go-fish-game-server 0.3.0

use std::collections::HashMap;
use std::net::SocketAddr;
use tokio::io::{AsyncRead, AsyncWrite};
use tokio::sync::mpsc;
use tokio_tungstenite::WebSocketStream;

#[derive(Debug)]
pub enum DisconnectReason {
    Clean,
    ForceClosed,
    Error(String),
}

pub enum ServerMessage {
    Text(String),
    Disconnect,
}

pub enum ManagerCommand {
    Shutdown,
}

pub enum ClientEvent<S = tokio::net::TcpStream>
where
    S: AsyncRead + AsyncWrite + Unpin + Send + 'static,
{
    Connected {
        address: SocketAddr,
        tx: mpsc::Sender<ServerMessage>,
        ws: WebSocketStream<S>,
    },
    Message {
        address: SocketAddr,
        text: String,
    },
    Disconnected {
        address: SocketAddr,
        reason: DisconnectReason,
    },
}

pub struct ClientHandle {
    pub tx: mpsc::Sender<ServerMessage>,
}

// ── Lobby channel types ───────────────────────────────────────────────────────

#[derive(Debug)]
pub enum LobbyEvent {
    /// A new client has connected and been assigned a per-client outbound channel.
    ClientConnected {
        address: SocketAddr,
        /// Sender half of the client's outbound channel. LobbyManager owns this for
        /// the lifetime of the connection and passes it to game participants at start.
        message_tx: mpsc::Sender<go_fish_web::ServerMessage>,
    },
    ClientMessage { address: SocketAddr, message: go_fish_web::ClientMessage },
    ClientDisconnected { address: SocketAddr, reason: DisconnectReason },
    /// A hook submitted on behalf of a game participant (human or bot).
    /// The lobby manager processes this uniformly regardless of source.
    Hook {
        lobby_id: String,
        player_name: String,
        request: go_fish_web::ClientHookRequest,
    },
}

// ── Connection handler ────────────────────────────────────────────────────────

use bytes::Bytes;
use futures_util::{SinkExt, StreamExt};
use std::time::Duration;
use tokio_tungstenite::tungstenite::Message;
use tracing::{debug, error, info, instrument, warn};

#[instrument(skip(ws, event_tx, msg_rx), fields(%address))]
pub async fn run_connection_handler<S, T>(
    address: SocketAddr,
    mut ws: WebSocketStream<S>,
    event_tx: mpsc::Sender<ClientEvent<T>>,
    mut msg_rx: mpsc::Receiver<ServerMessage>,
) where
    S: AsyncRead + AsyncWrite + Unpin,
    T: AsyncRead + AsyncWrite + Unpin + Send + 'static,
{
    let mut ping_interval = tokio::time::interval(Duration::from_secs(45));
    ping_interval.tick().await; // discard the immediate first tick
    let mut pending_pings: u32 = 0;
    const MAX_PENDING_PINGS: u32 = 3;

    loop {
        tokio::select! {
            frame = ws.next() => {
                match frame {
                    Some(Ok(Message::Text(text))) => {
                        debug!(event = "client_message_received", %text);
                        if event_tx.send(ClientEvent::Message { address, text: text.to_string() }).await.is_err() {
                            // Manager is gone, exit cleanly
                            break;
                        }
                    }
                    Some(Ok(Message::Close(_))) => {
                        let _ = event_tx.send(ClientEvent::Disconnected {
                            address,
                            reason: DisconnectReason::Clean,
                        }).await;
                        break;
                    }
                    Some(Ok(Message::Pong(_))) => {
                        pending_pings = 0;
                    }
                    Some(Ok(_)) => {
                        // Non-text frame (binary, etc.) — ignore
                        continue;
                    }
                    Some(Err(e)) => {
                        error!(event = "websocket_stream_error", error = %e);
                        let _ = event_tx.send(ClientEvent::Disconnected {
                            address,
                            reason: DisconnectReason::Error(e.to_string()),
                        }).await;
                        break;
                    }
                    None => {
                        // Stream ended without a Close frame (force close)
                        warn!(event = "websocket_force_closed", %address);
                        let _ = event_tx.send(ClientEvent::Disconnected {
                            address,
                            reason: DisconnectReason::ForceClosed,
                        }).await;
                        break;
                    }
                }
            }
            msg = msg_rx.recv() => {
                match msg {
                    None => {
                        // Handle dropped — exit cleanly
                        break;
                    }
                    Some(ServerMessage::Disconnect) => {
                        let _ = ws.send(Message::Close(None)).await;
                        break;
                    }
                    Some(ServerMessage::Text(t)) => {
                        if ws.send(Message::Text(t.into())).await.is_err() {
                            break;
                        }
                    }
                }
            }
            _ = ping_interval.tick() => {
                if pending_pings >= MAX_PENDING_PINGS {
                    info!(event = "client_ping_timeout", %address);
                    let _ = event_tx.send(ClientEvent::Disconnected {
                        address,
                        reason: DisconnectReason::Error("ping timeout".to_string()),
                    }).await;
                    break;
                }
                let _ = ws.send(Message::Ping(Bytes::new())).await;
                pending_pings += 1;
            }
        }
    }
}

// ── ConnectionManager ─────────────────────────────────────────────────────────

pub struct ConnectionManager<S = tokio::net::TcpStream>
where
    S: AsyncRead + AsyncWrite + Unpin + Send + 'static,
{
    clients: HashMap<SocketAddr, ClientHandle>,
    max_client_connections: usize,
    event_rx: mpsc::Receiver<ClientEvent<S>>,
    event_tx: mpsc::Sender<ClientEvent<S>>,
    command_rx: mpsc::Receiver<ManagerCommand>,
    command_tx: mpsc::Sender<ManagerCommand>,
    lobby_tx: mpsc::Sender<LobbyEvent>,
}

impl<S> ConnectionManager<S>
where
    S: AsyncRead + AsyncWrite + Unpin + Send + 'static,
{
    pub fn new(
        lobby_tx: mpsc::Sender<LobbyEvent>,
        max_client_connections: usize,
    ) -> Self {
        let (event_tx, event_rx) = mpsc::channel::<ClientEvent<S>>(64);
        let (command_tx, command_rx) = mpsc::channel::<ManagerCommand>(8);
        ConnectionManager {
            clients: HashMap::new(),
            max_client_connections,
            event_rx,
            event_tx,
            command_rx,
            command_tx,
            lobby_tx,
        }
    }

    pub fn event_tx(&self) -> mpsc::Sender<ClientEvent<S>> {
        self.event_tx.clone()
    }

    pub fn command_tx(&self) -> mpsc::Sender<ManagerCommand> {
        self.command_tx.clone()
    }

    #[instrument(skip(self))]
    pub async fn run(mut self) {
        loop {
            tokio::select! {
                cmd = self.command_rx.recv() => {
                    match cmd {
                        Some(ManagerCommand::Shutdown) | None => {
                            // Send Disconnect to all connected clients, then exit
                            for (address, handle) in &self.clients {
                                if handle.tx.send(ServerMessage::Disconnect).await.is_err() {
                                    warn!(event = "shutdown_disconnect_failed", %address);
                                }
                            }
                            break;
                        }
                    }
                }
                event = self.event_rx.recv() => {
                    match event {
                        None => break,
                        Some(ClientEvent::Connected { address, tx, ws }) => {
                            if self.clients.len() >= self.max_client_connections {
                                let mut ws = ws;
                                ws.close(None).await.ok();
                                warn!(event = "client_rejected_max_connections", %address,
                                    connections = self.clients.len(),
                                    max_connections = self.max_client_connections);
                                continue;
                            }
                            // Per-client outbound channel: LobbyManager → serializer → WebSocket
                            let (handler_tx, handler_rx) = mpsc::channel::<ServerMessage>(32);
                            let (web_tx, mut web_rx) = mpsc::channel::<go_fish_web::ServerMessage>(64);
                            let serializer_tx = handler_tx.clone();
                            tokio::spawn(async move {
                                while let Some(msg) = web_rx.recv().await {
                                    match serde_json::to_string(&msg) {
                                        Ok(json) => {
                                            if serializer_tx.send(ServerMessage::Text(json)).await.is_err() {
                                                break;
                                            }
                                        }
                                        Err(e) => {
                                            warn!(event = "serialize_outbound_failed", error = %e);
                                        }
                                    }
                                }
                            });
                            self.clients.insert(address, ClientHandle { tx: handler_tx });
                            let event_tx = self.event_tx.clone();
                            tokio::spawn(run_connection_handler(address, ws, event_tx, handler_rx));
                            drop(tx);
                            info!(event = "client_connected", %address,
                                    connections = self.clients.len(),
                                    max_connections = self.max_client_connections);
                            if self.lobby_tx.send(LobbyEvent::ClientConnected { address, message_tx: web_tx }).await.is_err() {
                                warn!(event = "lobby_forward_failed", %address, message = "ClientConnected");
                            }
                        }
                        Some(ClientEvent::Message { address, text }) => {
                            match serde_json::from_str::<go_fish_web::ClientMessage>(&text) {
                                Ok(message) => {
                                    if self.lobby_tx.send(LobbyEvent::ClientMessage { address, message }).await.is_err() {
                                        warn!(event = "lobby_forward_failed", %address, message = "ClientMessage");
                                    }
                                }
                                Err(e) => {
                                    warn!(event = "client_message_parse_failed", %address, error = %e, raw = %text);
                                    if let Some(handle) = self.clients.get(&address) {
                                        let error_json = serde_json::to_string(
                                            &go_fish_web::ServerMessage::Error("invalid message".to_string())
                                        ).unwrap_or_else(|_| r#"{"Error":"invalid message"}"#.to_string());
                                        if handle.tx.send(ServerMessage::Text(error_json)).await.is_err() {
                                            warn!(event = "send_failed", %address);
                                        }
                                    }
                                }
                            }
                        }
                        Some(ClientEvent::Disconnected { address, reason }) => {
                            self.clients.remove(&address);
                            info!(event = "client_disconnected", %address, reason = ?reason);
                            if self.lobby_tx.send(LobbyEvent::ClientDisconnected { address, reason }).await.is_err() {
                                warn!(event = "lobby_forward_failed", %address, message = "ClientDisconnected");
                            }
                        }
                    }
                }
            }
        }
    }
}

// ── TCP listener ──────────────────────────────────────────────────────────────

pub async fn run_tcp_listener(
    addr: SocketAddr,
    event_tx: mpsc::Sender<ClientEvent>,
    command_rx: mpsc::Receiver<ManagerCommand>,
) {
    let listener = match tokio::net::TcpListener::bind(addr).await {
        Ok(l) => l,
        Err(e) => {
            error!(event = "tcp_bind_failed", error = %e);
            return;
        }
    };
    info!(event = "tcp_listener_bound", %addr);
    run_tcp_listener_inner(listener, event_tx, command_rx).await
}

#[instrument(skip(event_tx, command_rx))]
pub async fn run_tcp_listener_inner(
    listener: tokio::net::TcpListener,
    event_tx: mpsc::Sender<ClientEvent>,
    mut command_rx: mpsc::Receiver<ManagerCommand>,
) {
    let addr = listener.local_addr().unwrap_or_else(|_| "0.0.0.0:0".parse().unwrap());
    loop {
        tokio::select! {
            cmd = command_rx.recv() => {
                match cmd {
                    Some(ManagerCommand::Shutdown) | None => {
                        info!(event = "tcp_listener_shutdown", %addr);
                        break;
                    }
                }
            }
            accept = listener.accept() => {
                let (stream, address) = match accept {
                    Ok(pair) => pair,
                    Err(e) => {
                        error!(event = "tcp_accept_failed", error = %e);
                        continue;
                    }
                };

                match tokio_tungstenite::accept_async(stream).await {
                    Ok(ws) => {
                        let (tx, _rx) = mpsc::channel::<ServerMessage>(32);
                        if event_tx
                            .send(ClientEvent::Connected { address, tx, ws })
                            .await
                            .is_err()
                        {
                            break;
                        }
                    }
                    Err(e) => {
                        error!(event = "websocket_handshake_failed", %address, error = %e);
                    }
                }
            }
        }
    }
}

#[cfg(test)]
mod tests {
    use super::*;
    use futures_util::SinkExt;
    use proptest::prelude::*;
    use std::net::SocketAddr;
    use tokio::io::duplex;
    use tokio::sync::mpsc;
    use tokio::time::{timeout, Duration};
    use tokio_tungstenite::WebSocketStream;
    use tungstenite::protocol::Role;

    /// Helper: create a server-side WebSocketStream backed by an in-memory duplex,
    /// and return the client-side half as a raw WebSocketStream (client role).
    async fn make_ws_pair() -> (
        WebSocketStream<tokio::io::DuplexStream>,
        WebSocketStream<tokio::io::DuplexStream>,
    ) {
        let (server_io, client_io) = duplex(65536);
        let server_ws =
            WebSocketStream::from_raw_socket(server_io, Role::Server, None).await;
        let client_ws =
            WebSocketStream::from_raw_socket(client_io, Role::Client, None).await;
        (server_ws, client_ws)
    }

    fn test_addr() -> SocketAddr {
        "127.0.0.1:12345".parse().unwrap()
    }

    // -------------------------------------------------------------------------
    // Test: binary frame produces no ClientEvent::Message (Requirement 2.2)
    // -------------------------------------------------------------------------
    #[tokio::test]
    async fn binary_frame_produces_no_message_event() {
        let (server_ws, mut client_ws) = make_ws_pair().await;
        let (event_tx, mut event_rx) = mpsc::channel::<ClientEvent>(16);
        let (_msg_tx, msg_rx) = mpsc::channel::<ServerMessage>(16);

        let addr = test_addr();
        let handler = tokio::spawn(run_connection_handler(
            addr,
            server_ws,
            event_tx,
            msg_rx,
        ));

        // Send a binary frame, then a Close frame to terminate the handler
        client_ws
            .send(tungstenite::Message::Binary(vec![1, 2, 3].into()))
            .await
            .unwrap();
        client_ws
            .send(tungstenite::Message::Close(None))
            .await
            .unwrap();

        timeout(Duration::from_secs(2), handler)
            .await
            .expect("handler timed out")
            .expect("handler panicked");

        // Drain all events — none should be ClientEvent::Message
        let mut got_message = false;
        while let Ok(event) = event_rx.try_recv() {
            if matches!(event, ClientEvent::Message { .. }) {
                got_message = true;
            }
        }
        assert!(!got_message, "binary frame should not produce a ClientEvent::Message");
    }

    // -------------------------------------------------------------------------
    // Test: ping frame produces no ClientEvent::Message (Requirement 2.2)
    // -------------------------------------------------------------------------
    #[tokio::test]
    async fn ping_frame_produces_no_message_event() {
        let (server_ws, mut client_ws) = make_ws_pair().await;
        let (event_tx, mut event_rx) = mpsc::channel::<ClientEvent>(16);
        let (_msg_tx, msg_rx) = mpsc::channel::<ServerMessage>(16);

        let addr = test_addr();
        let handler = tokio::spawn(run_connection_handler(
            addr,
            server_ws,
            event_tx,
            msg_rx,
        ));

        // Send a ping frame, then a Close frame to terminate the handler
        client_ws
            .send(tungstenite::Message::Ping(vec![].into()))
            .await
            .unwrap();
        client_ws
            .send(tungstenite::Message::Close(None))
            .await
            .unwrap();

        timeout(Duration::from_secs(2), handler)
            .await
            .expect("handler timed out")
            .expect("handler panicked");

        // Drain all events — none should be ClientEvent::Message
        let mut got_message = false;
        while let Ok(event) = event_rx.try_recv() {
            if matches!(event, ClientEvent::Message { .. }) {
                got_message = true;
            }
        }
        assert!(!got_message, "ping frame should not produce a ClientEvent::Message");
    }

    // -------------------------------------------------------------------------
    // Test: DisconnectReason::Clean is sent when Close frame received (Requirement 4.1)
    // -------------------------------------------------------------------------
    #[tokio::test]
    async fn close_frame_sends_clean_disconnect() {
        let (server_ws, mut client_ws) = make_ws_pair().await;
        let (event_tx, mut event_rx) = mpsc::channel::<ClientEvent>(16);
        let (_msg_tx, msg_rx) = mpsc::channel::<ServerMessage>(16);

        let addr = test_addr();
        let handler = tokio::spawn(run_connection_handler(
            addr,
            server_ws,
            event_tx,
            msg_rx,
        ));

        client_ws
            .send(tungstenite::Message::Close(None))
            .await
            .unwrap();

        timeout(Duration::from_secs(2), handler)
            .await
            .expect("handler timed out")
            .expect("handler panicked");

        // Find the Disconnected event and check its reason
        let mut found_clean = false;
        while let Ok(event) = event_rx.try_recv() {
            if let ClientEvent::Disconnected { reason: DisconnectReason::Clean, .. } = event {
                found_clean = true;
            }
        }
        assert!(found_clean, "expected DisconnectReason::Clean after Close frame");
    }

    // -------------------------------------------------------------------------
    // Helper: spin up a ConnectionManager, return (event_tx, command_tx, handle)
    // Also returns the lobby channels to keep them alive during the test.
    // -------------------------------------------------------------------------
    fn start_manager() -> (
        mpsc::Sender<ClientEvent<tokio::io::DuplexStream>>,
        mpsc::Sender<ManagerCommand>,
        tokio::task::JoinHandle<()>,
        mpsc::Receiver<LobbyEvent>,
    ) {
        start_manager_with_limit(2)
    }

    fn start_manager_with_limit(max_client_connections: usize) -> (
        mpsc::Sender<ClientEvent<tokio::io::DuplexStream>>,
        mpsc::Sender<ManagerCommand>,
        tokio::task::JoinHandle<()>,
        mpsc::Receiver<LobbyEvent>,
    ) {
        let (lobby_tx, lobby_rx) = mpsc::channel::<LobbyEvent>(64);
        let manager: ConnectionManager<tokio::io::DuplexStream> =
            ConnectionManager::new(lobby_tx, max_client_connections);
        let event_tx = manager.event_tx();
        let command_tx = manager.command_tx();
        let handle = tokio::spawn(manager.run());
        (event_tx, command_tx, handle, lobby_rx)
    }

    // Connect a duplex-backed client to the manager, returning the client-side WS.
    async fn connect_client(
        event_tx: &mpsc::Sender<ClientEvent<tokio::io::DuplexStream>>,
        addr: SocketAddr,
    ) -> WebSocketStream<tokio::io::DuplexStream> {
        let (server_io, client_io) = duplex(65536);
        let server_ws = WebSocketStream::from_raw_socket(server_io, Role::Server, None).await;
        let client_ws = WebSocketStream::from_raw_socket(client_io, Role::Client, None).await;
        let (tx, _rx) = mpsc::channel::<ServerMessage>(1);
        event_tx
            .send(ClientEvent::Connected { address: addr, tx, ws: server_ws })
            .await
            .unwrap();
        client_ws
    }

    // -------------------------------------------------------------------------
    // Test: invalid JSON sends Error back to client
    // -------------------------------------------------------------------------
    #[tokio::test]
    async fn invalid_json_sends_error() {
        let (event_tx, command_tx, manager_handle, _lobby_rx) = start_manager();
        let addr: SocketAddr = "127.0.0.1:10001".parse().unwrap();

        let mut client_ws = connect_client(&event_tx, addr).await;
        tokio::time::sleep(Duration::from_millis(10)).await;

        client_ws.send(tungstenite::Message::Text("not valid json".into())).await.unwrap();

        let reply = timeout(Duration::from_secs(2), client_ws.next()).await
            .expect("timed out waiting for error reply")
            .expect("stream ended")
            .expect("ws error");

        if let tungstenite::Message::Text(t) = reply {
            let parsed: serde_json::Value = serde_json::from_str(&t).unwrap();
            assert!(parsed.get("Error").is_some(), "expected Error variant in response");
        } else {
            panic!("expected Text message, got {:?}", reply);
        }

        command_tx.send(ManagerCommand::Shutdown).await.unwrap();
        let _ = timeout(Duration::from_secs(2), manager_handle).await;
    }

    // -------------------------------------------------------------------------
    // Test: disconnection removes client — registry cleared after disconnect (Req 4.1, 4.2)
    // -------------------------------------------------------------------------
    #[tokio::test]
    async fn disconnection_removes_client() {
        let (event_tx, command_tx, manager_handle, _lobby_rx) = start_manager();
        let addr: SocketAddr = "127.0.0.1:10004".parse().unwrap();

        let mut client_ws = connect_client(&event_tx, addr).await;
        tokio::time::sleep(Duration::from_millis(10)).await;

        // Disconnect cleanly via Close frame
        client_ws.send(tungstenite::Message::Close(None)).await.unwrap();
        tokio::time::sleep(Duration::from_millis(10)).await;

        // After disconnect, a message to that address should be a no-op (WARN logged, no echo)
        event_tx.send(ClientEvent::Message { address: addr, text: "ghost".into() }).await.unwrap();
        tokio::time::sleep(Duration::from_millis(10)).await;

        // The client WS should be closed — next() returns None, a Close frame, or a protocol error
        let next = timeout(Duration::from_millis(200), client_ws.next()).await;
        match next {
            Ok(Some(Ok(tungstenite::Message::Close(_)))) | Ok(None) | Err(_) => {}
            Ok(Some(Err(_))) => {} // Protocol error is fine — handler dropped the stream
            Ok(Some(Ok(tungstenite::Message::Text(t)))) => {
                panic!("disconnected client received unexpected message: {t}");
            }
            other => panic!("unexpected: {other:?}"),
        }

        command_tx.send(ManagerCommand::Shutdown).await.unwrap();
        let _ = timeout(Duration::from_secs(2), manager_handle).await;
    }

    // -------------------------------------------------------------------------
    // Test: disconnect does not affect remaining clients (Req 4.4)
    // -------------------------------------------------------------------------
    #[tokio::test]
    async fn disconnect_does_not_affect_remaining_clients() {
        let (event_tx, command_tx, manager_handle, _lobby_rx) = start_manager();
        let addr_a: SocketAddr = "127.0.0.1:10005".parse().unwrap();
        let addr_b: SocketAddr = "127.0.0.1:10006".parse().unwrap();

        let mut client_a = connect_client(&event_tx, addr_a).await;
        let mut client_b = connect_client(&event_tx, addr_b).await;
        tokio::time::sleep(Duration::from_millis(10)).await;

        // Disconnect client_a
        client_a.send(tungstenite::Message::Close(None)).await.unwrap();
        tokio::time::sleep(Duration::from_millis(10)).await;

        // client_b should still receive lobby events (send a valid JSON message and check lobby forwarding works)
        // Since there's no echo anymore, we just verify no crash occurs
        let valid_json = serde_json::to_string(&go_fish_web::ClientMessage::Identity).unwrap();
        client_b.send(tungstenite::Message::Text(valid_json.into())).await.unwrap();
        tokio::time::sleep(Duration::from_millis(50)).await;

        command_tx.send(ManagerCommand::Shutdown).await.unwrap();
        let _ = timeout(Duration::from_secs(2), manager_handle).await;
    }

    // -------------------------------------------------------------------------
    // Test: handshake failure does not stop the server (Requirement 1.4)
    // -------------------------------------------------------------------------
    #[tokio::test]
    async fn handshake_failure_does_not_stop_server() {
        use tokio::io::AsyncWriteExt;
        use tokio::net::TcpListener;

        let listener = TcpListener::bind("127.0.0.1:0").await.unwrap();
        let addr = listener.local_addr().unwrap();
        let (lobby_tx, _lobby_rx) = mpsc::channel::<LobbyEvent>(64);
        let max_client_connections = 2;
        let manager: ConnectionManager<tokio::net::TcpStream> =
            ConnectionManager::new(lobby_tx, max_client_connections);
        let event_tx = manager.event_tx();
        let command_tx = manager.command_tx();
        let manager_handle = tokio::spawn(manager.run());
        let (listener_cmd_tx, listener_cmd_rx) = mpsc::channel::<ManagerCommand>(1);
        tokio::spawn(run_tcp_listener_inner(listener, event_tx.clone(), listener_cmd_rx));

        // Send garbage — handshake should fail
        let mut plain = tokio::net::TcpStream::connect(addr).await.unwrap();
        plain.write_all(b"NOT A WEBSOCKET\r\n\r\n").await.unwrap();
        drop(plain);
        tokio::time::sleep(Duration::from_millis(50)).await;

        // Valid WS connection should still work
        let url = format!("ws://{}", addr);
        let (_ws, _) = tokio_tungstenite::connect_async(&url).await
            .expect("valid WS connection should succeed after handshake failure");
        tokio::time::sleep(Duration::from_millis(50)).await;

        // Shut down — signal both listener and manager
        listener_cmd_tx.send(ManagerCommand::Shutdown).await.unwrap();
        command_tx.send(ManagerCommand::Shutdown).await.unwrap();
        let result = timeout(Duration::from_secs(2), manager_handle).await;
        assert!(result.is_ok(), "manager should shut down within 2 seconds");
    }

    // =========================================================================
    // Property-based tests
    // =========================================================================

    // Helper: run an async block inside a proptest case using a single-threaded runtime.
    macro_rules! prop_async {
        ($body:expr) => {{
            let rt = tokio::runtime::Builder::new_current_thread()
                .enable_all()
                .build()
                .unwrap();
            rt.block_on(async move { $body })
        }};
    }

    // -------------------------------------------------------------------------
    // Property 1: Connection registration (Req 1.2, 1.3)
    // Feature: go-fish-game-server, Property 1: Connection registration
    // -------------------------------------------------------------------------
    proptest! {
        #![proptest_config(ProptestConfig::with_cases(20))]
        #[test]
        fn prop_connection_registration(
            a in 1u8..=254u8,
            b in 0u8..=255u8,
            c in 0u8..=255u8,
            d in 1u8..=254u8,
            port in 1024u16..=49151u16,
        ) {
            prop_async!({
                let addr: SocketAddr = format!("{a}.{b}.{c}.{d}:{port}").parse().unwrap();
                let (event_tx, command_tx, manager_handle, _lobby_rx) = start_manager();

                let mut client_ws = connect_client(&event_tx, addr).await;
                tokio::time::sleep(Duration::from_millis(10)).await;

                // Send a valid JSON message (Identity) — no echo, but no crash
                let valid_json = serde_json::to_string(&go_fish_web::ClientMessage::Identity).unwrap();
                client_ws.send(tungstenite::Message::Text(valid_json.into())).await.unwrap();
                tokio::time::sleep(Duration::from_millis(20)).await;

                command_tx.send(ManagerCommand::Shutdown).await.unwrap();
                let _ = timeout(Duration::from_secs(2), manager_handle).await;
                Ok::<(), TestCaseError>(())
            }).unwrap();
        }
    }

    // -------------------------------------------------------------------------
    // Property 2: Invalid JSON always returns Error (Req 1.5)
    // Feature: go-fish-game-server, Property 2: Invalid JSON returns Error
    // -------------------------------------------------------------------------
    proptest! {
        #![proptest_config(ProptestConfig::with_cases(20))]
        #[test]
        fn prop_invalid_json_returns_error(msg in "[a-zA-Z0-9 ]{1,64}") {
            // Only run if msg is not valid JSON for ClientMessage
            prop_assume!(serde_json::from_str::<go_fish_web::ClientMessage>(&msg).is_err());
            prop_async!({
                let addr: SocketAddr = "127.0.0.1:20001".parse().unwrap();
                let (event_tx, command_tx, manager_handle, _lobby_rx) = start_manager();

                let mut client_ws = connect_client(&event_tx, addr).await;
                tokio::time::sleep(Duration::from_millis(10)).await;

                client_ws.send(tungstenite::Message::Text(msg.clone().into())).await.unwrap();

                let reply = timeout(Duration::from_secs(2), client_ws.next()).await;
                command_tx.send(ManagerCommand::Shutdown).await.unwrap();
                let _ = timeout(Duration::from_secs(2), manager_handle).await;

                match reply {
                    Ok(Some(Ok(tungstenite::Message::Text(t)))) => {
                        let parsed: serde_json::Value = serde_json::from_str(&t)
                            .map_err(|_| TestCaseError::fail("response was not valid JSON"))?;
                        prop_assert!(parsed.get("Error").is_some(), "expected Error variant");
                    }
                    _ => return Err(TestCaseError::fail("did not receive error response")),
                }
                Ok(())
            }).unwrap();
        }
    }

    // -------------------------------------------------------------------------
    // Property 3: Disconnection removes client (Req 4.1, 4.2)
    // Feature: go-fish-game-server, Property 3: Disconnection removes client
    // -------------------------------------------------------------------------
    proptest! {
        #![proptest_config(ProptestConfig::with_cases(20))]
        #[test]
        fn prop_disconnection_removes_client(_msg in "[a-zA-Z0-9]{1,32}") {
            prop_async!({
                let addr: SocketAddr = "127.0.0.1:22001".parse().unwrap();
                let (event_tx, command_tx, manager_handle, _lobby_rx) = start_manager();

                let mut client_ws = connect_client(&event_tx, addr).await;
                tokio::time::sleep(Duration::from_millis(10)).await;

                // Disconnect via Close frame
                client_ws.send(tungstenite::Message::Close(None)).await.unwrap();
                tokio::time::sleep(Duration::from_millis(20)).await;

                // Send a message to the now-disconnected address — should be a no-op
                event_tx.send(ClientEvent::Message { address: addr, text: "ghost".into() }).await.unwrap();
                tokio::time::sleep(Duration::from_millis(20)).await;

                // The client stream should be closed, not receive the message
                let next = timeout(Duration::from_millis(100), client_ws.next()).await;
                match next {
                    Ok(Some(Ok(tungstenite::Message::Text(t)))) => {
                        return Err(TestCaseError::fail(
                            format!("disconnected client received unexpected message: {t}")
                        ));
                    }
                    _ => {} // closed, error, or timeout — all acceptable
                }

                command_tx.send(ManagerCommand::Shutdown).await.unwrap();
                let _ = timeout(Duration::from_secs(2), manager_handle).await;
                Ok(())
            }).unwrap();
        }
    }

    // -------------------------------------------------------------------------
    // Test: client at the connection limit receives a clean close frame
    // -------------------------------------------------------------------------
    #[tokio::test]
    async fn max_connections_rejects_with_close_frame() {
        let (event_tx, command_tx, manager_handle, _lobby_rx) =
            start_manager_with_limit(2);
        let addr_a: SocketAddr = "127.0.0.1:11001".parse().unwrap();
        let addr_b: SocketAddr = "127.0.0.1:11002".parse().unwrap();
        let addr_c: SocketAddr = "127.0.0.1:11003".parse().unwrap();

        // Hold onto these to keep the connections alive, otherwise they disconnect
        // immediately and the limit is never reached.
        let _client_a = connect_client(&event_tx, addr_a).await;
        let _client_b = connect_client(&event_tx, addr_b).await;
        tokio::time::sleep(Duration::from_millis(10)).await;

        let mut rejected = connect_client(&event_tx, addr_c).await;

        let msg = timeout(Duration::from_secs(2), rejected.next()).await
            .expect("timed out waiting for close frame from rejected client")
            .expect("stream ended without a message")
            .expect("ws error on rejected client");

        assert!(
            matches!(msg, tungstenite::Message::Close(_)),
            "expected Close frame for rejected client, got {msg:?}"
        );

        command_tx.send(ManagerCommand::Shutdown).await.unwrap();
        let _ = timeout(Duration::from_secs(2), manager_handle).await;
    }

    // -------------------------------------------------------------------------
    // Test: accepted clients are unaffected when a new connection is rejected
    // -------------------------------------------------------------------------
    #[tokio::test]
    async fn max_connections_does_not_affect_existing_clients() {
        let (event_tx, command_tx, manager_handle, mut lobby_rx) =
            start_manager_with_limit(1);
        let addr_a: SocketAddr = "127.0.0.1:11004".parse().unwrap();
        let addr_b: SocketAddr = "127.0.0.1:11005".parse().unwrap();

        let mut client_a = connect_client(&event_tx, addr_a).await;
        tokio::time::sleep(Duration::from_millis(10)).await;

        // Fill the limit — addr_b is rejected
        let mut rejected = connect_client(&event_tx, addr_b).await;
        tokio::time::sleep(Duration::from_millis(10)).await;

        // Rejected client should have received a Close frame
        let msg = timeout(Duration::from_millis(500), rejected.next()).await
            .expect("timed out waiting for close frame")
            .expect("stream ended without a message")
            .expect("ws error");
        assert!(matches!(msg, tungstenite::Message::Close(_)));

        // client_a should still be functional — its messages reach the lobby
        let valid_json = serde_json::to_string(&go_fish_web::ClientMessage::Identity).unwrap();
        client_a.send(tungstenite::Message::Text(valid_json.into())).await.unwrap();

        let lobby_event = timeout(Duration::from_secs(2), lobby_rx.recv()).await
            .expect("timed out waiting for lobby event")
            .expect("lobby channel closed");
        assert!(
            matches!(lobby_event, LobbyEvent::ClientConnected { address, .. } if address == addr_a),
            "expected ClientConnected for addr_a, got {lobby_event:?}"
        );

        command_tx.send(ManagerCommand::Shutdown).await.unwrap();
        let _ = timeout(Duration::from_secs(2), manager_handle).await;
    }

    // -------------------------------------------------------------------------
    // Property 4: Connections beyond the limit are always rejected (Req 5.1)
    // Feature: go-fish-game-server, Property 4: Max connection limit enforced
    // -------------------------------------------------------------------------
    proptest! {
        #![proptest_config(ProptestConfig::with_cases(20))]
        #[test]
        fn prop_max_connections_rejects_excess(limit in 1usize..=3usize) {
            prop_async!({
                let (event_tx, command_tx, manager_handle, _lobby_rx) =
                    start_manager_with_limit(limit);

                // Fill up to the limit. Hold onto the handles so the connections
                // stay alive — dropped handles disconnect immediately, defeating the test.
                let mut live_clients = vec![];
                for i in 0..limit {
                    let addr: SocketAddr = format!("127.0.0.2:{}", 10000 + i as u16).parse().unwrap();
                    live_clients.push(connect_client(&event_tx, addr).await);
                }
                tokio::time::sleep(Duration::from_millis(10)).await;

                // One more should be rejected with a Close frame
                let overflow_addr: SocketAddr = "127.0.0.2:19999".parse().unwrap();
                let mut rejected = connect_client(&event_tx, overflow_addr).await;

                let msg = timeout(Duration::from_secs(2), rejected.next()).await
                    .map_err(|_| TestCaseError::fail("timed out waiting for close frame"))?
                    .ok_or_else(|| TestCaseError::fail("stream ended without a message"))?
                    .map_err(|e| TestCaseError::fail(format!("ws error: {e}")))?;

                prop_assert!(
                    matches!(msg, tungstenite::Message::Close(_)),
                    "expected Close frame, got {msg:?}"
                );

                command_tx.send(ManagerCommand::Shutdown).await.unwrap();
                let _ = timeout(Duration::from_secs(2), manager_handle).await;
                Ok(())
            }).unwrap();
        }
    }
}