllerTest < ActionDispatch::IntegrationTest
    assert_select ".message__boost-inline a.boost__action[data-action='soft-keyboard#open']"
  end

-  test "index looks up the boosters of all boosts at once" do
-    @message.boosts.create! booster: users(:jason), content: "🎉"
-    queries_with_two_boosts = count_queries { get message_boosts_url(@message) }
-
-    boost = @message.boosts.create! booster: users(:kevin), content: "👀"
-    assert_equal queries_with_two_boosts, count_queries { get message_boosts_url(@message) }
-    assert_select "#" + dom_id(boost)
-  end
-
  test "create" do
    assert_turbo_stream_broadcasts [ @message.room, :messages ], count: 1 do
      assert_difference -> { @message.boosts.count }, 1 do
@@ -39,12 +30,4 @@ class Messages::BoostsControllerTest < ActionDispatch::IntegrationTest
      end
    end
  end
-
-  private
-    def count_queries(&block)
-      count = 0
-      counter = ->(*, payload) { count += 1 unless payload[:name] == "SCHEMA" || payload[:cached] }
-      ActiveSupport::Notifications.subscribed(counter, "sql.active_record", &block)
-      count
-    end
 end
@@ -1,9 +1,6 @@
 require "test_helper"
-require "active_record/testing/query_assertions"

 class Messages::ByBotsControllerTest < ActionDispatch::IntegrationTest
-  include ActiveRecord::Assertions::QueryAssertions
-
  setup do
    @room = rooms(:watercooler)
  end
@@ -96,9 +93,7 @@ class Messages::ByBotsControllerTest < ActionDispatch::IntegrationTest
      @room.messages.create!(body: "Filler #{i}", creator: users(:jason), client_message_id: "filler-#{i}")
    end

-    assert_no_queries_match(/SELECT COUNT\(\*\) FROM "messages"/i) do
-      get room_bot_messages_url(@room, users(:bender).bot_key)
-    end
+    get room_bot_messages_url(@room, users(:bender).bot_key)
    assert_response :success

    json = JSON.parse(response.body)
@@ -124,10 +119,7 @@ class Messages::ByBotsControllerTest < ActionDispatch::IntegrationTest
  end

  test "index in a room with no messages" do
-    room = rooms(:bender_and_kevin)
-    assert_equal 0, room.messages_count
-
-    get room_bot_messages_url(room, users(:bender).bot_key)
+    get room_bot_messages_url(rooms(:bender_and_kevin), users(:bender).bot_key)
    assert_response :success

    assert_equal [], JSON.parse(response.body)
@@ -27,62 +27,6 @@ class MessagesCachingTest < ActionDispatch::IntegrationTest
    end
  end

-  test "boosts are cached inside their message instead of one fragment each" do
-    with_memory_cache do
-      cache_keys = []
-      subscriber = ActiveSupport::Notifications.subscribe(/\Acache_(read|read_multi|write|write_multi)\.active_support\z/) do |*, payload|
-        cache_keys.concat(payload[:key].is_a?(Hash) ? payload[:key].keys : Array(payload[:key]))
-      end
-
-      get room_messages_url(rooms(:watercooler))
-      assert_response :success
-      assert_select "#" + dom_id(boosts(:fourth_by_bender))
-      assert_select "#" + dom_id(boosts(:thirteenth))
-      assert_empty cache_keys.grep(%r{messages/boosts/_boost})
-
-      boost = messages(:fourth).boosts.create! booster: users(:jason), content: "🎉"
-      get room_messages_url(rooms(:watercooler))
-      refreshed = response.body
-
-      Rails.cache.clear
-      get room_messages_url(rooms(:watercooler))
-      assert_equal refreshed, response.body
-      assert_select "##{dom_id(messages(:fourth))} ##{dom_id(boost)}", text: /🎉/
-    ensure
-      ActiveSupport::Notifications.unsubscribe(subscriber)
-    end
-  end
-
-  test "messages render their preloaded boosts in order without querying them again" do
-    earlier = messages(:fourth).boosts.create! booster: users(:jason), content: "🥇", created_at: 1.day.ago
-    in_order = [ dom_id(earlier), dom_id(boosts(:fourth_by_bender)) ]
-
-    assert_no_queries_match(/ORDER BY "boosts"/) do
-      get room_messages_url(rooms(:watercooler))
-    end
-    assert_response :success
-    assert_equal in_order, css_select("##{dom_id(messages(:fourth), :boosts)} .boost").map { it["id"] }
-
-    get message_boosts_url(messages(:fourth))
-    assert_equal in_order, css_select("##{dom_id(messages(:fourth), :boosts)} .boost").map { it["id"] }
-  end
-
-  test "a page of messages loads whether their previews were made along with the messages, not one at a time" do
-    room = rooms(:watercooler)
-    2.times do |copy|
-      { "moon.jpg" => "image/jpeg", "alpha-centuri.mov" => "video/quicktime" }.each do |file, content_type|
-        room.messages.create_with_attachment! creator: users(:david), client_message_id: "#{copy}-#{file}", attachment: fixture_file_upload(file, content_type)
-      end
-    end
-
-    assert_no_queries_match(/"active_storage_\w+"\."(id|blob_id|record_id)" = \?/) do
-      get room_messages_url(room)
-    end
-    assert_response :success
-    assert_select "img[src*='moon.jpg']", count: 2
-    assert_select "video[poster]", count: 2
-  end
-
  private
    def with_memory_cache
      old_cache = Rails.cache
@@ -57,89 +57,21 @@ class MessagesControllerTest < ActionDispatch::IntegrationTest
    end
  end

-  test "message copy links preserve the request origin in broadcasts and regular reads" do
-    [
-      [ "once.campfire.test:38683", false, "http://once.campfire.test:38683" ],
-      [ "once.campfire.test:8443", true, "https://once.campfire.test:8443" ],
-      [ "once.campfire.test:80", false, "http://once.campfire.test" ],
-      [ "once.campfire.test:443", true, "https://once.campfire.test" ]
-    ].each_with_index do |(host, secure, origin), index|
-      host! host
-      https! secure
-
-      post room_messages_path(@room, format: :turbo_stream), params: { message: {
-        body: "Request origin #{index}", client_message_id: "request-origin-#{index}" } }
-      assert_response :success
-      message = Message.last
-      expected_url = "#{origin}/rooms/#{@room.id}/@#{message.id}"
-
-      assert_rendered_turbo_stream_broadcast @room, :messages, action: "append", target: [ @room, :messages ] do
-        assert_copy_link_button expected_url
-      end
-
-      get room_message_path(@room, message)
-      assert_response :success
-      assert_copy_link_button expected_url
-    end
-  end
-
-  test "creating a message with an image that can't be decoded broadcasts the message to the room" do
-    webp = Vips::Image.new_from_file(file_fixture("moon.jpg").to_s).webpsave_buffer
-    broken = Rack::Test::UploadedFile.new(StringIO.new(webp.byteslice(0, webp.bytesize / 2)), "image/webp", original_filename: "broken.webp")
-
-    post room_messages_url(@room, format: :turbo_stream), params: { message: { attachment: broken, client_message_id: 999 } }
-
-    assert_response :success
-    assert_rendered_turbo_stream_broadcast @room, :messages, action: "append", target: [ @room, :messages ] do
-      assert_select ".message__body a[href*='broken.webp']"
-    end
-  end
-
  test "creating a message broadcasts unread room to each member" do
-    memberships(:david_watercooler).present # the poster is in the room
-
    @room.users.each do |member|
      assert_broadcasts UnreadRoomsChannel.stream_name_for(member.id), 1 do
-        perform_enqueued_jobs only: Message::BroadcastUnreadRoomJob do
-          post room_messages_url(@room, format: :turbo_stream), params: { message: { body: "New one #{member.id}", client_message_id: member.id } }
-        end
+        post room_messages_url(@room, format: :turbo_stream), params: { message: { body: "New one #{member.id}", client_message_id: member.id } }
      end
    end
  end

-  test "creating a message leaves the unread fanout to a job" do
-    member = @room.users.excluding(users(:david)).first
-
-    assert_no_broadcasts UnreadRoomsChannel.stream_name_for(member.id) do
-      post room_messages_url(@room, format: :turbo_stream), params: { message: { body: "New one", client_message_id: 999 } }
-    end
-
-    assert_enqueued_with job: Message::BroadcastUnreadRoomJob, args: [ Message.last ]
-  end
-
-  test "the unread fanout skips a member who has opened the room since" do
-    membership = memberships(:jason_watercooler)
-
-    post room_messages_url(@room, format: :turbo_stream), params: { message: { body: "New one", client_message_id: 999 } }
-    assert membership.reload.unread?
-
-    membership.present
-    membership.reload.disconnected
-
-    assert_no_broadcasts UnreadRoomsChannel.stream_name_for(membership.user_id) do
-      perform_enqueued_jobs only: Message::BroadcastUnreadRoomJob
-    end
-  end
-
  test "creating a message doesn't broadcast unread room to non-members" do
    outsiders = User.where.not(id: @room.users.map(&:id))
    assert outsiders.any?, "need someone outside the room for this test to mean anything"

    outsiders.each do |outsider|
      assert_no_broadcasts UnreadRoomsChannel.stream_name_for(outsider.id) do
-        perform_enqueued_jobs only: Message::BroadcastUnreadRoomJob do
-          post room_messages_url(@room, format: :turbo_stream), params: { message: { body: "New one", client_message_id: 999 } }
-        end
+        post room_messages_url(@room, format: :turbo_stream), params: { message: { body: "New one", client_message_id: 999 } }
      end
    end
  end
@@ -216,20 +148,6 @@ class MessagesControllerTest < ActionDispatch::IntegrationTest
    end
  end

-  test "messages sharing a client_message_id render as distinct elements" do
-    victim = @messages.last
-
-    post room_messages_url(@room, format: :turbo_stream), params: { message: { body: "Collision", client_message_id: victim.client_message_id } }
-    colliding = @room.messages.ordered.last
-    assert_not_equal victim, colliding
-
-    get room_messages_url(@room)
-
-    ids = css_select(".message[data-message-id]").map { it["id"] }
-    assert_equal ids.uniq, ids
-    ensure_messages_present victim, colliding
-  end
-
  private
    def ensure_messages_present(*messages, count: 1)
      messages.each do |message|
@@ -25,10 +25,8 @@ class Rooms::DirectsControllerTest < ActionDispatch::IntegrationTest
    sign_in :kevin

    assert_difference -> { Room.count }, -1 do
-      perform_enqueued_jobs do
-        delete rooms_direct_url(rooms(:david_and_kevin))
-        assert_redirected_to root_url
-      end
+      delete rooms_direct_url(rooms(:david_and_kevin))
+      assert_redirected_to root_url
    end
  end

@@ -15,21 +15,6 @@ class RoomsControllerTest < ActionDispatch::IntegrationTest
    assert_response :success
  end

-  test "show renders notification help for each platform" do
-    {
-      "Firefox on Android" => "Mozilla/5.0 (Android 14; Mobile; rv:131.0) Gecko/131.0 Firefox/131.0",
-      "Chrome on Android" => "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Mobile Safari/537.36",
-      "Firefox on desktop" => "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0",
-      "Chrome on desktop" => "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36",
-      "Safari on macOS" => "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15"
-    }.each do |platform, user_agent|
-      get room_url(users(:david).rooms.last), headers: { "User-Agent" => user_agent }
-
-      assert_response :success, platform
-      assert_select ".notifications-help ol", { minimum: 1 }, platform
-    end
-  end
-
  test "shows records the last room visited in a cookie" do
    get room_url(users(:david).rooms.last)
    assert response.cookies[:last_room] = users(:david).rooms.last.id
@@ -83,24 +68,11 @@ class RoomsControllerTest < ActionDispatch::IntegrationTest
  test "destroy" do
    assert_turbo_stream_broadcasts :rooms, count: 1 do
      assert_difference -> { Room.count }, -1 do
-        perform_enqueued_jobs { delete room_url(rooms(:designers)) }
+        delete room_url(rooms(:designers))
      end
    end
  end

-  test "destroy takes the room away from its members at once and leaves its messages to a job" do
-    room = rooms(:designers)
-    member_ids = room.memberships.pluck(:user_id)
-
-    assert_enqueued_with(job: Room::DestroyJob, args: [ room, member_ids ]) do
-      assert_no_difference -> { Message.count } do
-        delete room_url(room)
-        assert_redirected_to root_url
-      end
-    end
-    assert_empty room.memberships.reload
-  end
-
  test "destroy only allowed for creators or those who can administer" do
    sign_in :jz

@@ -112,7 +84,7 @@ class RoomsControllerTest < ActionDispatch::IntegrationTest
    rooms(:designers).update! creator: users(:jz)

    assert_difference -> { Room.count }, -1 do
-      perform_enqueued_jobs { delete room_url(rooms(:designers)) }
+      delete room_url(rooms(:designers))
    end
  end

@@ -5,10 +5,6 @@ class Sessions::TransfersControllerTest < ActionDispatch::IntegrationTest
    get session_transfer_url("some-token")

    assert_response :success
-    assert_select "form[data-controller='auto-submit']", count: 1
-    assert_select "input[name='_method'][value='put']", count: 1
-    assert_equal response.body.scan(/<form\b/).size, response.body.scan("</form>").size
-    assert_match(/<form\b[^>]*data-controller="auto-submit"[^>]*>(?:\s*<input\b[^>]*>)*\s*<\/form>/, response.body)
  end

  test "update establishes a session when the code is valid" do
@@ -75,94 +75,7 @@ class UnfurlLinksControllerTest < ActionDispatch::IntegrationTest
    assert_equal "Hey!", JSON.parse(response.body)["title"]
  end

-  test "create gives up on a host that accepts the connection and never answers" do
-    with_local_host do |url, connections|
-      stub_const(Opengraph::Fetch, :TIMEOUT, 0.2.seconds) do
-        assert_unfurls_nothing_within(1.second) { post unfurl_link_url, params: { url: url } }
-      end
-      assert_equal 1, connections.size, "the GET is not retried"
-    end
-  end
-
-  test "create gives up on headers that trickle in past the deadline" do
-    trickle_headers = ->(client) do
-      client.write "HTTP/1.1 200 OK\r\nX-Padding: "
-      100.times { client.write "x"; sleep 0.05 }
-      client.write "\r\nContent-Type: text/html\r\nContent-Length: 2\r\n\r\nok"
-    end
-
-    with_local_host(trickle_headers) do |url|
-      stub_const(UnfurlLinksController, :DEADLINE, 0.5.seconds) do
-        assert_unfurls_nothing_within(1.5.seconds) { post unfurl_link_url, params: { url: url } }
-      end
-    end
-  end
-
-  test "create gives up on a body that trickles in past the deadline" do
-    trickle_body = ->(client) do
-      client.write "HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nContent-Length: 100\r\n\r\n"
-      100.times { client.write "x"; sleep 0.05 }
-    end
-
-    with_local_host(trickle_body) do |url|
-      stub_const(UnfurlLinksController, :DEADLINE, 0.5.seconds) do
-        assert_unfurls_nothing_within(1.5.seconds) { post unfurl_link_url, params: { url: url } }
-      end
-    end
-  end
-
-  test "create gives up on redirects that keep coming past the deadline" do
-    stub_dns_resolution("1.2.3.4")
-    WebMock.stub_request(:get, "https://www.example.com/").to_return do
-      sleep 0.2
-      { status: 302, headers: { location: "https://www.example.com/" } }
-    end
-
-    stub_const(UnfurlLinksController, :DEADLINE, 0.5.seconds) do
-      assert_unfurls_nothing_within(1.second) { post unfurl_link_url, params: { url: "https://www.example.com" } }
-    end
-  end
-
-  test "create gives up on a host name that takes too long to look up" do
-    Resolv.stubs(:getaddresses).with { sleep 2 }.returns([ "1.2.3.4" ]) # each lookup takes 2 s
-    WebMock.stub_request(:get, "https://www.example.com/").to_return(status: 200, body: "<html></html>", headers: { content_type: "text/html" })
-
-    stub_const(UnfurlLinksController, :DEADLINE, 0.5.seconds) do
-      assert_unfurls_nothing_within(1.second) { post unfurl_link_url, params: { url: "https://www.example.com" } }
-    end
-  end
-
  private
-    # A real socket, because WebMock reads the whole response before the code under test sees any of it.
-    # The guard lets the local address through, as it would a public one.
-    def with_local_host(respond = ->(client) { })
-      server = TCPServer.new("127.0.0.1", 0)
-      connections = Queue.new
-      Thread.new do
-        loop do
-          client = server.accept
-          connections << client
-          client.readpartial(1024)
-          respond.call(client)
-        end
-      rescue IOError, SystemCallError
-      end
-
-      RestrictedHTTP::PrivateNetworkGuard.stubs(:resolve).returns("127.0.0.1")
-      WebMock.disable!
-      yield "http://www.example.com:#{server.addr[1]}/", connections
-    ensure
-      WebMock.enable!
-      server&.close
-    end
-
-    def assert_unfurls_nothing_within(limit)
-      started = Process.clock_gettime(Process::CLOCK_MONOTONIC)
-      yield
-      assert_response :no_content
-      assert_operator Process.clock_gettime(Process::CLOCK_MONOTONIC) - started, :<, limit
-    end
-
    def stub_successful_request(url: "https://www.example.com/", title: "Hey!", description: "desc..")
      WebMock.stub_request(:get, url).to_return(
        status: 200,
@@ -11,13 +11,6 @@ class Users::ProfilesControllerTest < ActionDispatch::IntegrationTest
    assert_response :success
  end

-  test "show includes install instructions for Edge" do
-    get user_profile_url, headers: { "User-Agent" => "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.18363" }
-
-    assert_response :success
-    assert_select ".pwa__instructions img[src*='install-edge']"
-  end
-
  test "update" do
    put user_profile_url, params: { user: { name: "John Doe", bio: "Acrobat" } }

@@ -27,25 +27,4 @@ class Users::SidebarsControllerTest < ActionDispatch::IntegrationTest
    get user_sidebar_url
    assert_select ".unread", count: users(:david).memberships.reject { |m| m.room.direct? || !m.unread? }.count
  end
-
-  test "directs are ordered by room recency, not name" do
-    older = rooms(:david_and_jason)
-    newer = rooms(:david_and_kevin)
-    older.update_column :updated_at, 2.days.ago
-    newer.update_column :updated_at, 1.minute.ago
-
-    get user_sidebar_url
-
-    assert_operator @response.body.index(dom_id(newer, :list)), :<, @response.body.index(dom_id(older, :list))
-  end
-
-  test "shared rooms stay ordered by name" do
-    get user_sidebar_url
-
-    shared_ids = users(:david).rooms.without_directs.sort_by { |room| room.name.downcase }.map { |room| dom_id(room, :list) }
-    positions = shared_ids.map { |id| @response.body.index(id) }
-
-    assert positions.all?
-    assert_equal positions.sort, positions
-  end
 end
@@ -1,4 +1,4 @@
-<% password_digest = BCrypt::Password.create("secret123456", cost: BCrypt::Engine::MIN_COST) %>
+<% password_digest = BCrypt::Password.create("secret123456") %>

 david:
  name: David
@@ -24,86 +24,4 @@ class MessagesHelperTest < ActionView::TestCase
    assert_match /<a href="https:\/\/example\.com"[^>]*>example<\/a>/, presentation
    assert_match /<strong>bold<\/strong>/, presentation
  end
-
-  test "message_presentation shows an image's thumbnail made when it was posted" do
-    presentation = view.message_presentation(attachment_message("moon.jpg", "image/jpeg", processed: true))
-
-    assert_match %r{<img[^>]+src="[^"]*/representations/[^"]*moon\.jpg"}, presentation
-  end
-
-  test "message_presentation links an image whose thumbnail wasn't made, rather than making it on view" do
-    presentation = view.message_presentation(attachment_message("moon.jpg", "image/jpeg", processed: false))
-
-    assert_no_match %r{/representations/}, presentation
-    assert_match %r{<span>moon\.jpg</span>}, presentation
-  end
-
-  test "message_presentation gives a video the poster made when it was posted" do
-    presentation = view.message_presentation(attachment_message("alpha-centuri.mov", "video/quicktime", processed: true))
-
-    assert_match %r{<video[^>]+poster="[^"]*/representations/[^"]*alpha-centuri}, presentation
-  end
-
-  test "message_presentation shows a video whose poster wasn't made without one, rather than making it on view" do
-    presentation = view.message_presentation(attachment_message("alpha-centuri.mov", "video/quicktime", processed: false))
-
-    assert_match %r{<video[^>]+src="[^"]*alpha-centuri\.mov"}, presentation
-    assert_no_match %r{poster=|/representations/}, presentation
-  end
-
-  test "message_presentation shows a video whose frame was drawn but whose poster wasn't made without one" do
-    message = attachment_message("alpha-centuri.mov", "video/quicktime", processed: false)
-    message.attachment.preview(format: :jpg).processed
-    assert message.attachment.preview(:poster).processed?
-
-    presentation = view.message_presentation(message.reload)
-
-    assert_match %r{<video[^>]+src="[^"]*alpha-centuri\.mov"}, presentation
-    assert_no_match %r{poster=|/representations/}, presentation
-  end
-
-  test "message_presentation shows an image in the rich text as a file, rather than making its preview on view" do
-    message = Message.with_attachment_details.find(message_with_file_in_rich_text("moon.jpg", "image/jpeg").id)
-
-    presentation = nil
-    assert_no_queries_match(/active_storage_variant_records/) { presentation = view.message_presentation(message) }
-
-    assert_no_match %r{/representations/}, presentation
-    assert_match %r{<span class="attachment__name">moon\.jpg</span>}, presentation
-  end
-
-  test "message_presentation shows an image in the rich text as a file even when its preview was made" do
-    message = message_with_file_in_rich_text("moon.jpg", "image/jpeg")
-    message.body.embeds.first.blob.variant(resize_to_limit: [ 1024, 768 ]).processed
-
-    presentation = view.message_presentation(message.reload)
-
-    assert_no_match %r{/representations/}, presentation
-    assert_match %r{<span class="attachment__name">moon\.jpg</span>}, presentation
-  end
-
-  test "message_presentation shows a video in the rich text as a file" do
-    presentation = view.message_presentation(message_with_file_in_rich_text("alpha-centuri.mov", "video/quicktime"))
-
-    assert_no_match %r{/representations/}, presentation
-    assert_match %r{<span class="attachment__name">alpha-centuri\.mov</span>}, presentation
-  end
-
-  private
-    def attachment_message(file, content_type, processed:)
-      attributes = { creator: users(:jason), client_message_id: "0015", attachment: fixture_file_upload(file, content_type) }
-
-      if processed
-        rooms(:pets).messages.create_with_attachment!(attributes)
-      else
-        rooms(:pets).messages.create!(attributes)
-      end
-    end
-
-    def message_with_file_in_rich_text(file, content_type)
-      blob = ActiveStorage::Blob.create_and_upload!(io: file_fixture(file).open, filename: file, content_type: content_type)
-      body = %(<div>Here: <action-text-attachment sgid="#{blob.attachable_sgid}"></action-text-attachment></div>)
-
-      Message.create! room: rooms(:pets), body: body, client_message_id: "0015", creator: users(:jason)
-    end
 end
@@ -1,174 +0,0 @@
-require "test_helper"
-
-class WebPush::ConnectionsTest < ActiveSupport::TestCase
-  include PushServiceTestHelper
-
-  setup { @connections = WebPush::Connections.new }
-  teardown { @connections.shutdown }
-
-  test "a delivery to the same host and address reuses the open connection" do
-    with_push_service do |server|
-      2.times { |i| assert_kind_of Net::HTTPCreated, @connections.request(pinned_connection(server), push_request("/push/#{i}")) }
-
-      assert_equal 1, server.connections
-      assert_equal %w[ /push/0 /push/1 ], server.requests
-    end
-  end
-
-  test "a delivery to another address never reuses a connection" do
-    with_push_service do |server|
-      @connections.request(pinned_connection(server), push_request)
-
-      other = pinned_connection(server, "127.0.0.2")
-      other.expects(:start)
-      other.expects(:request).returns(:sent_to_the_other_address)
-      assert_equal :sent_to_the_other_address, @connections.request(other, push_request)
-      assert_equal 1, server.requests.size
-    end
-  end
-
-  test "a connection the push service closed while idle is replaced, and the push sent once" do
-    [ :fin, :close_notify ].each do |hang_up|
-      with_push_service(hang_up_after_response: hang_up) do |server|
-        @connections.request(pinned_connection(server), push_request("/push/0"))
-        assert server.hung_up?
-
-        assert_kind_of Net::HTTPCreated, @connections.request(pinned_connection(server), push_request("/push/1"))
-        assert_equal 2, server.connections
-        assert_equal %w[ /push/0 /push/1 ], server.requests
-      end
-    end
-  end
-
-  test "a certificate for another name is refused, and nothing is sent" do
-    with_push_service(certificate: ->(_) { "other.test" }) do |server|
-      assert_raises(OpenSSL::SSL::SSLError) { @connections.request(pinned_connection(server), push_request) }
-      assert_empty server.requests
-    end
-  end
-
-  test "a certificate for another name is refused when a dead connection is replaced too" do
-    with_push_service(hang_up_after_response: :fin, certificate: ->(connection) { connection == 1 ? HOST : "other.test" }) do |server|
-      @connections.request(pinned_connection(server), push_request)
-      assert server.hung_up?
-
-      assert_raises(OpenSSL::SSL::SSLError) { @connections.request(pinned_connection(server), push_request) }
-      assert_equal 1, server.requests.size
-    end
-  end
-
-  test "a push the service may have received is not sent again" do
-    with_push_service(drop_request: ->(number) { number == 2 }) do |server|
-      @connections.request(pinned_connection(server), push_request("/push/0"))
-
-      error = assert_raises(WebPush::Connections::ConnectionLost) { @connections.request(pinned_connection(server), push_request("/push/1")) }
-      assert_not_kind_of OpenSSL::OpenSSLError, error
-      assert_equal %w[ /push/0 /push/1 ], server.requests
-      assert_equal 1, server.connections
-    end
-  end
-
-  test "a push the service may have received on a new connection isn't reported as a TLS failure either" do
-    with_push_service(drop_request: ->(number) { number == 1 }) do |server|
-      error = assert_raises(WebPush::Connections::ConnectionLost) { @connections.request(pinned_connection(server), push_request) }
-      assert_not_kind_of OpenSSL::OpenSSLError, error
-      assert_equal 1, server.requests.size
-    end
-  end
-
-  test "a TLS failure on a new connection before the push is written is reported as it is" do
-    failing_check = Module.new { private def begin_transport(*) = raise(OpenSSL::SSL::SSLError, "alert right after the handshake") }
-
-    with_push_service do |server|
-      assert_raises(OpenSSL::SSL::SSLError) { @connections.request(pinned_connection(server).extend(failing_check), push_request) }
-      assert_empty server.requests
-    end
-  end
-
-  test "a certificate for another name when reconnecting a cleanly closed connection is reported, even if a new one would work" do
-    certificates = { 2 => "other.test" }
-    with_push_service(hang_up_after_response: :close_notify, certificate: ->(connection) { certificates.fetch(connection, HOST) }) do |server|
-      @connections.request(pinned_connection(server), push_request)
-      assert server.hung_up?
-
-      assert_raises(OpenSSL::SSL::SSLError) { @connections.request(pinned_connection(server), push_request) }
-      assert_equal 1, server.requests.size
-      assert_equal 2, server.connections
-    end
-  end
-
-  test "only new, direct TLS connections pinned to an address are pooled" do
-    with_push_service do |server|
-      unpinned = Net::HTTP.new(HOST, server.port, nil).tap { it.use_ssl = true }
-      proxied = Net::HTTP.new(HOST, server.port, "127.0.0.1", 3128).tap { it.ipaddr = IP; it.use_ssl = true }
-      plain = pinned_connection(server).tap { it.use_ssl = false }
-      started = pinned_connection(server).tap(&:start)
-
-      [ unpinned, proxied, plain, started ].each do |http|
-        assert_raises(ArgumentError) { @connections.request(http, push_request) }
-      end
-      assert_empty server.requests
-    ensure
-      started&.finish
-    end
-  end
-
-  test "a forked process opens its own connections" do
-    with_push_service do |server|
-      @connections.request(pinned_connection(server), push_request)
-
-      child = Process.pid + 1
-      Process.stubs(:pid).returns(child)
-      @connections.request(pinned_connection(server), push_request)
-      assert_equal 2, server.connections
-    end
-  end
-
-  test "a forked process shutting down leaves its parent's connections open" do
-    with_push_service do |server|
-      @connections.request(pinned_connection(server), push_request)
-
-      child = Process.pid + 1
-      Process.stubs(:pid).returns(child)
-      @connections.shutdown
-      assert_not server.hung_up?(within: 0.5)
-    end
-  end
-
-  test "the idle pool closes connections beyond its bound" do
-    connections = WebPush::Connections.new(max_idle: 1)
-
-    with_push_service do |server|
-      other = Server.new
-      connections.request(pinned_connection(server), push_request)
-      connections.request(pinned_connection(other), push_request)
-      assert other.hung_up?
-      assert_not server.hung_up?(within: 0.1)
-
-      connections.request(pinned_connection(server), push_request)
-      assert_equal 1, server.connections
-    ensure
-      connections.shutdown
-      other&.stop
-    end
-  end
-
-  test "idle connections are closed after the keep-alive timeout and on shutdown" do
-    connections = WebPush::Connections.new(keep_alive_timeout: 0)
-
-    with_push_service do |server|
-      other = Server.new
-      connections.request(pinned_connection(server), push_request)
-      connections.request(pinned_connection(other), push_request)
-      assert server.hung_up?
-
-      connections.shutdown
-      assert other.hung_up?
-
-      connections.request(pinned_connection(server), push_request)
-      assert server.hung_up?
-    ensure
-      other&.stop
-    end
-  end
-end
@@ -1,8 +1,6 @@
 require "test_helper"

 class WebPush::PersistentRequestTest < ActiveSupport::TestCase
-  include PushServiceTestHelper
-
  ENDPOINT = "https://fcm.googleapis.com/fcm/send/test123"

  # The delivery must connect to the public IP resolved and guarded by
@@ -52,72 +50,4 @@ class WebPush::PersistentRequestTest < ActiveSupport::TestCase
    %w[ http_proxy https_proxy HTTP_PROXY HTTPS_PROXY ].each { |k| ENV.delete(k) }
    saved.each { |k, v| ENV[k] = v }
  end
-
-  test "deliveries through the pool to the same host and address share one connection" do
-    pool = WebPush::Pool.new(invalid_subscription_handler: nil)
-
-    with_push_service do |server|
-      2.times { deliver_to server, connection: pool.connection }
-
-      assert_equal 2, server.requests.size
-      assert_equal 1, server.connections
-    end
-  ensure
-    pool.shutdown
-  end
-
-  test "a pooled delivery checks the response like any other" do
-    pool = WebPush::Pool.new(invalid_subscription_handler: nil)
-
-    with_push_service(status: "410 Gone") do |server|
-      assert_raises(WebPush::ExpiredSubscription) { deliver_to server, connection: pool.connection }
-    end
-  ensure
-    pool.shutdown
-  end
-
-  test "pooled deliveries are pinned and ignore proxy env too" do
-    host = URI(ENDPOINT).host
-    saved = ENV.slice("http_proxy", "https_proxy", "HTTP_PROXY", "HTTPS_PROXY")
-    %w[ http_proxy https_proxy HTTP_PROXY HTTPS_PROXY ].each { |k| ENV[k] = "http://proxy.internal:3128" }
-
-    WebMock.disable_net_connect! allow: [ host ]
-
-    TCPSocket.expects(:open).with { |*args, **| args.first == host || args.first == "proxy.internal" }.never
-    TCPSocket.expects(:open).with { |*args, **| args.first == DnsTestHelper::WEB_PUSH_PUBLIC_TEST_IP && args[1] == 443 }.throws(:pinned_to_ip)
-
-    assert_throws :pinned_to_ip do
-      WebPush.payload_send \
-        message: "",
-        endpoint: ENDPOINT,
-        endpoint_ip: DnsTestHelper::WEB_PUSH_PUBLIC_TEST_IP,
-        p256dh: "", auth: "", vapid: {},
-        connection: WebPush::Connections.new,
-        urgency: "high"
-    end
-  ensure
-    %w[ http_proxy https_proxy HTTP_PROXY HTTPS_PROXY ].each { |k| ENV.delete(k) }
-    saved.each { |k, v| ENV[k] = v }
-  end
-
-  test "nothing is sent without a resolved endpoint IP" do
-    WebMock.disable_net_connect! allow: [ URI(ENDPOINT).host ]
-    TCPSocket.expects(:open).never
-
-    error = assert_raises(ArgumentError) do
-      WebPush.payload_send message: "", endpoint: ENDPOINT, p256dh: "", auth: "", vapid: {}, urgency: "high"
-    end
-    assert_equal "Push deliveries must be pinned to a resolved endpoint IP", error.message
-  end
-
-  private
-    def deliver_to(server, connection:)
-      WebPush.payload_send \
-        message: "",
-        endpoint: "https://#{PushServiceTestHelper::HOST}:#{server.port}/fcm/send/test123",
-        endpoint_ip: PushServiceTestHelper::IP,
-        p256dh: "", auth: "", vapid: {},
-        connection: connection,
-        urgency: "high"
-    end
 end
@@ -1,53 +0,0 @@
-require "test_helper"
-
-class WebPush::PoolTest < ActiveSupport::TestCase
-  setup do
-    stub_web_push_dns_resolution
-    @pool = Rails.configuration.x.web_push_pool
-    @payload = { title: "Designers", body: "Hello", path: Rails.application.routes.url_helpers.room_path(rooms(:designers)) }
-  end
-
-  test "every notification carries its subscriber's unread room count as the badge" do
-    memberships(:jason_pets).update! unread_at: Time.current
-    memberships(:kevin_hq).update! unread_at: Time.current
-    memberships(:kevin_david_and_kevin).update! unread_at: Time.current
-    subscriptions = Push::Subscription.where(user: users(:david, :jason, :kevin))
-    expected = subscriptions.to_h { |subscription| [ subscription.endpoint, subscription.user.memberships.unread.count ] }
-    assert_equal [ 0, 1, 2 ], expected.values.sort
-
-    badges = Concurrent::Hash.new
-    WebPush.stubs(:payload_send).with { |options| badges[options[:endpoint]] = JSON.parse(options[:message]).dig("options", "data", "badge") }
-    @pool.queue(@payload, subscriptions)
-    wait_for_deliveries(3)
-
-    assert_equal expected, badges
-  end
-
-  test "queueing counts unread rooms per batch, not per subscription" do
-    WebPush.stubs(:payload_send)
-
-    two = Push::Subscription.where(user: users(:david, :jason))
-    four = Push::Subscription.where(user: users(:david, :jason, :jz, :kevin))
-    assert_equal [ 2, 4 ], [ two.count, four.count ]
-
-    queries_for_two = count_queries { @pool.queue(@payload, two) }
-    queries_for_four = count_queries { @pool.queue(@payload, four) }
-    wait_for_deliveries(6)
-
-    assert_equal queries_for_two, queries_for_four
-  end
-
-  private
-    def wait_for_deliveries(count)
-      Timeout.timeout(2) { sleep 0.01 while @pool.delivery_pool.completed_task_count < count }
-    end
-
-    def count_queries(&block)
-      count = 0
-      counter = ->(*, payload) { count += 1 unless payload[:name] == "SCHEMA" || payload[:cached] }
-      ActiveRecord::Base.uncached do
-        ActiveSupport::Notifications.subscribed(counter, "sql.active_record", &block)
-      end
-      count
-    end
-end
@@ -19,94 +19,12 @@ class Message::AttachmentTest < ActiveSupport::TestCase
    assert_equal message.plain_text_body, "moon.jpg"
  end

-  test "creating a message keeps an image that can't be decoded" do
-    webp = Vips::Image.new_from_file(file_fixture("moon.jpg").to_s).webpsave_buffer
-    message = create_unreadable_attachment_message(webp.byteslice(0, webp.bytesize / 2), "broken.webp")
-
-    assert_equal "broken.webp", message.reload.attachment.filename.to_s
-    assert_nil message.attachment.representation(:thumb).image
-  end
-
-  test "creating a message keeps a video that can't be decoded" do
-    message = create_unreadable_attachment_message(file_fixture("alpha-centuri.mov").binread(64), "broken.mov")
-
-    assert_equal "broken.mov", message.reload.attachment.filename.to_s
-    assert_not message.attachment.preview(format: :webp).image.attached?
-  end
-
-  test "creating a message makes the video poster that the room shows" do
-    message = create_attachment_message("alpha-centuri.mov", "video/quicktime")
-
-    assert_no_difference -> { ActiveStorage::VariantRecord.count } do
-      message.reload.attachment.preview(:poster).processed
-    end
-  end
-
-  test "video previews are drawn by the previewer with a time limit, from a frame within the first 5 seconds" do
-    assert_includes ActiveStorage.previewers, TimeLimitedVideoPreviewer
-    assert_not_includes ActiveStorage.previewers, ActiveStorage::Previewer::VideoPreviewer
-    assert_includes ActiveStorage.video_preview_arguments, "gte(t\\,5)"
-  end
-
-  test "creating a message gives up on a video preview that takes longer than the time limit" do
-    started = nil
-    message = nil
-
-    with_ffmpeg_sleeping(5.seconds) do
-      stub_const(TimeLimitedVideoPreviewer, :TIME_LIMIT, 0.2) do
-        started = Process.clock_gettime(Process::CLOCK_MONOTONIC)
-        message = create_attachment_message("alpha-centuri.mov", "video/quicktime")
-      end
-    end
-
-    assert_operator Process.clock_gettime(Process::CLOCK_MONOTONIC) - started, :<, 2
-    assert_not message.reload.attachment.preview(format: :webp).image.attached?
-  end
-
-  test "creating a message makes no thumbnail of an image with more pixels than the limit" do
-    moon = Vips::Image.new_from_file(file_fixture("moon.jpg").to_s)
-
-    stub_const(Message::Attachment, :THUMBNAIL_MAX_PIXELS, moon.width * moon.height) do
-      assert create_attachment_message("moon.jpg", "image/jpeg").attachment.representation(:thumb).processed?
-    end
-
-    stub_const(Message::Attachment, :THUMBNAIL_MAX_PIXELS, moon.width * moon.height - 1) do
-      assert_not create_attachment_message("moon.jpg", "image/jpeg").attachment.representation(:thumb).processed?
-    end
-  end
-
-  test "creating a message makes no preview of a video with more pixels than the limit" do
-    stub_const(Message::Attachment, :THUMBNAIL_MAX_PIXELS, 1) do
-      message = create_attachment_message("alpha-centuri.mov", "video/quicktime")
-      assert_not message.reload.attachment.preview(format: :webp).image.attached?
-    end
-  end

  private
-    def with_ffmpeg_sleeping(duration)
-      Tempfile.create("ffmpeg") do |ffmpeg|
-        ffmpeg.write "#!/bin/sh\n[ \"$1\" = \"-version\" ] && exit 0\nexec sleep #{duration.to_i}\n"
-        ffmpeg.close
-        File.chmod 0o755, ffmpeg.path
-
-        previous, ActiveStorage.paths[:ffmpeg] = ActiveStorage.paths[:ffmpeg], ffmpeg.path
-        yield
-      ensure
-        ActiveStorage.paths[:ffmpeg] = previous
-      end
-    end
-
    def create_attachment_message(file, content_type)
      rooms(:hq).messages.create_with_attachment! \
        creator: users(:david),
        client_message_id: "message",
        attachment: fixture_file_upload(file, content_type)
    end
-
-    def create_unreadable_attachment_message(content, filename)
-      rooms(:hq).messages.create_with_attachment! \
-        creator: users(:david),
-        client_message_id: "message",
-        attachment: { io: StringIO.new(content), filename: filename }
-    end
 end
@@ -1,16 +0,0 @@
-require "test_helper"
-
-class Message::PaginationTest < ActiveSupport::TestCase
-  test "messages updated since a time are the newest page of them, in creation order" do
-    room = rooms(:watercooler)
-    first, second, third = room.messages.ordered.first(3)
-
-    travel 1.minute do
-      [ third, first, second ].each(&:touch)
-
-      stub_const(Message::Pagination, :PAGE_SIZE, 2) do
-        assert_equal [ second, third ], room.messages.page_updated_since(30.seconds.ago).to_a
-      end
-    end
-  end
-end
@@ -1,9 +1,6 @@
 require "test_helper"
-require "active_record/testing/query_assertions"

 class Message::SearchableTest < ActiveSupport::TestCase
-  include ActionDispatch::TestProcess, ActiveRecord::Assertions::QueryAssertions
-
  test "message body is indexed and searchable" do
    message = rooms(:designers).messages.create! body: "My hovercraft is full of eels", client_message_id: "earth", creator: users(:david)
    assert_equal [ message ], rooms(:designers).messages.search("eel")
@@ -15,36 +12,6 @@ class Message::SearchableTest < ActiveSupport::TestCase
    assert_equal [], rooms(:designers).messages.search("sharks")
  end

-  test "boosting a message leaves the search index alone, whether or not its body is loaded" do
-    attachment_message = rooms(:designers).messages.create! attachment: fixture_file_upload("moon.jpg", "image/jpeg"), client_message_id: "moon", creator: users(:david)
-
-    [ messages(:first), Message.with_rich_text_body.find(messages(:first).id), Message.with_rich_text_body.find(attachment_message.id) ].each do |message|
-      assert_no_queries_match(/message_search_index/) do
-        message.boosts.create!(content: "🦞", booster: users(:jason)).destroy!
-      end
-    end
-  end
-
-  test "saving a new body replaces the old words in the index" do
-    message = rooms(:designers).messages.create! body: "My hovercraft is full of eels", client_message_id: "earth", creator: users(:david)
-
-    Message.find(message.id).update! body: "My hovercraft is full of sharks"
-    assert_equal [ message ], rooms(:designers).messages.search("sharks")
-    assert_equal [], rooms(:designers).messages.search("eels")
-
-    Message.find(message.id).body.update! body: "My hovercraft is full of whales"
-    assert_equal [ message ], rooms(:designers).messages.search("whales")
-    assert_equal [], rooms(:designers).messages.search("sharks")
-  end
-
-  test "a new attachment replaces the old file name in the index" do
-    message = rooms(:designers).messages.create! attachment: fixture_file_upload("moon.jpg", "image/jpeg"), client_message_id: "moon", creator: users(:david)
-
-    Message.find(message.id).update! attachment: fixture_file_upload("pixel.bmp", "image/bmp")
-    assert_equal [ message ], rooms(:designers).messages.search("pixel")
-    assert_equal [], rooms(:designers).messages.search("moon")
-  end
-
  test "search results are returned in message order" do
    messages = [ "first cat", "second cat", "third cat", "cat cat cat" ].map do |body|
      rooms(:designers).messages.create! body: body, client_message_id: body, creator: users(:david)
@@ -53,37 +20,6 @@ class Message::SearchableTest < ActiveSupport::TestCase
    assert_equal messages, rooms(:designers).messages.search("cat")
  end

-  test "the last page of matches holds the newest ones, read off the index without sorting every match" do
-    messages = [ "first cat", "second cat", "third cat" ].map do |body|
-      rooms(:designers).messages.create! body: body, client_message_id: body, creator: users(:david)
-    end
-
-    queries = []
-    collect = ->(*, payload) { queries << payload[:sql] if payload[:sql].include?("message_search_index") }
-    page = ActiveSupport::Notifications.subscribed(collect, "sql.active_record") do
-      rooms(:designers).messages.search("cat").last_page_of_matches(2)
-    end
-
-    assert_equal messages.last(2), page
-    assert_no_match(/TEMP B-TREE/, Message.connection.select_rows("EXPLAIN QUERY PLAN #{queries.sole}").map(&:last).join(" | "))
-  end
-
-  test "bounded search keeps older reachable hits behind inaccessible matches" do
-    accessible = rooms(:designers).messages.create! body: "bounded sparse needle", creator: users(:david)
-    private_room = Room.create! name: "Private search history", type: "Rooms::Closed", creator: users(:jason)
-    now = Time.current
-    records = 1100.times.map do |i|
-      { room_id: private_room.id, creator_id: users(:jason).id, client_message_id: "private-#{i}", created_at: now, updated_at: now }
-    end
-    ids = Message.insert_all!(records, returning: %w[id]).rows.flatten
-    ids.each do |id|
-      Message.connection.execute Message.sanitize_sql([ "INSERT INTO message_search_index(rowid,body) VALUES (?,?)", id, "bounded sparse needle" ])
-    end
-    assert_equal [ accessible.id ], Message.search_reachable(users(:david), "bounded sparse").map(&:id)
-    rooms(:designers).memberships.where(user: users(:david)).delete_all
-    assert_empty Message.search_reachable(users(:david), "bounded sparse")
-  end
-
  test "rich text body is converted to plain text for indexing" do
    message = rooms(:designers).messages.create! body: "<span>My hovercraft is full of eels</span>", client_message_id: "earth", creator: users(:david)

@@ -65,18 +65,6 @@ class MessageTest < ActiveSupport::TestCase
    assert_equal room.messages.ordered.first(Message::Pagination::PAGE_SIZE).map(&:id), room.messages.first_page.map(&:id)
  end

-  test "paged? tells whether a room has more than a page of messages without counting them all" do
-    room = Rooms::Closed.create!(name: "Paging", creator: users(:david))
-    Message.insert_all Array.new(Message::Pagination::PAGE_SIZE) { |i| { room_id: room.id, creator_id: users(:david).id, client_message_id: "paging-#{i}" } }
-
-    assert_no_queries_match(/COUNT/i) do
-      assert_not room.messages.paged?
-
-      Message.insert_all [ { room_id: room.id, creator_id: users(:david).id, client_message_id: "paging-next" } ]
-      assert room.messages.paged?
-    end
-  end
-
  test "search reads quotes and operator words in the query as text" do
    message = rooms(:designers).messages.create!(body: "Say hi, NOT bye", client_message_id: "quoted", creator: users(:david))

@@ -125,15 +125,6 @@ class Push::SubscriptionTest < ActiveSupport::TestCase
    subscription.notification(title: "t", body: "b", path: "/").deliver
  end

-  test "the badge defaults to the subscriber's unread room count" do
-    memberships(:david_pets).update! unread_at: Time.current
-    memberships(:david_hq).update! unread_at: Time.current
-    subscription = build_subscription(endpoint: "https://fcm.googleapis.com/fcm/send/abc123")
-
-    WebPush.expects(:payload_send).with { |options| JSON.parse(options[:message]).dig("options", "data", "badge") == 2 }
-    subscription.notification(title: "t", body: "b", path: "/").deliver
-  end
-
  test "delivery sends with the pinned endpoint_ip" do
    subscription = build_subscription(endpoint: "https://fcm.googleapis.com/fcm/send/abc123")

@@ -1,88 +0,0 @@
-require "test_helper"
-require "tmpdir"
-
-class ResponseCacheTest < ActiveSupport::TestCase
-  setup do
-    @directory = Dir.mktmpdir
-    @database = File.join(@directory, "cache.sqlite3")
-    SQLite3::Database.new(@database) do |database|
-      database.execute("PRAGMA journal_mode=WAL")
-      database.execute("CREATE TABLE values_for_test (value TEXT)")
-    end
-    ActiveRecord::Base.stubs(:connection_db_config).returns(Struct.new(:database).new(@database))
-    @cache = ResponseCache.new
-    @cache.stubs(:budget).returns(1024)
-  end
-
-  teardown do
-    @cache.clear
-    FileUtils.remove_entry(@directory)
-  end
-
-  test "foreign commits expire entries and reject old render admission" do
-    version = @cache.version
-    @cache.write("page", version, entry("first"))
-    assert_equal "first", @cache.read("page", version)[:body]
-    SQLite3::Database.new(@database) { |database| database.execute("INSERT INTO values_for_test VALUES ('committed')") }
-    assert_nil @cache.read("page", version)
-    @cache.write("page", version, entry("old in-flight render"))
-    assert_nil @cache.read("page", @cache.version)
-    @cache.write("page", @cache.version, entry("fresh"))
-    assert_equal "fresh", @cache.read("page", @cache.version)[:body]
-  end
-
-  test "byte budget evicts oldest and bypasses oversized entries and keys" do
-    version = @cache.version
-    @cache.stubs(:budget).returns(512)
-    @cache.write("first", version, entry("a" * 100))
-    @cache.write("second", version, entry("b" * 100))
-    assert_nil @cache.read("first", version)
-    assert_equal "b" * 100, @cache.read("second", version)[:body]
-    @cache.write("oversized", version, entry("c" * 1000))
-    assert_nil @cache.read("oversized", version)
-    @cache.write("k" * 2049, version, entry("small"))
-    assert_nil @cache.read("k" * 2049, version)
-  end
-
-  test "clearing the observer gives later pages a distinct namespace" do
-    version = @cache.version
-    @cache.clear
-    assert_not_equal version, @cache.version
-  end
-
-  test "cold renders coalesce without holding the observer mutex" do
-    version = @cache.version
-    entered = Queue.new
-    release = Queue.new
-    first = Thread.new do
-      @cache.synchronize_render("page", version) do
-        entered << true
-        release.pop
-        @cache.write("page", version, entry("completed render"))
-      end
-    end
-    entered.pop
-    second_started = Queue.new
-    second = Thread.new do
-      second_started << true
-      @cache.synchronize_render("page", version) { @cache.read("page", version) }
-    end
-    second_started.pop
-    deadline = Process.clock_gettime(Process::CLOCK_MONOTONIC) + 2
-    Thread.pass until second.status == "sleep" || Process.clock_gettime(Process::CLOCK_MONOTONIC) >= deadline
-    assert_equal "sleep", second.status
-    assert_nil @cache.read("page", version)
-    assert_equal version, @cache.version
-    release << true
-    first.value
-    assert_equal "completed render", second.value[:body]
-  ensure
-    release << true if release
-    [ first, second ].compact.each { |thread| thread.join(2) }
-  end
-
-  private
-    def entry(body)
-      { body: body, marker: "unexposed-marker", headers: {} }
-    end
-end