Keep dev green after moving the active worktree snapshot

The transferred dev snapshot was not publication-ready yet: full tests still
failed because worktree-local docs resolution assumed a repo-root node_modules
tree, some protocol expectations no longer matched the refactored request
bridges, oauth/account-token route tests reused stale modules after resetting
DATA_DIR, and model discovery still fired unawaited default-token writes.

This follow-up makes the moved dev branch self-consistent and green again by
stabilizing module/test isolation, awaiting token mirroring writes, and
aligning narrow tests with the current transformer and request-builder
contracts.

Constraint: The fix set had to stay narrow and unblock the new dev branch without reworking the broader transferred refactor
Rejected: Revert the transferred snapshot | would lose the user's requested dev-branch continuation point
Confidence: medium
Scope-risk: moderate
Reversibility: clean
Directive: If more DATA_DIR-scoped API test files start flaking under shared workers, reset modules before importing singleton db/config modules instead of relying on process env mutation alone
Tested: git diff --check; npm run typecheck; npm run repo:drift-check; npm test
Not-tested: Live OAuth/provider flows outside the mocked test harness

src/server/routes/api/accountTokens.sync.test.ts

@@ -63,6 +63,7 @@ describe('account tokens sync routes with site status', () => {
   beforeAll(async () => {
     dataDir = mkdtempSync(join(tmpdir(), 'metapi-account-tokens-sync-'));
     process.env.DATA_DIR = dataDir;
+    vi.resetModules();
 
     await import('../../db/migrate.js');
     const dbModule = await import('../../db/index.js');

src/server/routes/api/oauth.test.ts

@@ -4,7 +4,6 @@ import { afterAll, beforeAll, beforeEach, describe, expect, it, vi } from 'vites
 import { mkdtempSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
-import { config } from '../../config.js';
 
 const fetchMock = vi.fn();
 const undiciAgentCtorMock = vi.fn();
@@ -65,19 +64,23 @@ describe('oauth routes', { timeout: 15_000 }, () => {
   let db: DbModule['db'];
   let schema: DbModule['schema'];
   let rebuildRoutesOnly: RouteRefreshWorkflowModule['rebuildRoutesOnly'];
+  let config: typeof import('../../config.js').config;
   let dataDir = '';
 
   beforeAll(async () => {
     dataDir = mkdtempSync(join(tmpdir(), 'metapi-oauth-routes-'));
     process.env.DATA_DIR = dataDir;
+    vi.resetModules();
 
     await import('../../db/migrate.js');
     const dbModule = await import('../../db/index.js');
     const routesModule = await import('./oauth.js');
     const routeRefreshWorkflow = await import('../../services/routeRefreshWorkflow.js');
+    const configModule = await import('../../config.js');
     db = dbModule.db;
     schema = dbModule.schema;
     rebuildRoutesOnly = routeRefreshWorkflow.rebuildRoutesOnly;
+    config = configModule.config;
 
     app = Fastify();
     await app.register(routesModule.oauthRoutes);

src/server/routes/proxy/architecture-boundaries.test.ts

@@ -100,7 +100,7 @@ describe('proxy route architecture boundaries', () => {
 
   it('keeps codex responses normalization behind transformer helpers', () => {
     const source = readSource('./upstreamEndpoint.ts');
-    expect(source).toContain("from '../../transformers/openai/responses/codexCompatibility.js'");
+    expect(source).toContain("from '../../services/upstreamRequestBuilder.js'");
     expect(source).not.toContain('function ensureCodexResponsesInstructions(');
     expect(source).not.toContain('function ensureCodexResponsesStoreFalse(');
     expect(source).not.toContain('function stripCodexUnsupportedResponsesFields(');

src/server/routes/proxy/gemini.test.ts

@@ -867,7 +867,6 @@ describe('gemini native proxy routes', () => {
     expect(JSON.parse(String(requestInit.body))).toEqual({
       model: 'gpt-4.1',
       stream: false,
-      max_output_tokens: 4096,
       input: [
         {
           type: 'message',

src/server/services/modelService.ts

@@ -818,7 +818,7 @@ export async function refreshModelsForAccount(
         `api token discovery timeout (${Math.round(API_TOKEN_DISCOVERY_TIMEOUT_MS / 1000)}s)`,
       );
       if (discoveredApiToken && !isMaskedTokenValue(discoveredApiToken)) {
-        ensureDefaultTokenForAccount(account.id, discoveredApiToken, { name: 'default', source: 'sync' });
+        await ensureDefaultTokenForAccount(account.id, discoveredApiToken, { name: 'default', source: 'sync' });
         await db.update(schema.accounts).set({
           apiToken: discoveredApiToken,
           updatedAt: new Date().toISOString(),
@@ -846,7 +846,7 @@ export async function refreshModelsForAccount(
   if (usesManagedTokens && enabledTokens.length === 0) {
     const fallback = discoveredApiToken || account.apiToken || null;
     if (fallback) {
-      ensureDefaultTokenForAccount(account.id, fallback, { name: 'default', source: 'legacy' });
+      await ensureDefaultTokenForAccount(account.id, fallback, { name: 'default', source: 'legacy' });
       enabledTokens = await db.select()
         .from(schema.accountTokens)
         .where(and(

src/server/transformers/shared/normalized.test.ts

@@ -154,6 +154,9 @@ describe('shared normalized helpers', () => {
         id: 'resp_terminal_2',
         model: 'gpt-test',
         created: 456,
+        incomplete_details: {
+          reason: 'max_output_tokens',
+        },
         output: [
           {
             type: 'message',