From 95306e0dd880eae8ca02dabd545b365d27189c33 Mon Sep 17 00:00:00 2001
From: Chris Johnstone <chris@johnstone.net>
Date: Mon, 15 Jun 2026 15:38:13 +1200
Subject: [PATCH 01/14] Complete OC-150 runtime assertion UX

---
 .../AGENT_PROGRESS.md                         |  23 +++-
 src/panels/requestPanel.ts                    |  22 ++--
 src/services/runtimeExecutionService.ts       |  58 +++++++--
 src/services/unresolvedVars.ts                |  17 ++-
 src/webview/requestPanel.css                  |  47 +++++--
 src/webview/requestPanel.ts                   |  70 +++++++++-
 src/webview/response.ts                       |   3 +-
 test/protocolLayoutStability.test.ts          |  74 ++++++++++-
 test/runtimeAuthoringUx.test.ts               |  12 ++
 test/runtimeExecutionService.test.ts          | 123 +++++++++++++++++-
 test/unresolvedVars.test.ts                   |  21 +++
 test/webSocketSupport.test.ts                 |   8 +-
 12 files changed, 436 insertions(+), 42 deletions(-)

diff --git a/docs/open-collection-gap-analysis/AGENT_PROGRESS.md b/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
index 2adeaae..ac2e977 100644
--- a/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
+++ b/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
@@ -72,7 +72,7 @@ Use full branch names for stacking existing branches with `but move <child-branc
 | OC-120 | Preview media zoom and rotate controls | Done | Codex | `feature/oc-120-preview-media-controls` (ia), currently stacked under OC-130/OC-140; commits `cf8d2e3`, `7d3f766`, `18dc78c`, `e31c2cd`, `fc3e164`, and `c5296ea`; no PR yet | Satisfied by `test/previewMediaControls.test.ts`: pure transform helpers, compact toolbar markup/labels/icons, rotate controls using rotate-like codicons, Ctrl+wheel and toolbar zoom handling, image/PDF controls, stale PDF render and loading-task cancellation, large PDF canvas pixel/render-scale budgeting while preserving visual zoom dimensions, packaged PDF.js asset eligibility, and generated request panel CSP checks. | `npx vitest run test/previewMediaControls.test.ts` passed 10 tests; `npm run compile` passed; targeted `npx vitest run test/previewMediaControls.test.ts test/requestTypeUx.test.ts test/responseProvider.test.ts` passed 3 files/22 tests; `npm run build` passed; `npx @vscode/vsce package --out $env:TEMP\missio-0.8.0-oc120-pdf-zoom-stability.vsix` passed; direct VSIX zip inspection found `extension/media/pdf.worker.min.mjs` and `extension/media/pdf.min.mjs`. | 2026-06-15 13:40 NZT | OC-120 user follow-up fixed. Preserve unrelated unassigned PDF.js media churn IDs `qp`/`ko`. |
 | OC-130 | Protocol-native request editor first paint | Done | Codex | `feature/oc-130-protocol-layout-stability` (g0), stacked on `feature/oc-120-preview-media-controls`; implementation commit `a3d3251` | Satisfied by `test/protocolLayoutStability.test.ts` plus shared request editor/protocol regressions: neutral first-paint shell, host invalid-YAML fallback message, direct HTTP/GraphQL/WebSocket/gRPC hydration, no visible HTTP default or stale non-HTTP controls during hydration, layout-stability CSS assertions, no-op round-trip and protocol-aware validation coverage, and request type UX startup regression. | `npx vitest run test/protocolLayoutStability.test.ts` passed 9 tests; `npm run compile` passed; focused `npx vitest run test/protocolLayoutStability.test.ts test/requestTypeUx.test.ts test/runtimeAuthoringUx.test.ts test/schemaRoundTrip.test.ts test/validationService.test.ts` passed 5 files/34 tests; targeted protocol/editor matrix passed 9 files/89 tests; `node scripts\validate-collection.js examples\demo-api` passed 44/44 files; `npm test` passed 25 files/454 tests; `npm run build` passed. | 2026-06-15 12:03 NZT | OC-130 complete. Preserve parallel/unrelated unassigned OC-140 docs IDs `wp`/`tks`/`tkt`/`uxu` and PDF.js media churn IDs `qp`/`ko`; do not commit them to OC-130. |
 | OC-140 | First-class WebSocket lifecycle UX | Done | Codex | `feature/oc-140-websocket-lifecycle-ux` (g0 after restack), stacked on `supervisor/add-websocket-lifecycle-task`; implementation commit `ec0f014`; supervisor/user follow-up commits `d2b93d4`, `1c918d5`, `401a82e`, `3bfc234`, and `b3ff548` | Satisfied by `test/webSocketSupport.test.ts` plus shared command, CodeLens, Copilot, editor, validation, round-trip, and demo regressions: persistent WebSocket sessions now expose connect/disconnect lifecycle operations through one fixed-width stateful editor button plus a separate send-message flow; retain session state and message history; surface editor controls/history, bottom status bar management, command palette/tree/CodeLens actions, and `missio_websocket_session`; route live send-tool WebSocket execution to lifecycle diagnostics; disconnect on editor/session cleanup; prefer freshly posted WebSocket lifecycle requests over stale debounced YAML; extract send-message payloads from the same resolved lifecycle request; keep Send styled as the primary request action; hide the HTTP-style response placeholder/body pane so WebSocket history fills the response area; show millisecond-precision history timestamps; and add local connect-only, repeated-send, and server-push fixtures. | `npm run compile` passed; `npx vitest run test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 2 files/35 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; live local WebSocket lifecycle smoke returned `LIVE_WS_LIFECYCLE_SMOKE ok`; `npm test` passed 25 files/465 tests; `npm run build` passed. | 2026-06-15 14:32 NZT | OC-140 complete. WebSocket lifecycle sessions are file-path scoped for editor/command flows, persist for that request until disconnect/close/editor disposal, and are intentionally not shared across separate request files. Preserve unrelated PDF.js media churn IDs `qp`/`ko`. |
-| OC-150 | Runtime assertion variables and WebSocket runtime results UX | Unclaimed | - | - | Add/extend editor tests for variable-aware assertion fields, runtime service tests for assertion interpolation/evaluation, unresolved variable detection tests for runtime assertion fields, WebSocket editor/result visibility tests for runtime results, lifecycle button contrast tests, and shared runtime/protocol regressions. | Not started. | 2026-06-15 15:15 NZT | Claim after reviewing OC-080, OC-110, and OC-140 because this touches shared runtime, request panel, response, unresolved-variable, and WebSocket CSS surfaces. |
+| OC-150 | Runtime assertion variables and WebSocket runtime results UX | In Progress | Codex | feature/oc-150-runtime-assertion-variables, stacked on supervisor/add-runtime-assertion-variable-task | Satisfied by `test/runtimeAuthoringUx.test.ts` for shared variable-aware assertion expression/value/description inputs and dynamic row overlays; `test/runtimeExecutionService.test.ts` for assertion expression/value/description interpolation, unresolved assertion variables, disabled assertions, and HTTP/GraphQL/WebSocket/gRPC runtime parity; `test/unresolvedVars.test.ts` for assertion field scanning; `test/webSocketSupport.test.ts` for WebSocket messages/history inside the existing response tab container plus visible runtime assertion/test/action results and dark-mode lifecycle contrast; `test/protocolLayoutStability.test.ts` for no HTTP response placeholder flash and no duplicate WebSocket response panel; shared protocol regressions and full build also passed. | `npm run compile` passed; focused `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 5 files/75 tests; broader `npx vitest run test/responseProvider.test.ts test/sendRequestTool.test.ts test/graphqlSupport.test.ts test/grpcSupport.test.ts test/requestTypeUx.test.ts test/validationService.test.ts test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 11 files/127 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/473 tests; `npm run build` passed. | 2026-06-15 15:37 NZT | Commit the owned OC-150 implementation/test slice to `feature/oc-150-runtime-assertion-variables`, then record commit evidence and final status. |
 
 ## Dependency Map
 
@@ -153,6 +153,27 @@ Record cross-cutting decisions here so parallel agents do not rediscover them.
   Verified: docs-only planning change; final `rg` verification should confirm `OC-150` references before commit.
   Next: unclaimed. First agent should claim the row, record a concrete coverage plan, then reuse `enableVarOverlay` for assertion fields before changing runtime evaluation.
 
+- 2026-06-15 15:22 NZT - Codex: Claimed OC-150 and recorded the implementation coverage plan before code edits.
+  GitButler: created `feature/oc-150-runtime-assertion-variables` and stacked it on `supervisor/add-runtime-assertion-variable-task`; `but status -fv` showed clean `zz` before the ledger update.
+  Coverage: planned editor tests for runtime assertion expression/value/description fields using the shared variable-aware input path and dynamic overlays; runtime service tests for assertion field interpolation and unresolved variables across HTTP, GraphQL, WebSocket, and gRPC; unresolved variable scanner tests for assertion fields; WebSocket editor/result visibility and no HTTP-placeholder layout regressions; lifecycle button dark-mode contrast assertions; compile, demo collection validation, full suite, and build.
+  Changed: `docs/open-collection-gap-analysis/AGENT_PROGRESS.md`.
+  Verified: `but status -fv`, OC-150 task page, and current ledger reviewed; implementation tests not run yet.
+  Next: inspect `src/webview/varFields.ts`, `src/webview/requestPanel.ts`, `src/webview/requestPanel.css`, `src/services/runtimeExecutionService.ts`, `src/services/unresolvedVars.ts`, and WebSocket/runtime tests before patching the smallest coherent slice.
+
+- 2026-06-15 15:26 NZT - Codex: Updated OC-150 WebSocket result UX direction after user review.
+  GitButler: continuing on `feature/oc-150-runtime-assertion-variables`; current uncommitted change is this ledger update.
+  Coverage: WebSocket result visibility tests must prove history/messages use the existing response tab container, the Runtime tab surfaces runtime assertions/tests/actions, and the old separate ledger-only response panel path is removed without bringing back an empty HTTP response placeholder.
+  Changed: `docs/open-collection-gap-analysis/AGENT_PROGRESS.md`.
+  Verified: product direction only; implementation tests not run yet.
+  Next: migrate the WebSocket session/history surface into the existing response body tab, rename that tab to Messages for WebSocket, preserve HTTP tab behavior, then add layout regressions.
+
+- 2026-06-15 15:37 NZT - Codex: Completed OC-150 implementation and automated verification; committing is the remaining step before final status.
+  GitButler: `feature/oc-150-runtime-assertion-variables`; `but status -fv` started listing owned unassigned changes but hit `Could not find uncommitted file CLI id 'rols' in IdMap`, so `git diff --name-only` was used read-only to confirm the unassigned set contains only OC-150-owned files.
+  Coverage: implemented variable-aware assertion field overlays using the shared `enableVarOverlay` path; runtime assertion expression/value/description interpolation and deterministic unresolved-variable failures across HTTP/GraphQL/WebSocket/gRPC; unresolved variable scanner coverage for assertion fields; WebSocket Messages tab integration inside the existing response tab container with Runtime tab result visibility; dark-mode WebSocket lifecycle contrast; and regression coverage for no HTTP placeholder flash or duplicate response panel.
+  Changed: `src/webview/requestPanel.ts`, `src/webview/requestPanel.css`, `src/webview/response.ts`, `src/panels/requestPanel.ts`, `src/services/runtimeExecutionService.ts`, `src/services/unresolvedVars.ts`, `test/runtimeAuthoringUx.test.ts`, `test/runtimeExecutionService.test.ts`, `test/unresolvedVars.test.ts`, `test/webSocketSupport.test.ts`, `test/protocolLayoutStability.test.ts`, and this ledger.
+  Verified: `npm run compile` passed; focused `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 5 files/75 tests; broader protocol matrix passed 11 files/127 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/473 tests; `npm run build` passed.
+  Next: commit the owned OC-150 slice, then update this ledger with commit evidence and final status.
+
 ### OC-140 First-Class WebSocket Lifecycle UX
 
 - 2026-06-15 14:32 NZT - Codex: Removed the unused HTTP-style response body area from the WebSocket editor layout.
diff --git a/src/panels/requestPanel.ts b/src/panels/requestPanel.ts
index 8bb95b6..fc4d525 100644
--- a/src/panels/requestPanel.ts
+++ b/src/panels/requestPanel.ts
@@ -1162,17 +1162,6 @@ window.missioPdfJsReady = import('${pdfJsUri}')
 
     <!-- Response Section -->
     <div class="response-section" id="responseSection">
-      <div class="websocket-session-panel" id="webSocketSessionPanel" style="display:none;">
-        <div class="websocket-session-header">
-          <span class="websocket-state-badge" id="webSocketStateBadge">Disconnected</span>
-          <span class="websocket-session-meta" id="webSocketSessionMeta"></span>
-          <div class="websocket-session-actions">
-            <button class="btn btn-secondary websocket-history-btn" id="wsCopyHistoryBtn" type="button" title="Copy WebSocket history">Copy</button>
-            <button class="btn btn-secondary websocket-history-btn" id="wsClearHistoryBtn" type="button" title="Clear visible WebSocket history">Clear</button>
-          </div>
-        </div>
-        <div class="websocket-history" id="webSocketHistory"></div>
-      </div>
       <div class="loading-overlay" id="respLoading" style="display:none;">
         <div class="spinner"></div>
         <span>Sending request…</span>
@@ -1201,6 +1190,17 @@ window.missioPdfJsReady = import('${pdfJsUri}')
       </div>
       <div class="response-body">
         <div class="tab-panel active" id="panel-resp-body">
+          <div class="websocket-session-panel" id="webSocketSessionPanel" style="display:none;">
+            <div class="websocket-session-header">
+              <span class="websocket-state-badge" id="webSocketStateBadge">Disconnected</span>
+              <span class="websocket-session-meta" id="webSocketSessionMeta"></span>
+              <div class="websocket-session-actions">
+                <button class="btn btn-secondary websocket-history-btn" id="wsCopyHistoryBtn" type="button" title="Copy WebSocket history">Copy</button>
+                <button class="btn btn-secondary websocket-history-btn" id="wsClearHistoryBtn" type="button" title="Clear visible WebSocket history">Clear</button>
+              </div>
+            </div>
+            <div class="websocket-history" id="webSocketHistory"></div>
+          </div>
           <div class="empty-state" id="respEmpty">Send a request to see the response</div>
           <div id="respBinaryOverlay" style="display:none;padding:32px;text-align:center;color:var(--vscode-foreground);font-family:var(--vscode-font-family,system-ui);">
             <div style="font-size:14px;margin-bottom:8px;">Response body contains binary data</div>
diff --git a/src/services/runtimeExecutionService.ts b/src/services/runtimeExecutionService.ts
index 0a8e4a9..b69ba96 100644
--- a/src/services/runtimeExecutionService.ts
+++ b/src/services/runtimeExecutionService.ts
@@ -316,28 +316,48 @@ export class RuntimeExecutionService {
 
   private _runAssertions(state: RuntimeState, assertions: Assertion[]): void {
     for (const assertion of assertions) {
+      const visibleVariables = buildVisibleVariables(state.variables);
+      const expression = interpolateRuntimeTemplate(assertion.expression, visibleVariables);
+      const expected = assertion.value === undefined
+        ? undefined
+        : interpolateRuntimeTemplate(String(assertion.value), visibleVariables);
+      const description = interpolateOptionalTemplate(descriptionToText(assertion.description), visibleVariables);
       if (assertion.disabled) {
         state.result.assertions.push({
-          expression: assertion.expression,
+          expression,
           operator: assertion.operator,
-          expected: assertion.value,
+          expected,
           actual: undefined,
           passed: true,
           skipped: true,
-          description: descriptionToText(assertion.description),
+          description,
         });
         continue;
       }
 
-      const actual = evaluateExpression(assertion.expression, state);
-      const comparison = compareValues(actual, assertion.value, assertion.operator);
+      const unresolved = unresolvedTemplateNames(expression, expected, description);
+      if (unresolved.length > 0) {
+        state.result.assertions.push({
+          expression,
+          operator: assertion.operator,
+          expected,
+          actual: undefined,
+          passed: false,
+          description,
+          message: unresolvedAssertionMessage(unresolved),
+        });
+        continue;
+      }
+
+      const actual = evaluateExpression(expression, state);
+      const comparison = compareValues(actual, expected, assertion.operator);
       state.result.assertions.push({
-        expression: assertion.expression,
+        expression,
         operator: assertion.operator,
-        expected: assertion.value,
+        expected,
         actual,
         passed: comparison.passed,
-        description: descriptionToText(assertion.description),
+        description,
         message: comparison.message,
       });
     }
@@ -535,6 +555,28 @@ function interpolateRuntimeTemplate(template: string, variables: Map<string, str
   });
 }
 
+function interpolateOptionalTemplate(template: string | undefined, variables: Map<string, string>): string | undefined {
+  return template === undefined ? undefined : interpolateRuntimeTemplate(template, variables);
+}
+
+function unresolvedTemplateNames(...values: Array<string | undefined>): string[] {
+  const names = new Set<string>();
+  for (const value of values) {
+    if (!value) continue;
+    const re = varPatternGlobal();
+    let match: RegExpExecArray | null;
+    while ((match = re.exec(value)) !== null) {
+      names.add(match[1].trim());
+    }
+  }
+  return [...names];
+}
+
+function unresolvedAssertionMessage(names: string[]): string {
+  const label = names.length === 1 ? 'variable' : 'variables';
+  return `Unresolved assertion ${label}: ${names.map(name => `{{${name}}}`).join(', ')}`;
+}
+
 function resolveRuntimeBuiltin(name: string): string | undefined {
   switch (name) {
     case '$guid': return randomUUID();
diff --git a/src/services/unresolvedVars.ts b/src/services/unresolvedVars.ts
index 4e77bd7..40c3cd5 100644
--- a/src/services/unresolvedVars.ts
+++ b/src/services/unresolvedVars.ts
@@ -1,5 +1,5 @@
 import * as vscode from 'vscode';
-import type { Auth, MissioCollection, OpenCollectionRequest, RequestDefaults, Variable } from '../models/types';
+import type { Assertion, Auth, MissioCollection, OpenCollectionRequest, RequestDefaults, Variable } from '../models/types';
 import { isGraphQLRequest, isGrpcRequest, isHttpRequest, isWebSocketRequest } from '../models/types';
 import { varPatternGlobal } from '../models/varPattern';
 import type { EnvironmentService } from './environmentService';
@@ -119,6 +119,8 @@ export async function detectUnresolvedVars(
     scanAllStrings(auth, varNames);
   }
 
+  scanRuntimeAssertions(requestData.runtime?.assertions, scan);
+
   if (varNames.size === 0) return [];
 
   // Resolve variables, then find which referenced names remain unresolved
@@ -233,6 +235,19 @@ function scanGrpcMessageTemplates(message: unknown, scan: (s: string | undefined
   scan(isRecord(selected) && typeof selected.message === 'string' ? selected.message : undefined);
 }
 
+function scanRuntimeAssertions(assertions: Assertion[] | undefined, scan: (s: string | undefined) => void): void {
+  for (const assertion of assertions ?? []) {
+    if (assertion.disabled) continue;
+    scan(assertion.expression);
+    scan(assertion.value);
+    if (typeof assertion.description === 'string') {
+      scan(assertion.description);
+    } else {
+      scan(assertion.description?.content);
+    }
+  }
+}
+
 function isRecord(value: unknown): value is Record<string, any> {
   return !!value && typeof value === 'object' && !Array.isArray(value);
 }
diff --git a/src/webview/requestPanel.css b/src/webview/requestPanel.css
index 6d18803..dbba1a0 100644
--- a/src/webview/requestPanel.css
+++ b/src/webview/requestPanel.css
@@ -372,6 +372,16 @@ body {
 .request-editor-shell[data-protocol="websocket"] #sendBtn.ws-disconnect-state {
   background: var(--badge-error);
 }
+body.vscode-dark .request-editor-shell[data-protocol="websocket"] #sendBtn,
+.vscode-dark .request-editor-shell[data-protocol="websocket"] #sendBtn {
+  background: #2aa32a;
+  color: #fff;
+}
+body.vscode-dark .request-editor-shell[data-protocol="websocket"] #sendBtn.ws-disconnect-state,
+.vscode-dark .request-editor-shell[data-protocol="websocket"] #sendBtn.ws-disconnect-state {
+  background: #a33e2a;
+  color: #fff;
+}
 .request-editor-shell[data-protocol="websocket"] #sendBtn:disabled {
   opacity: 0.5;
   cursor: not-allowed;
@@ -642,10 +652,32 @@ body {
 .runtime-description {
   flex-basis: 100%;
 }
+.runtime-var-field {
+  display: inline-flex;
+  min-width: 120px;
+  flex: 1 1 160px;
+}
+.runtime-var-field .runtime-input {
+  width: 100%;
+  min-width: 0;
+  flex: 1 1 auto;
+}
+.runtime-var-field .var-overlay {
+  padding: 5px 8px;
+  font-size: 12px;
+  line-height: 1.4;
+  border-radius: 4px;
+}
 .rt-assertion-expression,
 .rt-action-selector {
   flex-basis: 220px;
 }
+.rt-assertion-expression-field {
+  flex-basis: 220px;
+}
+.rt-assertion-description-field {
+  flex-basis: 100%;
+}
 .rt-action-name {
   flex-basis: 140px;
 }
@@ -730,21 +762,14 @@ body {
 .websocket-session-panel {
   display: flex;
   flex-direction: column;
-  min-height: 112px;
-  max-height: 190px;
-  border-bottom: 1px solid var(--border);
-  background: var(--bg);
-}
-.response-section.websocket-response-ledger-only .websocket-session-panel {
   flex: 1 1 auto;
   min-height: 0;
   max-height: none;
-  border-bottom: none;
+  background: var(--bg);
 }
-.response-section.websocket-response-ledger-only .response-bar,
-.response-section.websocket-response-ledger-only #respTabs,
-.response-section.websocket-response-ledger-only .resp-search-bar,
-.response-section.websocket-response-ledger-only .response-body {
+.response-section.websocket-response-tabs #respEmpty,
+.response-section.websocket-response-tabs #respBodyWrap,
+.response-section.websocket-response-tabs #respBinaryOverlay {
   display: none !important;
 }
 .websocket-session-header {
diff --git a/src/webview/requestPanel.ts b/src/webview/requestPanel.ts
index 08dc770..b7c7426 100644
--- a/src/webview/requestPanel.ts
+++ b/src/webview/requestPanel.ts
@@ -195,6 +195,26 @@ function updateWebSocketControls(): void {
   sendMessageBtn.disabled = !connected;
 }
 
+function syncResponseLayoutForProtocol(): void {
+  const isWebSocket = _currentProtocol === 'websocket';
+  const responseSection = $('responseSection');
+  const respBodyTab = document.querySelector<HTMLElement>('#respTabs [data-tab="resp-body"]');
+  if (respBodyTab) respBodyTab.textContent = isWebSocket ? 'Messages' : 'Body';
+  responseSection.classList.toggle('websocket-response-tabs', isWebSocket);
+  responseSection.classList.remove('websocket-response-ledger-only');
+
+  if (!isWebSocket) {
+    return;
+  }
+
+  $('respTabs').style.display = 'flex';
+  $('respEmpty').style.display = 'none';
+  $('respBodyWrap').style.display = 'none';
+  const binaryOverlay = document.getElementById('respBinaryOverlay');
+  if (binaryOverlay) binaryOverlay.style.display = 'none';
+  closeSearch();
+}
+
 function formatWebSocketEventTime(timestamp: string): string {
   const date = new Date(timestamp);
   if (Number.isNaN(date.getTime())) return timestamp;
@@ -266,6 +286,35 @@ function renderWebSocketSession(): void {
     history.scrollTop = history.scrollHeight;
   }
   updateWebSocketControls();
+  syncResponseLayoutForProtocol();
+}
+
+function parseWebSocketResponseSession(response: any): WebSocketSessionSnapshot | undefined {
+  if (!response || typeof response.body !== 'string') return undefined;
+  try {
+    const body = JSON.parse(response.body);
+    if (body?.protocol !== 'websocket' || !Array.isArray(body.events)) return undefined;
+    const events = body.events as WebSocketSessionEvent[];
+    return {
+      requestId: _webSocketSession.requestId,
+      state: body.state || 'closed',
+      url: body.url,
+      events,
+      inboundCount: body.messageCount ?? events.filter(event => event.direction === 'inbound').length,
+      outboundCount: events.filter(event => event.direction === 'outbound').length,
+      lastError: events.find(event => event.direction === 'error')?.reason,
+    };
+  } catch {
+    return undefined;
+  }
+}
+
+function renderWebSocketResponse(response: any): void {
+  const session = parseWebSocketResponseSession(response);
+  if (session) setWebSocketSession(session);
+  else renderWebSocketSession();
+  switchTab($('respTabs'), 'resp-body', respPanelIds);
+  syncResponseLayoutForProtocol();
 }
 
 function connectWebSocket(): void {
@@ -805,6 +854,12 @@ function wireRuntimeRow(row: HTMLElement): void {
   });
 }
 
+function enableRuntimeAssertionVariableFields(row: HTMLElement): void {
+  row.querySelectorAll<HTMLInputElement>('.rt-assertion-expression, .rt-assertion-value, .rt-assertion-description').forEach((input) => {
+    enableVarOverlay(input);
+  });
+}
+
 function addRuntimeScript(type = 'before-request', code = '', disabled = false, originalIndex?: number): void {
   const list = $('runtimeScriptsList');
   const row = document.createElement('div');
@@ -844,17 +899,18 @@ function addRuntimeAssertion(
   row.innerHTML =
     '<div class="runtime-row-toolbar">' +
       '<input type="checkbox" class="runtime-enabled rt-assertion-enabled" title="Enabled" ' + (disabled ? '' : 'checked') + ' />' +
-      '<input type="text" class="runtime-input rt-assertion-expression" value="' + esc(expression) + '" placeholder="res.status" />' +
+      '<span class="runtime-var-field rt-assertion-expression-field"><input type="text" class="runtime-input rt-assertion-expression" value="' + esc(expression) + '" placeholder="res.status" /></span>' +
       '<select class="runtime-select rt-assertion-operator">' + optionsHtml(runtimeAssertionOperators, operator) + '</select>' +
-      '<input type="text" class="runtime-input rt-assertion-value" value="' + esc(value) + '" placeholder="expected" />' +
+      '<span class="runtime-var-field rt-assertion-value-field"><input type="text" class="runtime-input rt-assertion-value" value="' + esc(value) + '" placeholder="expected" /></span>' +
       '<div class="runtime-row-actions">' +
         '<button class="runtime-icon-btn runtime-move-up" type="button" title="Move up">&#8593;</button>' +
         '<button class="runtime-icon-btn runtime-move-down" type="button" title="Move down">&#8595;</button>' +
         '<button class="runtime-icon-btn runtime-delete" type="button" title="Remove">&times;</button>' +
       '</div>' +
     '</div>' +
-    '<input type="text" class="runtime-input runtime-description rt-assertion-description" value="' + esc(description) + '" placeholder="description" />';
+    '<span class="runtime-var-field rt-assertion-description-field"><input type="text" class="runtime-input runtime-description rt-assertion-description" value="' + esc(description) + '" placeholder="description" /></span>';
   wireRuntimeRow(row);
+  enableRuntimeAssertionVariableFields(row);
   list.appendChild(row);
   updateRuntimeBadge();
 }
@@ -1050,7 +1106,10 @@ function setProtocolUi(protocol: PanelProtocol): void {
   }
   ($('wsSendBtn') as HTMLElement).style.display = isWebSocket ? '' : 'none';
   $('webSocketSessionPanel').style.display = isWebSocket ? 'flex' : 'none';
-  $('responseSection').classList.toggle('websocket-response-ledger-only', isWebSocket);
+  syncResponseLayoutForProtocol();
+  if (isWebSocket && getLastResponse()?.headers?.['x-missio-protocol'] !== 'websocket') {
+    $('responseBar').style.display = 'none';
+  }
   $('saveExampleBtn').style.display = (isWebSocket || isGrpc) ? 'none' : '';
   $('refreshOAuthRetryBtn').style.display = 'none';
 
@@ -1964,6 +2023,9 @@ window.addEventListener('message', (event: MessageEvent) => {
       $('exampleIndicator').style.display = 'none';
       closeSearch();
       showResponse(msg.response, msg.preRequestMs, msg.timing, msg.usedOAuth2);
+      if (_currentProtocol === 'websocket') {
+        renderWebSocketResponse(msg.response);
+      }
       setSendingState(false);
       tokenStatusCtrl.requestStatus();
       break;
diff --git a/src/webview/response.ts b/src/webview/response.ts
index 5fad5cc..2487c2e 100644
--- a/src/webview/response.ts
+++ b/src/webview/response.ts
@@ -1059,11 +1059,12 @@ function renderRuntimeResults(runtime: any): string {
     esc(String(test.message ?? '')),
   ]));
 
-  sections.push(renderRuntimeTable('Assertions', ['Result', 'Expression', 'Expected', 'Actual'], runtime.assertions ?? [], (assertion: any) => [
+  sections.push(renderRuntimeTable('Assertions', ['Result', 'Expression', 'Expected', 'Actual', 'Message'], runtime.assertions ?? [], (assertion: any) => [
     runtimeStateCell(assertion.passed, assertion.skipped),
     esc(`${assertion.expression ?? ''} ${assertion.operator ?? ''}`),
     esc(formatRuntimeValue(assertion.expected)),
     esc(formatRuntimeValue(assertion.actual)),
+    esc(String(assertion.message ?? '')),
   ]));
 
   sections.push(renderRuntimeTable('Actions', ['Result', 'Phase', 'Target', 'Value'], runtime.actions ?? [], (action: any) => [
diff --git a/test/protocolLayoutStability.test.ts b/test/protocolLayoutStability.test.ts
index 3657d26..a04c234 100644
--- a/test/protocolLayoutStability.test.ts
+++ b/test/protocolLayoutStability.test.ts
@@ -214,6 +214,8 @@ describe('OC-130 request editor first paint', () => {
     const methodPicker = document.getElementById('methodPicker') as HTMLElement;
     const protocolIcon = document.getElementById('protocolIcon') as HTMLElement;
     const responseSection = document.getElementById('responseSection') as HTMLElement;
+    const responseTabs = document.getElementById('respTabs') as HTMLElement;
+    const responseBodyTab = document.querySelector<HTMLElement>('#respTabs [data-tab="resp-body"]');
     const bodyTab = document.querySelector<HTMLElement>('#reqTabs [data-tab="body"]');
 
     expect(shell.dataset.hydrationState).toBe('ready');
@@ -253,7 +255,13 @@ describe('OC-130 request editor first paint', () => {
       expect(sendMessageBtn.textContent).toBe('Send');
       expect(sendMessageBtn.className).toContain('btn-primary');
       expect(document.getElementById('wsDisconnectBtn')).toBeNull();
-      expect(responseSection.className).toContain('websocket-response-ledger-only');
+      expect(responseSection.className).toContain('websocket-response-tabs');
+      expect(responseSection.className).not.toContain('websocket-response-ledger-only');
+      expect(responseTabs.style.display).toBe('flex');
+      expect(responseBodyTab?.textContent).toBe('Messages');
+      expect(document.getElementById('webSocketSessionPanel')?.parentElement?.id).toBe('panel-resp-body');
+      expect((document.getElementById('respEmpty') as HTMLElement).style.display).toBe('none');
+      expect((document.getElementById('respBodyWrap') as HTMLElement).style.display).toBe('none');
 
       dispatchPanelMessage(dom, { type: 'webSocketConnecting' });
       expect(connectBtn.textContent).toBe('Disconnect');
@@ -277,10 +285,74 @@ describe('OC-130 request editor first paint', () => {
       connectBtn.click();
       expect(messages.slice(messageCount)).toContainEqual({ type: 'webSocketDisconnect' });
     } else {
+      expect(responseSection.className).not.toContain('websocket-response-tabs');
       expect(responseSection.className).not.toContain('websocket-response-ledger-only');
+      expect(responseBodyTab?.textContent).toBe('Body');
     }
   });
 
+  it('renders WebSocket messages and runtime results in the existing response tabs', async () => {
+    const { dom } = await loadRequestPanel();
+    dispatchPanelMessage(dom, { type: 'requestLoaded', request: requestForProtocol('websocket'), filePath: 'websocket.yml' });
+
+    dispatchPanelMessage(dom, {
+      type: 'response',
+      response: {
+        status: 101,
+        statusText: 'WebSocket Session',
+        headers: { 'content-type': 'application/json', 'x-missio-protocol': 'websocket' },
+        body: JSON.stringify({
+          protocol: 'websocket',
+          url: 'ws://example.test/socket',
+          state: 'closed',
+          messageCount: 1,
+          events: [
+            { timestamp: '2026-06-15T01:02:03.456Z', direction: 'outbound', type: 'text', data: 'ping' },
+            { timestamp: '2026-06-15T01:02:03.789Z', direction: 'inbound', type: 'text', data: 'hello' },
+          ],
+        }),
+        runtime: {
+          success: false,
+          summary: { passed: 1, failed: 1, skipped: 0 },
+          tests: [{ name: 'socket echoed', passed: true }],
+          assertions: [{
+            expression: 'res.body.message',
+            operator: 'equals',
+            expected: 'ok',
+            actual: 'hello',
+            passed: false,
+            message: 'Expected hello equals ok',
+          }],
+          actions: [{ type: 'set-variable', phase: 'after-response', target: 'runtime.wsMessageCount', value: 1, passed: true }],
+          variableMutations: [],
+          logs: [{ phase: 'after-response', level: 'log', message: 'websocket after hello' }],
+          errors: [],
+        },
+        duration: 12,
+        size: 0,
+      },
+    });
+
+    const responseSection = document.getElementById('responseSection') as HTMLElement;
+    const responseTabs = document.getElementById('respTabs') as HTMLElement;
+    const runtimeTab = document.getElementById('respRuntimeTab') as HTMLElement;
+    const history = document.getElementById('webSocketHistory') as HTMLElement;
+    const runtimeResults = document.getElementById('runtimeResults') as HTMLElement;
+
+    expect(responseSection.className).toContain('websocket-response-tabs');
+    expect(responseSection.className).not.toContain('websocket-response-ledger-only');
+    expect(responseTabs.style.display).toBe('flex');
+    expect(document.querySelector<HTMLElement>('#respTabs [data-tab="resp-body"]')?.textContent).toBe('Messages');
+    expect((document.getElementById('panel-resp-body') as HTMLElement).className).toContain('active');
+    expect(history.textContent).toContain('ping');
+    expect(history.textContent).toContain('hello');
+    expect((document.getElementById('respEmpty') as HTMLElement).style.display).toBe('none');
+    expect((document.getElementById('respBodyWrap') as HTMLElement).style.display).toBe('none');
+    expect(runtimeTab.style.display).toBe('');
+    expect(runtimeResults.textContent).toContain('Assertions');
+    expect(runtimeResults.textContent).toContain('Expected hello equals ok');
+  });
+
   it('keeps invalid YAML in a neutral fallback instead of revealing HTTP controls', async () => {
     const { dom } = await loadRequestPanel();
 
diff --git a/test/runtimeAuthoringUx.test.ts b/test/runtimeAuthoringUx.test.ts
index a570d14..e2c3836 100644
--- a/test/runtimeAuthoringUx.test.ts
+++ b/test/runtimeAuthoringUx.test.ts
@@ -285,11 +285,23 @@ describe('OC-110 runtime authoring UI shell', () => {
     expect(css).toContain('.runtime-authoring');
     expect(css).toContain('.runtime-editor-row');
     expect(css).toContain('.runtime-row-toolbar');
+    expect(css).toContain('.runtime-var-field');
     expect(css).toContain('.runtime-icon-btn');
     expect(css).toContain('.runtime-unsupported-note');
     expect(css).toContain('.runtime-list:empty::before');
   });
 
+  it('reuses the shared variable overlay path for runtime assertion fields', () => {
+    const source = fs.readFileSync(path.join(process.cwd(), 'src', 'webview', 'requestPanel.ts'), 'utf8');
+
+    expect(source).toContain('function enableRuntimeAssertionVariableFields');
+    expect(source).toContain('enableVarOverlay(input)');
+    expect(source).toContain('.rt-assertion-expression, .rt-assertion-value, .rt-assertion-description');
+    expect(source).toContain('runtime-var-field rt-assertion-expression-field');
+    expect(source).toContain('runtime-var-field rt-assertion-value-field');
+    expect(source).toContain('runtime-var-field rt-assertion-description-field');
+  });
+
   it('offers only runtime-executable script phases and supported set-variable scopes for new rows', () => {
     const source = fs.readFileSync(path.join(process.cwd(), 'src', 'webview', 'requestPanel.ts'), 'utf8');
 
diff --git a/test/runtimeExecutionService.test.ts b/test/runtimeExecutionService.test.ts
index 9d1170a..3ab2e96 100644
--- a/test/runtimeExecutionService.test.ts
+++ b/test/runtimeExecutionService.test.ts
@@ -1,12 +1,12 @@
 import * as http from 'http';
 import * as os from 'os';
 import * as path from 'path';
-import { describe, expect, it } from 'vitest';
+import { describe, expect, it, vi } from 'vitest';
 import { HttpClient } from '../src/services/httpClient';
 import { RequestExecutionService } from '../src/services/requestExecutionService';
 import { RuntimeExecutionError, RuntimeExecutionService } from '../src/services/runtimeExecutionService';
 import { detectUnresolvedVars } from '../src/services/unresolvedVars';
-import type { HttpRequest, HttpResponse, MissioCollection } from '../src/models/types';
+import type { GraphQLRequest, GrpcRequest, HttpRequest, HttpResponse, MissioCollection, WebSocketRequest } from '../src/models/types';
 
 function interpolate(template: string, variables: Map<string, string>): string {
   return template.replace(/\{\{\s*([\w.$-]+)\s*\}\}/g, (match, name) => variables.get(name) ?? match);
@@ -120,6 +120,84 @@ describe('RuntimeExecutionService lifecycle', () => {
     expect(response.runtime?.logs.map(log => log.message)).toEqual(['before base', 'after abc123']);
   });
 
+  it('interpolates runtime assertion expression, expected value, and description across runtime protocols', async () => {
+    const service = new RuntimeExecutionService(async () => new Map([
+      ['fieldName', 'name'],
+      ['descriptionOwner', 'Ada'],
+    ]));
+    const runtime = () => ({
+      variables: [{ name: 'assertionField', value: '{{fieldName}}' }],
+      scripts: [{
+        type: 'after-response' as const,
+        code: 'missio.variables.set("expectedName", response.json().name);',
+      }],
+      assertions: [{
+        expression: 'res.body.{{assertionField}}',
+        operator: 'equals',
+        value: '{{expectedName}}',
+        description: 'Owner {{descriptionOwner}}',
+      }],
+    });
+    const cases = [
+      {
+        request: { http: { method: 'GET', url: 'http://127.0.0.1/runtime' }, runtime: runtime() } as HttpRequest,
+        prepare: (request: HttpRequest) => service.prepareHttpRequest(request, makeCollection()),
+        complete: (prepared: any, response: HttpResponse) => service.completeHttpRequest(prepared, response),
+      },
+      {
+        request: { websocket: { url: 'ws://127.0.0.1/socket', message: { type: 'text', data: 'ping' } }, runtime: runtime() } as WebSocketRequest,
+        prepare: (request: WebSocketRequest) => service.prepareWebSocketRequest(request, makeCollection()),
+        complete: (prepared: any, response: HttpResponse) => service.completeWebSocketRequest(prepared, response),
+      },
+      {
+        request: { grpc: { url: '127.0.0.1:50051', method: 'demo.Service/Get', message: '{}' }, runtime: runtime() } as GrpcRequest,
+        prepare: (request: GrpcRequest) => service.prepareGrpcRequest(request, makeCollection()),
+        complete: (prepared: any, response: HttpResponse) => service.completeGrpcRequest(prepared, response),
+      },
+    ];
+
+    for (const testCase of cases) {
+      const prepared = await testCase.prepare(testCase.request as never);
+      const response = await testCase.complete(prepared, makeResponse({ name: 'Ada' }));
+
+      expect(response.runtime?.success).toBe(true);
+      expect(response.runtime?.assertions[0]).toMatchObject({
+        expression: 'res.body.name',
+        expected: 'Ada',
+        actual: 'Ada',
+        description: 'Owner Ada',
+        passed: true,
+      });
+    }
+  });
+
+  it('reports unresolved runtime assertion variables deterministically', async () => {
+    const service = new RuntimeExecutionService(async () => new Map());
+    const request: HttpRequest = {
+      http: { method: 'GET', url: 'http://127.0.0.1/runtime' },
+      runtime: {
+        assertions: [{
+          expression: 'res.body.{{missingField}}',
+          operator: 'equals',
+          value: '{{missingExpected}}',
+          description: 'Needs {{missingDescription}}',
+        }],
+      },
+    };
+
+    const prepared = await service.prepareHttpRequest(request, makeCollection());
+    const response = await service.completeHttpRequest(prepared, makeResponse({ name: 'Ada' }));
+
+    expect(response.runtime?.success).toBe(false);
+    expect(response.runtime?.assertions[0]).toMatchObject({
+      passed: false,
+      expression: 'res.body.{{missingField}}',
+      expected: '{{missingExpected}}',
+      description: 'Needs {{missingDescription}}',
+      message: 'Unresolved assertion variables: {{missingField}}, {{missingExpected}}, {{missingDescription}}',
+    });
+  });
+
   it('evaluates runtime variable values and interpolates script source before execution', async () => {
     const service = new RuntimeExecutionService(async () => new Map([
       ['owner', 'Ada'],
@@ -396,6 +474,47 @@ describe('RequestExecutionService runtime integration', () => {
       await new Promise<void>(resolve => server.close(() => resolve()));
     }
   });
+
+  it('interpolates runtime assertion fields for GraphQL execution through the HTTP adapter', async () => {
+    const httpClient = {
+      send: vi.fn().mockResolvedValue(makeResponse({ data: { user: { name: 'Ada' } } })),
+      buildResolvedRequest: vi.fn(),
+      cancelAll: vi.fn(),
+    };
+    const runtime = new RuntimeExecutionService(async () => new Map([
+      ['gqlField', 'name'],
+      ['expectedName', 'Ada'],
+    ]));
+    const executionService = new RequestExecutionService(httpClient as any, undefined, undefined, runtime);
+    const request: GraphQLRequest = {
+      info: { name: 'User query', type: 'graphql' },
+      graphql: {
+        method: 'POST',
+        url: 'http://127.0.0.1/graphql',
+        body: { query: 'query User { user { name } }', variables: '{}' },
+      },
+      runtime: {
+        assertions: [{
+          expression: 'res.body.data.user.{{gqlField}}',
+          operator: 'equals',
+          value: '{{expectedName}}',
+          description: 'GraphQL {{expectedName}}',
+        }],
+      },
+    };
+
+    const response = await executionService.send(request, makeCollection());
+
+    expect(httpClient.send).toHaveBeenCalledOnce();
+    expect(response.runtime?.success).toBe(true);
+    expect(response.runtime?.assertions[0]).toMatchObject({
+      expression: 'res.body.data.user.name',
+      expected: 'Ada',
+      actual: 'Ada',
+      description: 'GraphQL Ada',
+      passed: true,
+    });
+  });
 });
 
 describe('runtime variables in unresolved-variable detection', () => {
diff --git a/test/unresolvedVars.test.ts b/test/unresolvedVars.test.ts
index fe66678..6547804 100644
--- a/test/unresolvedVars.test.ts
+++ b/test/unresolvedVars.test.ts
@@ -105,6 +105,27 @@ describe('unresolvedVars', () => {
     expect(result).toContain('clientSecret');
   });
 
+  it('detects unresolved vars in runtime assertion expression, value, and description fields', async () => {
+    const request = makeRequest() as any;
+    request.runtime = {
+      variables: [{ name: 'expectedStatus', value: '200' }],
+      assertions: [{
+        expression: 'res.body.{{missingField}}',
+        operator: 'equals',
+        value: '{{expectedStatus}}',
+        description: { content: 'Missing {{assertionDescription}}', type: 'text/markdown' },
+      }],
+    };
+
+    const result = await detectUnresolvedVars(
+      request,
+      makeCollection(),
+      service,
+    );
+
+    expect(result).toEqual(['missingField', 'assertionDescription']);
+  });
+
   it('detects unresolved vars in apikey auth', async () => {
     const result = await detectUnresolvedVars(
       makeRequest({
diff --git a/test/webSocketSupport.test.ts b/test/webSocketSupport.test.ts
index 20020c0..fb67272 100644
--- a/test/webSocketSupport.test.ts
+++ b/test/webSocketSupport.test.ts
@@ -607,14 +607,18 @@ describe('WebSocket editor, variables, and tools', () => {
     expect(html).toContain('id="webSocketHistory"');
     expect(css).toContain('.websocket-session-panel');
     expect(css).toContain('.websocket-history-row');
-    expect(css).toContain('.response-section.websocket-response-ledger-only .websocket-session-panel');
-    expect(css).toContain('.response-section.websocket-response-ledger-only .response-body');
+    expect(css).toContain('.response-section.websocket-response-tabs #respBodyWrap');
+    expect(css).not.toContain('.response-section.websocket-response-ledger-only .response-body');
     expect(css).toContain('max-height: none;');
     expect(css).toContain('.request-editor-shell[data-protocol="websocket"] #sendBtn');
     expect(css).toContain('#sendBtn.ws-disconnect-state');
+    expect(css).toContain('background: #2aa32a;');
+    expect(css).toContain('background: #a33e2a;');
+    expect(css).toContain('color: #fff;');
     expect(css).toContain('width: 90px;');
     expect(script).toContain("connectBtn.textContent = canDisconnect ? 'Disconnect' : 'Connect';");
     expect(script).toContain("connectBtn.classList.toggle('ws-disconnect-state', canDisconnect);");
+    expect(script).toContain("respBodyTab.textContent = isWebSocket ? 'Messages' : 'Body';");
     expect(script).toContain('fractionalSecondDigits: 3');
   });
 

From 68befbc8e324496f052aa8fe8cb5beb541e26fa5 Mon Sep 17 00:00:00 2001
From: Chris Johnstone <chris@johnstone.net>
Date: Mon, 15 Jun 2026 15:39:50 +1200
Subject: [PATCH 02/14] Record OC-150 completion

---
 docs/open-collection-gap-analysis/AGENT_PROGRESS.md | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/docs/open-collection-gap-analysis/AGENT_PROGRESS.md b/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
index ac2e977..611de4e 100644
--- a/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
+++ b/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
@@ -72,7 +72,7 @@ Use full branch names for stacking existing branches with `but move <child-branc
 | OC-120 | Preview media zoom and rotate controls | Done | Codex | `feature/oc-120-preview-media-controls` (ia), currently stacked under OC-130/OC-140; commits `cf8d2e3`, `7d3f766`, `18dc78c`, `e31c2cd`, `fc3e164`, and `c5296ea`; no PR yet | Satisfied by `test/previewMediaControls.test.ts`: pure transform helpers, compact toolbar markup/labels/icons, rotate controls using rotate-like codicons, Ctrl+wheel and toolbar zoom handling, image/PDF controls, stale PDF render and loading-task cancellation, large PDF canvas pixel/render-scale budgeting while preserving visual zoom dimensions, packaged PDF.js asset eligibility, and generated request panel CSP checks. | `npx vitest run test/previewMediaControls.test.ts` passed 10 tests; `npm run compile` passed; targeted `npx vitest run test/previewMediaControls.test.ts test/requestTypeUx.test.ts test/responseProvider.test.ts` passed 3 files/22 tests; `npm run build` passed; `npx @vscode/vsce package --out $env:TEMP\missio-0.8.0-oc120-pdf-zoom-stability.vsix` passed; direct VSIX zip inspection found `extension/media/pdf.worker.min.mjs` and `extension/media/pdf.min.mjs`. | 2026-06-15 13:40 NZT | OC-120 user follow-up fixed. Preserve unrelated unassigned PDF.js media churn IDs `qp`/`ko`. |
 | OC-130 | Protocol-native request editor first paint | Done | Codex | `feature/oc-130-protocol-layout-stability` (g0), stacked on `feature/oc-120-preview-media-controls`; implementation commit `a3d3251` | Satisfied by `test/protocolLayoutStability.test.ts` plus shared request editor/protocol regressions: neutral first-paint shell, host invalid-YAML fallback message, direct HTTP/GraphQL/WebSocket/gRPC hydration, no visible HTTP default or stale non-HTTP controls during hydration, layout-stability CSS assertions, no-op round-trip and protocol-aware validation coverage, and request type UX startup regression. | `npx vitest run test/protocolLayoutStability.test.ts` passed 9 tests; `npm run compile` passed; focused `npx vitest run test/protocolLayoutStability.test.ts test/requestTypeUx.test.ts test/runtimeAuthoringUx.test.ts test/schemaRoundTrip.test.ts test/validationService.test.ts` passed 5 files/34 tests; targeted protocol/editor matrix passed 9 files/89 tests; `node scripts\validate-collection.js examples\demo-api` passed 44/44 files; `npm test` passed 25 files/454 tests; `npm run build` passed. | 2026-06-15 12:03 NZT | OC-130 complete. Preserve parallel/unrelated unassigned OC-140 docs IDs `wp`/`tks`/`tkt`/`uxu` and PDF.js media churn IDs `qp`/`ko`; do not commit them to OC-130. |
 | OC-140 | First-class WebSocket lifecycle UX | Done | Codex | `feature/oc-140-websocket-lifecycle-ux` (g0 after restack), stacked on `supervisor/add-websocket-lifecycle-task`; implementation commit `ec0f014`; supervisor/user follow-up commits `d2b93d4`, `1c918d5`, `401a82e`, `3bfc234`, and `b3ff548` | Satisfied by `test/webSocketSupport.test.ts` plus shared command, CodeLens, Copilot, editor, validation, round-trip, and demo regressions: persistent WebSocket sessions now expose connect/disconnect lifecycle operations through one fixed-width stateful editor button plus a separate send-message flow; retain session state and message history; surface editor controls/history, bottom status bar management, command palette/tree/CodeLens actions, and `missio_websocket_session`; route live send-tool WebSocket execution to lifecycle diagnostics; disconnect on editor/session cleanup; prefer freshly posted WebSocket lifecycle requests over stale debounced YAML; extract send-message payloads from the same resolved lifecycle request; keep Send styled as the primary request action; hide the HTTP-style response placeholder/body pane so WebSocket history fills the response area; show millisecond-precision history timestamps; and add local connect-only, repeated-send, and server-push fixtures. | `npm run compile` passed; `npx vitest run test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 2 files/35 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; live local WebSocket lifecycle smoke returned `LIVE_WS_LIFECYCLE_SMOKE ok`; `npm test` passed 25 files/465 tests; `npm run build` passed. | 2026-06-15 14:32 NZT | OC-140 complete. WebSocket lifecycle sessions are file-path scoped for editor/command flows, persist for that request until disconnect/close/editor disposal, and are intentionally not shared across separate request files. Preserve unrelated PDF.js media churn IDs `qp`/`ko`. |
-| OC-150 | Runtime assertion variables and WebSocket runtime results UX | In Progress | Codex | feature/oc-150-runtime-assertion-variables, stacked on supervisor/add-runtime-assertion-variable-task | Satisfied by `test/runtimeAuthoringUx.test.ts` for shared variable-aware assertion expression/value/description inputs and dynamic row overlays; `test/runtimeExecutionService.test.ts` for assertion expression/value/description interpolation, unresolved assertion variables, disabled assertions, and HTTP/GraphQL/WebSocket/gRPC runtime parity; `test/unresolvedVars.test.ts` for assertion field scanning; `test/webSocketSupport.test.ts` for WebSocket messages/history inside the existing response tab container plus visible runtime assertion/test/action results and dark-mode lifecycle contrast; `test/protocolLayoutStability.test.ts` for no HTTP response placeholder flash and no duplicate WebSocket response panel; shared protocol regressions and full build also passed. | `npm run compile` passed; focused `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 5 files/75 tests; broader `npx vitest run test/responseProvider.test.ts test/sendRequestTool.test.ts test/graphqlSupport.test.ts test/grpcSupport.test.ts test/requestTypeUx.test.ts test/validationService.test.ts test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 11 files/127 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/473 tests; `npm run build` passed. | 2026-06-15 15:37 NZT | Commit the owned OC-150 implementation/test slice to `feature/oc-150-runtime-assertion-variables`, then record commit evidence and final status. |
+| OC-150 | Runtime assertion variables and WebSocket runtime results UX | Done | Codex | feature/oc-150-runtime-assertion-variables, stacked on supervisor/add-runtime-assertion-variable-task; implementation commit `302d325` | Satisfied by `test/runtimeAuthoringUx.test.ts` for shared variable-aware assertion expression/value/description inputs and dynamic row overlays; `test/runtimeExecutionService.test.ts` for assertion expression/value/description interpolation, unresolved assertion variables, disabled assertions, and HTTP/GraphQL/WebSocket/gRPC runtime parity; `test/unresolvedVars.test.ts` for assertion field scanning; `test/webSocketSupport.test.ts` for WebSocket messages/history inside the existing response tab container plus visible runtime assertion/test/action results and dark-mode lifecycle contrast; `test/protocolLayoutStability.test.ts` for no HTTP response placeholder flash and no duplicate WebSocket response panel; shared protocol regressions and full build also passed. | `npm run compile` passed; focused `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 5 files/75 tests; broader `npx vitest run test/responseProvider.test.ts test/sendRequestTool.test.ts test/graphqlSupport.test.ts test/grpcSupport.test.ts test/requestTypeUx.test.ts test/validationService.test.ts test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 11 files/127 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/473 tests; `npm run build` passed. | 2026-06-15 15:38 NZT | OC-150 complete; final ledger-only commit pending. |
 
 ## Dependency Map
 
@@ -174,6 +174,13 @@ Record cross-cutting decisions here so parallel agents do not rediscover them.
   Verified: `npm run compile` passed; focused `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 5 files/75 tests; broader protocol matrix passed 11 files/127 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/473 tests; `npm run build` passed.
   Next: commit the owned OC-150 slice, then update this ledger with commit evidence and final status.
 
+- 2026-06-15 15:38 NZT - Codex: Committed the OC-150 implementation and recorded final status.
+  GitButler: implementation/test/verification ledger commit `302d325` on `feature/oc-150-runtime-assertion-variables`; `but commit les -m "Complete OC-150 runtime assertion UX"` was used without `--changes` because `but status -fv` had an IdMap failure, and the read-only `git diff --name-only` audit showed only OC-150-owned files before the commit. The commit output showed `zz` clean afterward.
+  Coverage: complete and passing for editor variable overlays, runtime interpolation/unresolved diagnostics, unresolved-variable scanner, WebSocket tabbed result visibility, dark-mode lifecycle contrast, protocol regressions, demo validation, full suite, and build.
+  Changed: final ledger status only after `302d325`.
+  Verified: commit output showed `zz [unassigned changes] (no changes)` immediately after `302d325`.
+  Next: commit this final ledger-only evidence update; OC-150 is otherwise complete.
+
 ### OC-140 First-Class WebSocket Lifecycle UX
 
 - 2026-06-15 14:32 NZT - Codex: Removed the unused HTTP-style response body area from the WebSocket editor layout.

From 8bbe1e02b46224b575fb82b83af8b72f878ec69b Mon Sep 17 00:00:00 2001
From: Chris Johnstone <chris@johnstone.net>
Date: Mon, 15 Jun 2026 15:55:55 +1200
Subject: [PATCH 03/14] Rework OC-150 assertion preflight

---
 .../AGENT_PROGRESS.md                         |  9 ++++-
 src/services/unresolvedVars.ts                | 19 +++--------
 src/webview/requestPanel.ts                   |  8 +++++
 test/protocolLayoutStability.test.ts          | 34 +++++++++++++++++++
 test/runtimeExecutionService.test.ts          | 22 +++++++++++-
 test/unresolvedVars.test.ts                   | 15 ++++----
 6 files changed, 84 insertions(+), 23 deletions(-)

diff --git a/docs/open-collection-gap-analysis/AGENT_PROGRESS.md b/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
index 611de4e..ccbad5a 100644
--- a/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
+++ b/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
@@ -72,7 +72,7 @@ Use full branch names for stacking existing branches with `but move <child-branc
 | OC-120 | Preview media zoom and rotate controls | Done | Codex | `feature/oc-120-preview-media-controls` (ia), currently stacked under OC-130/OC-140; commits `cf8d2e3`, `7d3f766`, `18dc78c`, `e31c2cd`, `fc3e164`, and `c5296ea`; no PR yet | Satisfied by `test/previewMediaControls.test.ts`: pure transform helpers, compact toolbar markup/labels/icons, rotate controls using rotate-like codicons, Ctrl+wheel and toolbar zoom handling, image/PDF controls, stale PDF render and loading-task cancellation, large PDF canvas pixel/render-scale budgeting while preserving visual zoom dimensions, packaged PDF.js asset eligibility, and generated request panel CSP checks. | `npx vitest run test/previewMediaControls.test.ts` passed 10 tests; `npm run compile` passed; targeted `npx vitest run test/previewMediaControls.test.ts test/requestTypeUx.test.ts test/responseProvider.test.ts` passed 3 files/22 tests; `npm run build` passed; `npx @vscode/vsce package --out $env:TEMP\missio-0.8.0-oc120-pdf-zoom-stability.vsix` passed; direct VSIX zip inspection found `extension/media/pdf.worker.min.mjs` and `extension/media/pdf.min.mjs`. | 2026-06-15 13:40 NZT | OC-120 user follow-up fixed. Preserve unrelated unassigned PDF.js media churn IDs `qp`/`ko`. |
 | OC-130 | Protocol-native request editor first paint | Done | Codex | `feature/oc-130-protocol-layout-stability` (g0), stacked on `feature/oc-120-preview-media-controls`; implementation commit `a3d3251` | Satisfied by `test/protocolLayoutStability.test.ts` plus shared request editor/protocol regressions: neutral first-paint shell, host invalid-YAML fallback message, direct HTTP/GraphQL/WebSocket/gRPC hydration, no visible HTTP default or stale non-HTTP controls during hydration, layout-stability CSS assertions, no-op round-trip and protocol-aware validation coverage, and request type UX startup regression. | `npx vitest run test/protocolLayoutStability.test.ts` passed 9 tests; `npm run compile` passed; focused `npx vitest run test/protocolLayoutStability.test.ts test/requestTypeUx.test.ts test/runtimeAuthoringUx.test.ts test/schemaRoundTrip.test.ts test/validationService.test.ts` passed 5 files/34 tests; targeted protocol/editor matrix passed 9 files/89 tests; `node scripts\validate-collection.js examples\demo-api` passed 44/44 files; `npm test` passed 25 files/454 tests; `npm run build` passed. | 2026-06-15 12:03 NZT | OC-130 complete. Preserve parallel/unrelated unassigned OC-140 docs IDs `wp`/`tks`/`tkt`/`uxu` and PDF.js media churn IDs `qp`/`ko`; do not commit them to OC-130. |
 | OC-140 | First-class WebSocket lifecycle UX | Done | Codex | `feature/oc-140-websocket-lifecycle-ux` (g0 after restack), stacked on `supervisor/add-websocket-lifecycle-task`; implementation commit `ec0f014`; supervisor/user follow-up commits `d2b93d4`, `1c918d5`, `401a82e`, `3bfc234`, and `b3ff548` | Satisfied by `test/webSocketSupport.test.ts` plus shared command, CodeLens, Copilot, editor, validation, round-trip, and demo regressions: persistent WebSocket sessions now expose connect/disconnect lifecycle operations through one fixed-width stateful editor button plus a separate send-message flow; retain session state and message history; surface editor controls/history, bottom status bar management, command palette/tree/CodeLens actions, and `missio_websocket_session`; route live send-tool WebSocket execution to lifecycle diagnostics; disconnect on editor/session cleanup; prefer freshly posted WebSocket lifecycle requests over stale debounced YAML; extract send-message payloads from the same resolved lifecycle request; keep Send styled as the primary request action; hide the HTTP-style response placeholder/body pane so WebSocket history fills the response area; show millisecond-precision history timestamps; and add local connect-only, repeated-send, and server-push fixtures. | `npm run compile` passed; `npx vitest run test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 2 files/35 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; live local WebSocket lifecycle smoke returned `LIVE_WS_LIFECYCLE_SMOKE ok`; `npm test` passed 25 files/465 tests; `npm run build` passed. | 2026-06-15 14:32 NZT | OC-140 complete. WebSocket lifecycle sessions are file-path scoped for editor/command flows, persist for that request until disconnect/close/editor disposal, and are intentionally not shared across separate request files. Preserve unrelated PDF.js media churn IDs `qp`/`ko`. |
-| OC-150 | Runtime assertion variables and WebSocket runtime results UX | Done | Codex | feature/oc-150-runtime-assertion-variables, stacked on supervisor/add-runtime-assertion-variable-task; implementation commit `302d325` | Satisfied by `test/runtimeAuthoringUx.test.ts` for shared variable-aware assertion expression/value/description inputs and dynamic row overlays; `test/runtimeExecutionService.test.ts` for assertion expression/value/description interpolation, unresolved assertion variables, disabled assertions, and HTTP/GraphQL/WebSocket/gRPC runtime parity; `test/unresolvedVars.test.ts` for assertion field scanning; `test/webSocketSupport.test.ts` for WebSocket messages/history inside the existing response tab container plus visible runtime assertion/test/action results and dark-mode lifecycle contrast; `test/protocolLayoutStability.test.ts` for no HTTP response placeholder flash and no duplicate WebSocket response panel; shared protocol regressions and full build also passed. | `npm run compile` passed; focused `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 5 files/75 tests; broader `npx vitest run test/responseProvider.test.ts test/sendRequestTool.test.ts test/graphqlSupport.test.ts test/grpcSupport.test.ts test/requestTypeUx.test.ts test/validationService.test.ts test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 11 files/127 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/473 tests; `npm run build` passed. | 2026-06-15 15:38 NZT | OC-150 complete; final ledger-only commit pending. |
+| OC-150 | Runtime assertion variables and WebSocket runtime results UX | Review Ready | Codex | feature/oc-150-runtime-assertion-variables, stacked on supervisor/add-runtime-assertion-variable-task; implementation commit `302d325`; acceptance rework commit pending | Satisfied by `test/runtimeAuthoringUx.test.ts` for shared variable-aware assertion expression/value/description inputs and dynamic row overlays; `test/runtimeExecutionService.test.ts` for assertion expression/value/description interpolation, after-response script-produced assertion variables avoiding preflight prompts, deterministic unresolved assertion diagnostics, disabled assertions, and HTTP/GraphQL/WebSocket/gRPC runtime parity; `test/unresolvedVars.test.ts` for preserving request/auth preflight while deferring runtime assertion placeholders to runtime diagnostics; `test/webSocketSupport.test.ts` for WebSocket messages/history inside the existing response tab container plus visible runtime assertion/test/action results and dark-mode lifecycle contrast; `test/protocolLayoutStability.test.ts` for no HTTP response placeholder flash, no duplicate WebSocket response panel, and non-WebSocket response layout reset after WebSocket. | Rework verification passed: `npm run compile`; `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts test/responseProvider.test.ts test/sendRequestTool.test.ts` passed 7 files/91 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/476 tests; `npm run build` passed. | 2026-06-15 15:54 NZT | Commit the owned OC-150 rework slice, then add final ledger evidence and mark Done. |
 
 ## Dependency Map
 
@@ -181,6 +181,13 @@ Record cross-cutting decisions here so parallel agents do not rediscover them.
   Verified: commit output showed `zz [unassigned changes] (no changes)` immediately after `302d325`.
   Next: commit this final ledger-only evidence update; OC-150 is otherwise complete.
 
+- 2026-06-15 15:54 NZT - Codex: Reworked OC-150 before acceptance to fix assertion-variable preflight and WebSocket response layout state leakage.
+  GitButler: continuing on `feature/oc-150-runtime-assertion-variables`; `but status -fv` hit `Could not find uncommitted file CLI id 'rols' in IdMap` after listing `src/services/unresolvedVars.ts`, so read-only `git diff --name-only` confirmed only OC-150-owned files are changed.
+  Coverage: assertion templates no longer preflight-block send/tool execution because they run after after-response scripts/actions can produce variables; runtime assertions still emit deterministic unresolved-variable diagnostics when placeholders survive execution. Protocol layout coverage now switches from a rendered WebSocket response to HTTP, GraphQL, and gRPC and proves response tabs/body/empty/binary/WebSocket panel inline styles reset to the normal non-WebSocket layout.
+  Changed: `src/services/unresolvedVars.ts`, `src/webview/requestPanel.ts`, `test/runtimeExecutionService.test.ts`, `test/unresolvedVars.test.ts`, `test/protocolLayoutStability.test.ts`, and this ledger.
+  Verified: `npm run compile` passed; `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts test/responseProvider.test.ts test/sendRequestTool.test.ts` passed 7 files/91 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/476 tests; `npm run build` passed.
+  Next: commit the owned OC-150 rework slice, then append final commit evidence.
+
 ### OC-140 First-Class WebSocket Lifecycle UX
 
 - 2026-06-15 14:32 NZT - Codex: Removed the unused HTTP-style response body area from the WebSocket editor layout.
diff --git a/src/services/unresolvedVars.ts b/src/services/unresolvedVars.ts
index 40c3cd5..f220821 100644
--- a/src/services/unresolvedVars.ts
+++ b/src/services/unresolvedVars.ts
@@ -1,5 +1,5 @@
 import * as vscode from 'vscode';
-import type { Assertion, Auth, MissioCollection, OpenCollectionRequest, RequestDefaults, Variable } from '../models/types';
+import type { Auth, MissioCollection, OpenCollectionRequest, RequestDefaults, Variable } from '../models/types';
 import { isGraphQLRequest, isGrpcRequest, isHttpRequest, isWebSocketRequest } from '../models/types';
 import { varPatternGlobal } from '../models/varPattern';
 import type { EnvironmentService } from './environmentService';
@@ -119,7 +119,9 @@ export async function detectUnresolvedVars(
     scanAllStrings(auth, varNames);
   }
 
-  scanRuntimeAssertions(requestData.runtime?.assertions, scan);
+  // Assertion templates are evaluated after after-response scripts/actions, so
+  // they may depend on variables produced during runtime. Leave unresolved
+  // assertion placeholders to deterministic runtime assertion diagnostics.
 
   if (varNames.size === 0) return [];
 
@@ -235,19 +237,6 @@ function scanGrpcMessageTemplates(message: unknown, scan: (s: string | undefined
   scan(isRecord(selected) && typeof selected.message === 'string' ? selected.message : undefined);
 }
 
-function scanRuntimeAssertions(assertions: Assertion[] | undefined, scan: (s: string | undefined) => void): void {
-  for (const assertion of assertions ?? []) {
-    if (assertion.disabled) continue;
-    scan(assertion.expression);
-    scan(assertion.value);
-    if (typeof assertion.description === 'string') {
-      scan(assertion.description);
-    } else {
-      scan(assertion.description?.content);
-    }
-  }
-}
-
 function isRecord(value: unknown): value is Record<string, any> {
   return !!value && typeof value === 'object' && !Array.isArray(value);
 }
diff --git a/src/webview/requestPanel.ts b/src/webview/requestPanel.ts
index b7c7426..14c1033 100644
--- a/src/webview/requestPanel.ts
+++ b/src/webview/requestPanel.ts
@@ -204,6 +204,14 @@ function syncResponseLayoutForProtocol(): void {
   responseSection.classList.remove('websocket-response-ledger-only');
 
   if (!isWebSocket) {
+    const response = getLastResponse();
+    const hasResponse = !!response;
+    const binaryOverlay = document.getElementById('respBinaryOverlay');
+    const isBinary = !!response?.bodyBase64;
+    $('respTabs').style.display = hasResponse ? 'flex' : 'none';
+    $('respEmpty').style.display = hasResponse ? 'none' : 'block';
+    $('respBodyWrap').style.display = hasResponse && !isBinary ? 'block' : 'none';
+    if (binaryOverlay) binaryOverlay.style.display = hasResponse && isBinary ? 'block' : 'none';
     return;
   }
 
diff --git a/test/protocolLayoutStability.test.ts b/test/protocolLayoutStability.test.ts
index a04c234..0bd90f2 100644
--- a/test/protocolLayoutStability.test.ts
+++ b/test/protocolLayoutStability.test.ts
@@ -353,6 +353,40 @@ describe('OC-130 request editor first paint', () => {
     expect(runtimeResults.textContent).toContain('Expected hello equals ok');
   });
 
+  it.each(['http', 'graphql', 'grpc'] as RequestProtocol[])('restores normal response layout when switching from WebSocket to %s', async (protocol) => {
+    const { dom } = await loadRequestPanel();
+    dispatchPanelMessage(dom, { type: 'requestLoaded', request: requestForProtocol('websocket'), filePath: 'websocket.yml' });
+    dispatchPanelMessage(dom, {
+      type: 'response',
+      response: {
+        status: 101,
+        statusText: 'WebSocket Session',
+        headers: { 'content-type': 'application/json', 'x-missio-protocol': 'websocket' },
+        body: JSON.stringify({
+          protocol: 'websocket',
+          state: 'closed',
+          events: [{ timestamp: '2026-06-15T01:02:03.789Z', direction: 'inbound', type: 'text', data: 'hello' }],
+        }),
+        duration: 12,
+        size: 0,
+      },
+    });
+
+    expect(document.getElementById('responseSection')?.className).toContain('websocket-response-tabs');
+    expect((document.getElementById('respEmpty') as HTMLElement).style.display).toBe('none');
+    expect((document.getElementById('respBodyWrap') as HTMLElement).style.display).toBe('none');
+
+    dispatchPanelMessage(dom, { type: 'requestLoaded', request: requestForProtocol(protocol), filePath: `${protocol}.yml` });
+
+    expect(document.getElementById('responseSection')?.className).not.toContain('websocket-response-tabs');
+    expect(document.querySelector<HTMLElement>('#respTabs [data-tab="resp-body"]')?.textContent).toBe('Body');
+    expect((document.getElementById('respTabs') as HTMLElement).style.display).toBe('flex');
+    expect((document.getElementById('respEmpty') as HTMLElement).style.display).toBe('none');
+    expect((document.getElementById('respBodyWrap') as HTMLElement).style.display).toBe('block');
+    expect((document.getElementById('respBinaryOverlay') as HTMLElement).style.display).toBe('none');
+    expect((document.getElementById('webSocketSessionPanel') as HTMLElement).style.display).toBe('none');
+  });
+
   it('keeps invalid YAML in a neutral fallback instead of revealing HTTP controls', async () => {
     const { dom } = await loadRequestPanel();
 
diff --git a/test/runtimeExecutionService.test.ts b/test/runtimeExecutionService.test.ts
index 3ab2e96..65d6caf 100644
--- a/test/runtimeExecutionService.test.ts
+++ b/test/runtimeExecutionService.test.ts
@@ -157,6 +157,16 @@ describe('RuntimeExecutionService lifecycle', () => {
     ];
 
     for (const testCase of cases) {
+      const unresolved = await detectUnresolvedVars(
+        testCase.request as any,
+        makeCollection(),
+        makeEnvService(new Map([
+          ['fieldName', 'name'],
+          ['descriptionOwner', 'Ada'],
+        ])),
+      );
+      expect(unresolved).toEqual([]);
+
       const prepared = await testCase.prepare(testCase.request as never);
       const response = await testCase.complete(prepared, makeResponse({ name: 'Ada' }));
 
@@ -483,7 +493,6 @@ describe('RequestExecutionService runtime integration', () => {
     };
     const runtime = new RuntimeExecutionService(async () => new Map([
       ['gqlField', 'name'],
-      ['expectedName', 'Ada'],
     ]));
     const executionService = new RequestExecutionService(httpClient as any, undefined, undefined, runtime);
     const request: GraphQLRequest = {
@@ -494,6 +503,10 @@ describe('RequestExecutionService runtime integration', () => {
         body: { query: 'query User { user { name } }', variables: '{}' },
       },
       runtime: {
+        scripts: [{
+          type: 'after-response',
+          code: 'missio.variables.set("expectedName", response.json().data.user.name);',
+        }],
         assertions: [{
           expression: 'res.body.data.user.{{gqlField}}',
           operator: 'equals',
@@ -503,6 +516,13 @@ describe('RequestExecutionService runtime integration', () => {
       },
     };
 
+    const unresolved = await detectUnresolvedVars(
+      request,
+      makeCollection(),
+      makeEnvService(new Map([['gqlField', 'name']])),
+    );
+    expect(unresolved).toEqual([]);
+
     const response = await executionService.send(request, makeCollection());
 
     expect(httpClient.send).toHaveBeenCalledOnce();
diff --git a/test/unresolvedVars.test.ts b/test/unresolvedVars.test.ts
index 6547804..5e66352 100644
--- a/test/unresolvedVars.test.ts
+++ b/test/unresolvedVars.test.ts
@@ -105,15 +105,18 @@ describe('unresolvedVars', () => {
     expect(result).toContain('clientSecret');
   });
 
-  it('detects unresolved vars in runtime assertion expression, value, and description fields', async () => {
+  it('does not preflight-block runtime assertion placeholders that may be produced during runtime', async () => {
     const request = makeRequest() as any;
     request.runtime = {
-      variables: [{ name: 'expectedStatus', value: '200' }],
+      scripts: [{
+        type: 'after-response',
+        code: 'missio.variables.set("expectedName", response.json().name);',
+      }],
       assertions: [{
-        expression: 'res.body.{{missingField}}',
+        expression: 'res.body.{{fieldName}}',
         operator: 'equals',
-        value: '{{expectedStatus}}',
-        description: { content: 'Missing {{assertionDescription}}', type: 'text/markdown' },
+        value: '{{expectedName}}',
+        description: { content: 'Runtime {{expectedName}}', type: 'text/markdown' },
       }],
     };
 
@@ -123,7 +126,7 @@ describe('unresolvedVars', () => {
       service,
     );
 
-    expect(result).toEqual(['missingField', 'assertionDescription']);
+    expect(result).toEqual([]);
   });
 
   it('detects unresolved vars in apikey auth', async () => {

From 11a15b76529b5fc930dfb68010c0a8187894a787 Mon Sep 17 00:00:00 2001
From: Chris Johnstone <chris@johnstone.net>
Date: Mon, 15 Jun 2026 15:56:53 +1200
Subject: [PATCH 04/14] Finalize OC-150 rework ledger

---
 docs/open-collection-gap-analysis/AGENT_PROGRESS.md | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/docs/open-collection-gap-analysis/AGENT_PROGRESS.md b/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
index ccbad5a..13812d1 100644
--- a/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
+++ b/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
@@ -72,7 +72,7 @@ Use full branch names for stacking existing branches with `but move <child-branc
 | OC-120 | Preview media zoom and rotate controls | Done | Codex | `feature/oc-120-preview-media-controls` (ia), currently stacked under OC-130/OC-140; commits `cf8d2e3`, `7d3f766`, `18dc78c`, `e31c2cd`, `fc3e164`, and `c5296ea`; no PR yet | Satisfied by `test/previewMediaControls.test.ts`: pure transform helpers, compact toolbar markup/labels/icons, rotate controls using rotate-like codicons, Ctrl+wheel and toolbar zoom handling, image/PDF controls, stale PDF render and loading-task cancellation, large PDF canvas pixel/render-scale budgeting while preserving visual zoom dimensions, packaged PDF.js asset eligibility, and generated request panel CSP checks. | `npx vitest run test/previewMediaControls.test.ts` passed 10 tests; `npm run compile` passed; targeted `npx vitest run test/previewMediaControls.test.ts test/requestTypeUx.test.ts test/responseProvider.test.ts` passed 3 files/22 tests; `npm run build` passed; `npx @vscode/vsce package --out $env:TEMP\missio-0.8.0-oc120-pdf-zoom-stability.vsix` passed; direct VSIX zip inspection found `extension/media/pdf.worker.min.mjs` and `extension/media/pdf.min.mjs`. | 2026-06-15 13:40 NZT | OC-120 user follow-up fixed. Preserve unrelated unassigned PDF.js media churn IDs `qp`/`ko`. |
 | OC-130 | Protocol-native request editor first paint | Done | Codex | `feature/oc-130-protocol-layout-stability` (g0), stacked on `feature/oc-120-preview-media-controls`; implementation commit `a3d3251` | Satisfied by `test/protocolLayoutStability.test.ts` plus shared request editor/protocol regressions: neutral first-paint shell, host invalid-YAML fallback message, direct HTTP/GraphQL/WebSocket/gRPC hydration, no visible HTTP default or stale non-HTTP controls during hydration, layout-stability CSS assertions, no-op round-trip and protocol-aware validation coverage, and request type UX startup regression. | `npx vitest run test/protocolLayoutStability.test.ts` passed 9 tests; `npm run compile` passed; focused `npx vitest run test/protocolLayoutStability.test.ts test/requestTypeUx.test.ts test/runtimeAuthoringUx.test.ts test/schemaRoundTrip.test.ts test/validationService.test.ts` passed 5 files/34 tests; targeted protocol/editor matrix passed 9 files/89 tests; `node scripts\validate-collection.js examples\demo-api` passed 44/44 files; `npm test` passed 25 files/454 tests; `npm run build` passed. | 2026-06-15 12:03 NZT | OC-130 complete. Preserve parallel/unrelated unassigned OC-140 docs IDs `wp`/`tks`/`tkt`/`uxu` and PDF.js media churn IDs `qp`/`ko`; do not commit them to OC-130. |
 | OC-140 | First-class WebSocket lifecycle UX | Done | Codex | `feature/oc-140-websocket-lifecycle-ux` (g0 after restack), stacked on `supervisor/add-websocket-lifecycle-task`; implementation commit `ec0f014`; supervisor/user follow-up commits `d2b93d4`, `1c918d5`, `401a82e`, `3bfc234`, and `b3ff548` | Satisfied by `test/webSocketSupport.test.ts` plus shared command, CodeLens, Copilot, editor, validation, round-trip, and demo regressions: persistent WebSocket sessions now expose connect/disconnect lifecycle operations through one fixed-width stateful editor button plus a separate send-message flow; retain session state and message history; surface editor controls/history, bottom status bar management, command palette/tree/CodeLens actions, and `missio_websocket_session`; route live send-tool WebSocket execution to lifecycle diagnostics; disconnect on editor/session cleanup; prefer freshly posted WebSocket lifecycle requests over stale debounced YAML; extract send-message payloads from the same resolved lifecycle request; keep Send styled as the primary request action; hide the HTTP-style response placeholder/body pane so WebSocket history fills the response area; show millisecond-precision history timestamps; and add local connect-only, repeated-send, and server-push fixtures. | `npm run compile` passed; `npx vitest run test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 2 files/35 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; live local WebSocket lifecycle smoke returned `LIVE_WS_LIFECYCLE_SMOKE ok`; `npm test` passed 25 files/465 tests; `npm run build` passed. | 2026-06-15 14:32 NZT | OC-140 complete. WebSocket lifecycle sessions are file-path scoped for editor/command flows, persist for that request until disconnect/close/editor disposal, and are intentionally not shared across separate request files. Preserve unrelated PDF.js media churn IDs `qp`/`ko`. |
-| OC-150 | Runtime assertion variables and WebSocket runtime results UX | Review Ready | Codex | feature/oc-150-runtime-assertion-variables, stacked on supervisor/add-runtime-assertion-variable-task; implementation commit `302d325`; acceptance rework commit pending | Satisfied by `test/runtimeAuthoringUx.test.ts` for shared variable-aware assertion expression/value/description inputs and dynamic row overlays; `test/runtimeExecutionService.test.ts` for assertion expression/value/description interpolation, after-response script-produced assertion variables avoiding preflight prompts, deterministic unresolved assertion diagnostics, disabled assertions, and HTTP/GraphQL/WebSocket/gRPC runtime parity; `test/unresolvedVars.test.ts` for preserving request/auth preflight while deferring runtime assertion placeholders to runtime diagnostics; `test/webSocketSupport.test.ts` for WebSocket messages/history inside the existing response tab container plus visible runtime assertion/test/action results and dark-mode lifecycle contrast; `test/protocolLayoutStability.test.ts` for no HTTP response placeholder flash, no duplicate WebSocket response panel, and non-WebSocket response layout reset after WebSocket. | Rework verification passed: `npm run compile`; `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts test/responseProvider.test.ts test/sendRequestTool.test.ts` passed 7 files/91 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/476 tests; `npm run build` passed. | 2026-06-15 15:54 NZT | Commit the owned OC-150 rework slice, then add final ledger evidence and mark Done. |
+| OC-150 | Runtime assertion variables and WebSocket runtime results UX | Done | Codex | feature/oc-150-runtime-assertion-variables, stacked on supervisor/add-runtime-assertion-variable-task; implementation commit `302d325`; completion ledger commit `f583218`; acceptance rework commit `828ab07` | Satisfied by `test/runtimeAuthoringUx.test.ts` for shared variable-aware assertion expression/value/description inputs and dynamic row overlays; `test/runtimeExecutionService.test.ts` for assertion expression/value/description interpolation, after-response script-produced assertion variables avoiding preflight prompts, deterministic unresolved assertion diagnostics, disabled assertions, and HTTP/GraphQL/WebSocket/gRPC runtime parity; `test/unresolvedVars.test.ts` for preserving request/auth preflight while deferring runtime assertion placeholders to runtime diagnostics; `test/webSocketSupport.test.ts` for WebSocket messages/history inside the existing response tab container plus visible runtime assertion/test/action results and dark-mode lifecycle contrast; `test/protocolLayoutStability.test.ts` for no HTTP response placeholder flash, no duplicate WebSocket response panel, and non-WebSocket response layout reset after WebSocket. | Rework verification passed: `npm run compile`; `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts test/responseProvider.test.ts test/sendRequestTool.test.ts` passed 7 files/91 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/476 tests; `npm run build` passed. | 2026-06-15 15:56 NZT | OC-150 accepted after rework; no remaining OC-150 action. |
 
 ## Dependency Map
 
@@ -188,6 +188,13 @@ Record cross-cutting decisions here so parallel agents do not rediscover them.
   Verified: `npm run compile` passed; `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts test/responseProvider.test.ts test/sendRequestTool.test.ts` passed 7 files/91 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/476 tests; `npm run build` passed.
   Next: commit the owned OC-150 rework slice, then append final commit evidence.
 
+- 2026-06-15 15:56 NZT - Codex: Committed the OC-150 acceptance rework and finalized the ledger.
+  GitButler: `828ab07` (`Rework OC-150 assertion preflight`) on `feature/oc-150-runtime-assertion-variables`; commit output showed `zz [unassigned changes] (no changes)` after using `but commit les -m "Rework OC-150 assertion preflight" --changes m1,n1,g1,h1,i1,j1,z0,o1,p1,q1,r1,k1,l1`.
+  Coverage: final accepted OC-150 coverage includes assertion variables produced by runtime phases avoiding preflight prompts, deterministic unresolved assertion diagnostics, WebSocket-to-non-WebSocket response layout reset, WebSocket Runtime tab visibility, lifecycle contrast, and the existing editor/runtime/protocol regressions.
+  Changed: final ledger evidence only after `828ab07`.
+  Verified: commit output showed clean `zz`; full verification evidence is recorded in the 15:54 NZT rework entry.
+  Next: OC-150 accepted; no remaining action.
+
 ### OC-140 First-Class WebSocket Lifecycle UX
 
 - 2026-06-15 14:32 NZT - Codex: Removed the unused HTTP-style response body area from the WebSocket editor layout.

From 9420672a8a2c2b706e8fe0d1e9ac5a013d200bf4 Mon Sep 17 00:00:00 2001
From: Chris Johnstone <chris@johnstone.net>
Date: Mon, 15 Jun 2026 16:01:18 +1200
Subject: [PATCH 05/14] Record OC-150 supervisor install review

---
 docs/open-collection-gap-analysis/AGENT_PROGRESS.md | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/docs/open-collection-gap-analysis/AGENT_PROGRESS.md b/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
index 13812d1..2f3cdbf 100644
--- a/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
+++ b/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
@@ -72,7 +72,7 @@ Use full branch names for stacking existing branches with `but move <child-branc
 | OC-120 | Preview media zoom and rotate controls | Done | Codex | `feature/oc-120-preview-media-controls` (ia), currently stacked under OC-130/OC-140; commits `cf8d2e3`, `7d3f766`, `18dc78c`, `e31c2cd`, `fc3e164`, and `c5296ea`; no PR yet | Satisfied by `test/previewMediaControls.test.ts`: pure transform helpers, compact toolbar markup/labels/icons, rotate controls using rotate-like codicons, Ctrl+wheel and toolbar zoom handling, image/PDF controls, stale PDF render and loading-task cancellation, large PDF canvas pixel/render-scale budgeting while preserving visual zoom dimensions, packaged PDF.js asset eligibility, and generated request panel CSP checks. | `npx vitest run test/previewMediaControls.test.ts` passed 10 tests; `npm run compile` passed; targeted `npx vitest run test/previewMediaControls.test.ts test/requestTypeUx.test.ts test/responseProvider.test.ts` passed 3 files/22 tests; `npm run build` passed; `npx @vscode/vsce package --out $env:TEMP\missio-0.8.0-oc120-pdf-zoom-stability.vsix` passed; direct VSIX zip inspection found `extension/media/pdf.worker.min.mjs` and `extension/media/pdf.min.mjs`. | 2026-06-15 13:40 NZT | OC-120 user follow-up fixed. Preserve unrelated unassigned PDF.js media churn IDs `qp`/`ko`. |
 | OC-130 | Protocol-native request editor first paint | Done | Codex | `feature/oc-130-protocol-layout-stability` (g0), stacked on `feature/oc-120-preview-media-controls`; implementation commit `a3d3251` | Satisfied by `test/protocolLayoutStability.test.ts` plus shared request editor/protocol regressions: neutral first-paint shell, host invalid-YAML fallback message, direct HTTP/GraphQL/WebSocket/gRPC hydration, no visible HTTP default or stale non-HTTP controls during hydration, layout-stability CSS assertions, no-op round-trip and protocol-aware validation coverage, and request type UX startup regression. | `npx vitest run test/protocolLayoutStability.test.ts` passed 9 tests; `npm run compile` passed; focused `npx vitest run test/protocolLayoutStability.test.ts test/requestTypeUx.test.ts test/runtimeAuthoringUx.test.ts test/schemaRoundTrip.test.ts test/validationService.test.ts` passed 5 files/34 tests; targeted protocol/editor matrix passed 9 files/89 tests; `node scripts\validate-collection.js examples\demo-api` passed 44/44 files; `npm test` passed 25 files/454 tests; `npm run build` passed. | 2026-06-15 12:03 NZT | OC-130 complete. Preserve parallel/unrelated unassigned OC-140 docs IDs `wp`/`tks`/`tkt`/`uxu` and PDF.js media churn IDs `qp`/`ko`; do not commit them to OC-130. |
 | OC-140 | First-class WebSocket lifecycle UX | Done | Codex | `feature/oc-140-websocket-lifecycle-ux` (g0 after restack), stacked on `supervisor/add-websocket-lifecycle-task`; implementation commit `ec0f014`; supervisor/user follow-up commits `d2b93d4`, `1c918d5`, `401a82e`, `3bfc234`, and `b3ff548` | Satisfied by `test/webSocketSupport.test.ts` plus shared command, CodeLens, Copilot, editor, validation, round-trip, and demo regressions: persistent WebSocket sessions now expose connect/disconnect lifecycle operations through one fixed-width stateful editor button plus a separate send-message flow; retain session state and message history; surface editor controls/history, bottom status bar management, command palette/tree/CodeLens actions, and `missio_websocket_session`; route live send-tool WebSocket execution to lifecycle diagnostics; disconnect on editor/session cleanup; prefer freshly posted WebSocket lifecycle requests over stale debounced YAML; extract send-message payloads from the same resolved lifecycle request; keep Send styled as the primary request action; hide the HTTP-style response placeholder/body pane so WebSocket history fills the response area; show millisecond-precision history timestamps; and add local connect-only, repeated-send, and server-push fixtures. | `npm run compile` passed; `npx vitest run test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 2 files/35 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; live local WebSocket lifecycle smoke returned `LIVE_WS_LIFECYCLE_SMOKE ok`; `npm test` passed 25 files/465 tests; `npm run build` passed. | 2026-06-15 14:32 NZT | OC-140 complete. WebSocket lifecycle sessions are file-path scoped for editor/command flows, persist for that request until disconnect/close/editor disposal, and are intentionally not shared across separate request files. Preserve unrelated PDF.js media churn IDs `qp`/`ko`. |
-| OC-150 | Runtime assertion variables and WebSocket runtime results UX | Done | Codex | feature/oc-150-runtime-assertion-variables, stacked on supervisor/add-runtime-assertion-variable-task; implementation commit `302d325`; completion ledger commit `f583218`; acceptance rework commit `828ab07` | Satisfied by `test/runtimeAuthoringUx.test.ts` for shared variable-aware assertion expression/value/description inputs and dynamic row overlays; `test/runtimeExecutionService.test.ts` for assertion expression/value/description interpolation, after-response script-produced assertion variables avoiding preflight prompts, deterministic unresolved assertion diagnostics, disabled assertions, and HTTP/GraphQL/WebSocket/gRPC runtime parity; `test/unresolvedVars.test.ts` for preserving request/auth preflight while deferring runtime assertion placeholders to runtime diagnostics; `test/webSocketSupport.test.ts` for WebSocket messages/history inside the existing response tab container plus visible runtime assertion/test/action results and dark-mode lifecycle contrast; `test/protocolLayoutStability.test.ts` for no HTTP response placeholder flash, no duplicate WebSocket response panel, and non-WebSocket response layout reset after WebSocket. | Rework verification passed: `npm run compile`; `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts test/responseProvider.test.ts test/sendRequestTool.test.ts` passed 7 files/91 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/476 tests; `npm run build` passed. | 2026-06-15 15:56 NZT | OC-150 accepted after rework; no remaining OC-150 action. |
+| OC-150 | Runtime assertion variables and WebSocket runtime results UX | Done | Codex | feature/oc-150-runtime-assertion-variables, stacked on supervisor/add-runtime-assertion-variable-task; implementation commit `302d325`; completion ledger commit `f583218`; acceptance rework commit `828ab07` | Satisfied by `test/runtimeAuthoringUx.test.ts` for shared variable-aware assertion expression/value/description inputs and dynamic row overlays; `test/runtimeExecutionService.test.ts` for assertion expression/value/description interpolation, after-response script-produced assertion variables avoiding preflight prompts, deterministic unresolved assertion diagnostics, disabled assertions, and HTTP/GraphQL/WebSocket/gRPC runtime parity; `test/unresolvedVars.test.ts` for preserving request/auth preflight while deferring runtime assertion placeholders to runtime diagnostics; `test/webSocketSupport.test.ts` for WebSocket messages/history inside the existing response tab container plus visible runtime assertion/test/action results and dark-mode lifecycle contrast; `test/protocolLayoutStability.test.ts` for no HTTP response placeholder flash, no duplicate WebSocket response panel, and non-WebSocket response layout reset after WebSocket. | Rework verification passed: `npm run compile`; `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts test/responseProvider.test.ts test/sendRequestTool.test.ts` passed 7 files/91 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/476 tests; `npm run build` passed. Supervisor install pass also packaged `C:\Users\chris\AppData\Local\Temp\missio-0.8.0-oc150-rework.vsix` and installed `missio.missio@0.8.0`. | 2026-06-15 16:00 NZT | OC-150 accepted after rework; no remaining OC-150 action. |
 
 ## Dependency Map
 
@@ -195,6 +195,12 @@ Record cross-cutting decisions here so parallel agents do not rediscover them.
   Verified: commit output showed clean `zz`; full verification evidence is recorded in the 15:54 NZT rework entry.
   Next: OC-150 accepted; no remaining action.
 
+- 2026-06-15 16:00 NZT - Codex Supervisor: Reviewed OC-150 rework, rebuilt, packaged, and installed the extension for user testing.
+  GitButler: `feature/oc-150-runtime-assertion-variables` remains stacked on `supervisor/add-runtime-assertion-variable-task`; `but status -fv` was clean before this ledger update.
+  Findings: none. The prior assertion preflight and WebSocket-to-non-WebSocket response layout findings are addressed by `828ab07`.
+  Verified: focused `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 5 files/78 tests; `npm run compile` passed; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/476 tests; `npm run build` passed; `npx @vscode/vsce package --out $env:TEMP\missio-0.8.0-oc150-rework.vsix` passed; `code.cmd --install-extension $env:TEMP\missio-0.8.0-oc150-rework.vsix --force` installed `missio.missio@0.8.0`.
+  Next: OC-150 is ready for user testing.
+
 ### OC-140 First-Class WebSocket Lifecycle UX
 
 - 2026-06-15 14:32 NZT - Codex: Removed the unused HTTP-style response body area from the WebSocket editor layout.

From df5090e185f6a61a612d789c6bc7c2705303efbd Mon Sep 17 00:00:00 2001
From: Chris Johnstone <chris@johnstone.net>
Date: Mon, 15 Jun 2026 16:10:41 +1200
Subject: [PATCH 06/14] Keep WebSocket runtime tab visible

---
 src/webview/requestPanel.ts          | 11 ++++++++
 test/protocolLayoutStability.test.ts | 41 ++++++++++++++++++++++++++++
 2 files changed, 52 insertions(+)

diff --git a/src/webview/requestPanel.ts b/src/webview/requestPanel.ts
index 14c1033..9356491 100644
--- a/src/webview/requestPanel.ts
+++ b/src/webview/requestPanel.ts
@@ -195,6 +195,16 @@ function updateWebSocketControls(): void {
   sendMessageBtn.disabled = !connected;
 }
 
+function syncRuntimeTabForProtocol(): void {
+  const runtimeTab = document.getElementById('respRuntimeTab');
+  if (!runtimeTab) return;
+  const showRuntimeTab = _currentProtocol === 'websocket' || !!getLastResponse()?.runtime;
+  runtimeTab.style.display = showRuntimeTab ? '' : 'none';
+  if (!showRuntimeTab && runtimeTab.classList.contains('active')) {
+    (document.querySelector('#respTabs [data-tab="resp-body"]') as HTMLElement | null)?.click();
+  }
+}
+
 function syncResponseLayoutForProtocol(): void {
   const isWebSocket = _currentProtocol === 'websocket';
   const responseSection = $('responseSection');
@@ -202,6 +212,7 @@ function syncResponseLayoutForProtocol(): void {
   if (respBodyTab) respBodyTab.textContent = isWebSocket ? 'Messages' : 'Body';
   responseSection.classList.toggle('websocket-response-tabs', isWebSocket);
   responseSection.classList.remove('websocket-response-ledger-only');
+  syncRuntimeTabForProtocol();
 
   if (!isWebSocket) {
     const response = getLastResponse();
diff --git a/test/protocolLayoutStability.test.ts b/test/protocolLayoutStability.test.ts
index 0bd90f2..eaf4dc4 100644
--- a/test/protocolLayoutStability.test.ts
+++ b/test/protocolLayoutStability.test.ts
@@ -216,6 +216,7 @@ describe('OC-130 request editor first paint', () => {
     const responseSection = document.getElementById('responseSection') as HTMLElement;
     const responseTabs = document.getElementById('respTabs') as HTMLElement;
     const responseBodyTab = document.querySelector<HTMLElement>('#respTabs [data-tab="resp-body"]');
+    const runtimeTab = document.getElementById('respRuntimeTab') as HTMLElement;
     const bodyTab = document.querySelector<HTMLElement>('#reqTabs [data-tab="body"]');
 
     expect(shell.dataset.hydrationState).toBe('ready');
@@ -259,6 +260,7 @@ describe('OC-130 request editor first paint', () => {
       expect(responseSection.className).not.toContain('websocket-response-ledger-only');
       expect(responseTabs.style.display).toBe('flex');
       expect(responseBodyTab?.textContent).toBe('Messages');
+      expect(runtimeTab.style.display).toBe('');
       expect(document.getElementById('webSocketSessionPanel')?.parentElement?.id).toBe('panel-resp-body');
       expect((document.getElementById('respEmpty') as HTMLElement).style.display).toBe('none');
       expect((document.getElementById('respBodyWrap') as HTMLElement).style.display).toBe('none');
@@ -288,9 +290,46 @@ describe('OC-130 request editor first paint', () => {
       expect(responseSection.className).not.toContain('websocket-response-tabs');
       expect(responseSection.className).not.toContain('websocket-response-ledger-only');
       expect(responseBodyTab?.textContent).toBe('Body');
+      expect(runtimeTab.style.display).toBe('none');
     }
   });
 
+  it('keeps the WebSocket Runtime tab visible before runtime results exist', async () => {
+    const { dom } = await loadRequestPanel();
+    dispatchPanelMessage(dom, { type: 'requestLoaded', request: requestForProtocol('websocket'), filePath: 'websocket.yml' });
+
+    const runtimeTab = document.getElementById('respRuntimeTab') as HTMLElement;
+    const runtimeResults = document.getElementById('runtimeResults') as HTMLElement;
+    expect(runtimeTab.style.display).toBe('');
+    expect(runtimeResults.textContent).toBe('');
+
+    dispatchPanelMessage(dom, {
+      type: 'response',
+      response: {
+        status: 101,
+        statusText: 'WebSocket Session',
+        headers: { 'content-type': 'application/json', 'x-missio-protocol': 'websocket' },
+        body: JSON.stringify({
+          protocol: 'websocket',
+          url: 'ws://example.test/socket',
+          state: 'connected',
+          messageCount: 1,
+          events: [{ timestamp: '2026-06-15T01:02:03.789Z', direction: 'inbound', type: 'text', data: 'hello' }],
+        }),
+        duration: 12,
+        size: 0,
+      },
+    });
+
+    expect(document.getElementById('responseSection')?.className).toContain('websocket-response-tabs');
+    expect(document.querySelector<HTMLElement>('#respTabs [data-tab="resp-body"]')?.textContent).toBe('Messages');
+    expect(runtimeTab.style.display).toBe('');
+    expect(runtimeResults.textContent).toBe('');
+    expect((document.getElementById('webSocketHistory') as HTMLElement).textContent).toContain('hello');
+    expect((document.getElementById('respEmpty') as HTMLElement).style.display).toBe('none');
+    expect((document.getElementById('respBodyWrap') as HTMLElement).style.display).toBe('none');
+  });
+
   it('renders WebSocket messages and runtime results in the existing response tabs', async () => {
     const { dom } = await loadRequestPanel();
     dispatchPanelMessage(dom, { type: 'requestLoaded', request: requestForProtocol('websocket'), filePath: 'websocket.yml' });
@@ -375,6 +414,7 @@ describe('OC-130 request editor first paint', () => {
     expect(document.getElementById('responseSection')?.className).toContain('websocket-response-tabs');
     expect((document.getElementById('respEmpty') as HTMLElement).style.display).toBe('none');
     expect((document.getElementById('respBodyWrap') as HTMLElement).style.display).toBe('none');
+    expect((document.getElementById('respRuntimeTab') as HTMLElement).style.display).toBe('');
 
     dispatchPanelMessage(dom, { type: 'requestLoaded', request: requestForProtocol(protocol), filePath: `${protocol}.yml` });
 
@@ -384,6 +424,7 @@ describe('OC-130 request editor first paint', () => {
     expect((document.getElementById('respEmpty') as HTMLElement).style.display).toBe('none');
     expect((document.getElementById('respBodyWrap') as HTMLElement).style.display).toBe('block');
     expect((document.getElementById('respBinaryOverlay') as HTMLElement).style.display).toBe('none');
+    expect((document.getElementById('respRuntimeTab') as HTMLElement).style.display).toBe('none');
     expect((document.getElementById('webSocketSessionPanel') as HTMLElement).style.display).toBe('none');
   });
 

From 0fe890a63766ff16459d8efc9176475cea59301b Mon Sep 17 00:00:00 2001
From: Chris Johnstone <chris@johnstone.net>
Date: Mon, 15 Jun 2026 16:11:43 +1200
Subject: [PATCH 07/14] Record WebSocket runtime tab follow-up

---
 docs/open-collection-gap-analysis/AGENT_PROGRESS.md | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/docs/open-collection-gap-analysis/AGENT_PROGRESS.md b/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
index 2f3cdbf..a81e519 100644
--- a/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
+++ b/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
@@ -72,7 +72,7 @@ Use full branch names for stacking existing branches with `but move <child-branc
 | OC-120 | Preview media zoom and rotate controls | Done | Codex | `feature/oc-120-preview-media-controls` (ia), currently stacked under OC-130/OC-140; commits `cf8d2e3`, `7d3f766`, `18dc78c`, `e31c2cd`, `fc3e164`, and `c5296ea`; no PR yet | Satisfied by `test/previewMediaControls.test.ts`: pure transform helpers, compact toolbar markup/labels/icons, rotate controls using rotate-like codicons, Ctrl+wheel and toolbar zoom handling, image/PDF controls, stale PDF render and loading-task cancellation, large PDF canvas pixel/render-scale budgeting while preserving visual zoom dimensions, packaged PDF.js asset eligibility, and generated request panel CSP checks. | `npx vitest run test/previewMediaControls.test.ts` passed 10 tests; `npm run compile` passed; targeted `npx vitest run test/previewMediaControls.test.ts test/requestTypeUx.test.ts test/responseProvider.test.ts` passed 3 files/22 tests; `npm run build` passed; `npx @vscode/vsce package --out $env:TEMP\missio-0.8.0-oc120-pdf-zoom-stability.vsix` passed; direct VSIX zip inspection found `extension/media/pdf.worker.min.mjs` and `extension/media/pdf.min.mjs`. | 2026-06-15 13:40 NZT | OC-120 user follow-up fixed. Preserve unrelated unassigned PDF.js media churn IDs `qp`/`ko`. |
 | OC-130 | Protocol-native request editor first paint | Done | Codex | `feature/oc-130-protocol-layout-stability` (g0), stacked on `feature/oc-120-preview-media-controls`; implementation commit `a3d3251` | Satisfied by `test/protocolLayoutStability.test.ts` plus shared request editor/protocol regressions: neutral first-paint shell, host invalid-YAML fallback message, direct HTTP/GraphQL/WebSocket/gRPC hydration, no visible HTTP default or stale non-HTTP controls during hydration, layout-stability CSS assertions, no-op round-trip and protocol-aware validation coverage, and request type UX startup regression. | `npx vitest run test/protocolLayoutStability.test.ts` passed 9 tests; `npm run compile` passed; focused `npx vitest run test/protocolLayoutStability.test.ts test/requestTypeUx.test.ts test/runtimeAuthoringUx.test.ts test/schemaRoundTrip.test.ts test/validationService.test.ts` passed 5 files/34 tests; targeted protocol/editor matrix passed 9 files/89 tests; `node scripts\validate-collection.js examples\demo-api` passed 44/44 files; `npm test` passed 25 files/454 tests; `npm run build` passed. | 2026-06-15 12:03 NZT | OC-130 complete. Preserve parallel/unrelated unassigned OC-140 docs IDs `wp`/`tks`/`tkt`/`uxu` and PDF.js media churn IDs `qp`/`ko`; do not commit them to OC-130. |
 | OC-140 | First-class WebSocket lifecycle UX | Done | Codex | `feature/oc-140-websocket-lifecycle-ux` (g0 after restack), stacked on `supervisor/add-websocket-lifecycle-task`; implementation commit `ec0f014`; supervisor/user follow-up commits `d2b93d4`, `1c918d5`, `401a82e`, `3bfc234`, and `b3ff548` | Satisfied by `test/webSocketSupport.test.ts` plus shared command, CodeLens, Copilot, editor, validation, round-trip, and demo regressions: persistent WebSocket sessions now expose connect/disconnect lifecycle operations through one fixed-width stateful editor button plus a separate send-message flow; retain session state and message history; surface editor controls/history, bottom status bar management, command palette/tree/CodeLens actions, and `missio_websocket_session`; route live send-tool WebSocket execution to lifecycle diagnostics; disconnect on editor/session cleanup; prefer freshly posted WebSocket lifecycle requests over stale debounced YAML; extract send-message payloads from the same resolved lifecycle request; keep Send styled as the primary request action; hide the HTTP-style response placeholder/body pane so WebSocket history fills the response area; show millisecond-precision history timestamps; and add local connect-only, repeated-send, and server-push fixtures. | `npm run compile` passed; `npx vitest run test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 2 files/35 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; live local WebSocket lifecycle smoke returned `LIVE_WS_LIFECYCLE_SMOKE ok`; `npm test` passed 25 files/465 tests; `npm run build` passed. | 2026-06-15 14:32 NZT | OC-140 complete. WebSocket lifecycle sessions are file-path scoped for editor/command flows, persist for that request until disconnect/close/editor disposal, and are intentionally not shared across separate request files. Preserve unrelated PDF.js media churn IDs `qp`/`ko`. |
-| OC-150 | Runtime assertion variables and WebSocket runtime results UX | Done | Codex | feature/oc-150-runtime-assertion-variables, stacked on supervisor/add-runtime-assertion-variable-task; implementation commit `302d325`; completion ledger commit `f583218`; acceptance rework commit `828ab07` | Satisfied by `test/runtimeAuthoringUx.test.ts` for shared variable-aware assertion expression/value/description inputs and dynamic row overlays; `test/runtimeExecutionService.test.ts` for assertion expression/value/description interpolation, after-response script-produced assertion variables avoiding preflight prompts, deterministic unresolved assertion diagnostics, disabled assertions, and HTTP/GraphQL/WebSocket/gRPC runtime parity; `test/unresolvedVars.test.ts` for preserving request/auth preflight while deferring runtime assertion placeholders to runtime diagnostics; `test/webSocketSupport.test.ts` for WebSocket messages/history inside the existing response tab container plus visible runtime assertion/test/action results and dark-mode lifecycle contrast; `test/protocolLayoutStability.test.ts` for no HTTP response placeholder flash, no duplicate WebSocket response panel, and non-WebSocket response layout reset after WebSocket. | Rework verification passed: `npm run compile`; `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts test/responseProvider.test.ts test/sendRequestTool.test.ts` passed 7 files/91 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/476 tests; `npm run build` passed. Supervisor install pass also packaged `C:\Users\chris\AppData\Local\Temp\missio-0.8.0-oc150-rework.vsix` and installed `missio.missio@0.8.0`. | 2026-06-15 16:00 NZT | OC-150 accepted after rework; no remaining OC-150 action. |
+| OC-150 | Runtime assertion variables and WebSocket runtime results UX | Done | Codex | feature/oc-150-runtime-assertion-variables, stacked on supervisor/add-runtime-assertion-variable-task; implementation commit `302d325`; completion ledger commit `f583218`; acceptance rework commit `828ab07`; WebSocket runtime-tab follow-up commit `32076b7` | Satisfied by `test/runtimeAuthoringUx.test.ts` for shared variable-aware assertion expression/value/description inputs and dynamic row overlays; `test/runtimeExecutionService.test.ts` for assertion expression/value/description interpolation, after-response script-produced assertion variables avoiding preflight prompts, deterministic unresolved assertion diagnostics, disabled assertions, and HTTP/GraphQL/WebSocket/gRPC runtime parity; `test/unresolvedVars.test.ts` for preserving request/auth preflight while deferring runtime assertion placeholders to runtime diagnostics; `test/webSocketSupport.test.ts` for WebSocket messages/history inside the existing response tab container plus visible runtime assertion/test/action results and dark-mode lifecycle contrast; `test/protocolLayoutStability.test.ts` for no HTTP response placeholder flash, no duplicate WebSocket response panel, Runtime tab visibility before WebSocket runtime results exist, and non-WebSocket response layout reset after WebSocket. | Rework verification passed: `npm run compile`; `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts test/responseProvider.test.ts test/sendRequestTool.test.ts` passed 7 files/91 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/476 tests; `npm run build` passed. Follow-up verification passed: `npx vitest run test/protocolLayoutStability.test.ts test/webSocketSupport.test.ts` passed 2 files/40 tests; `npm run compile` passed; OC-150 matrix passed 7 files/92 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm run build` passed. Supervisor install pass also packaged `C:\Users\chris\AppData\Local\Temp\missio-0.8.0-oc150-rework.vsix` and installed `missio.missio@0.8.0`. | 2026-06-15 16:10 NZT | OC-150 accepted after WebSocket runtime-tab follow-up; no remaining OC-150 action. |
 
 ## Dependency Map
 
@@ -201,6 +201,13 @@ Record cross-cutting decisions here so parallel agents do not rediscover them.
   Verified: focused `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 5 files/78 tests; `npm run compile` passed; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/476 tests; `npm run build` passed; `npx @vscode/vsce package --out $env:TEMP\missio-0.8.0-oc150-rework.vsix` passed; `code.cmd --install-extension $env:TEMP\missio-0.8.0-oc150-rework.vsix --force` installed `missio.missio@0.8.0`.
   Next: OC-150 is ready for user testing.
 
+- 2026-06-15 16:10 NZT - Codex: Addressed user testing feedback that the WebSocket Runtime tab only appeared after a message/disconnect produced runtime data.
+  GitButler: committed follow-up `32076b7` (`Keep WebSocket runtime tab visible`) on `feature/oc-150-runtime-assertion-variables`; source/test commit output showed `zz [unassigned changes] (no changes)`. Before the commit, `but status -fv` repeated the known IdMap error `Could not find uncommitted file CLI id 'rols' in IdMap`, so `but diff` IDs were used for the owned source/test commit and read-only `git diff --name-only` confirmed only `src/webview/requestPanel.ts` and `test/protocolLayoutStability.test.ts` were changed.
+  Coverage: `syncResponseLayoutForProtocol` now keeps the existing response tab container's Runtime tab visible for WebSocket requests even before runtime results exist, while non-WebSocket protocols still hide the Runtime tab when the current response lacks runtime data. Layout regressions cover initial WebSocket hydration, ordinary WebSocket responses without runtime results, WebSocket responses with runtime results, and switching back to HTTP/GraphQL/gRPC without leaking the tab.
+  Changed: `src/webview/requestPanel.ts`, `test/protocolLayoutStability.test.ts`, and this ledger.
+  Verified: `npx vitest run test/protocolLayoutStability.test.ts test/webSocketSupport.test.ts` passed 2 files/40 tests; `npm run compile` passed; `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts test/responseProvider.test.ts test/sendRequestTool.test.ts` passed 7 files/92 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm run build` passed.
+  Next: commit this ledger-only evidence update; OC-150 remains Done.
+
 ### OC-140 First-Class WebSocket Lifecycle UX
 
 - 2026-06-15 14:32 NZT - Codex: Removed the unused HTTP-style response body area from the WebSocket editor layout.

From cc471ac6eaadf8462fad1f338fb6f205f2c01e8f Mon Sep 17 00:00:00 2001
From: Chris Johnstone <chris@johnstone.net>
Date: Mon, 15 Jun 2026 16:17:35 +1200
Subject: [PATCH 08/14] Restyle WebSocket lifecycle buttons

---
 src/webview/requestPanel.css  | 23 ++++++++++-------------
 test/webSocketSupport.test.ts | 11 ++++++++---
 2 files changed, 18 insertions(+), 16 deletions(-)

diff --git a/src/webview/requestPanel.css b/src/webview/requestPanel.css
index dbba1a0..a81ba4d 100644
--- a/src/webview/requestPanel.css
+++ b/src/webview/requestPanel.css
@@ -363,24 +363,21 @@ body {
   flex: 0 0 90px;
   width: 90px;
   min-width: 90px;
-  background: var(--badge-success);
-  color: var(--m-status-badge-text);
+  background: transparent;
+  border: 1px solid var(--input-border);
+  color: var(--badge-success, #22c55e);
 }
 .request-editor-shell[data-protocol="websocket"] #sendBtn:hover:not(:disabled) {
-  filter: brightness(1.08);
+  background: transparent;
+  border-color: var(--badge-success, #22c55e);
 }
 .request-editor-shell[data-protocol="websocket"] #sendBtn.ws-disconnect-state {
-  background: var(--badge-error);
-}
-body.vscode-dark .request-editor-shell[data-protocol="websocket"] #sendBtn,
-.vscode-dark .request-editor-shell[data-protocol="websocket"] #sendBtn {
-  background: #2aa32a;
-  color: #fff;
+  background: transparent;
+  color: var(--badge-error, #ef4444);
 }
-body.vscode-dark .request-editor-shell[data-protocol="websocket"] #sendBtn.ws-disconnect-state,
-.vscode-dark .request-editor-shell[data-protocol="websocket"] #sendBtn.ws-disconnect-state {
-  background: #a33e2a;
-  color: #fff;
+.request-editor-shell[data-protocol="websocket"] #sendBtn.ws-disconnect-state:hover:not(:disabled) {
+  background: transparent;
+  border-color: var(--badge-error, #ef4444);
 }
 .request-editor-shell[data-protocol="websocket"] #sendBtn:disabled {
   opacity: 0.5;
diff --git a/test/webSocketSupport.test.ts b/test/webSocketSupport.test.ts
index fb67272..8494ab1 100644
--- a/test/webSocketSupport.test.ts
+++ b/test/webSocketSupport.test.ts
@@ -612,9 +612,14 @@ describe('WebSocket editor, variables, and tools', () => {
     expect(css).toContain('max-height: none;');
     expect(css).toContain('.request-editor-shell[data-protocol="websocket"] #sendBtn');
     expect(css).toContain('#sendBtn.ws-disconnect-state');
-    expect(css).toContain('background: #2aa32a;');
-    expect(css).toContain('background: #a33e2a;');
-    expect(css).toContain('color: #fff;');
+    expect(css).toContain('background: transparent;');
+    expect(css).toContain('border: 1px solid var(--input-border);');
+    expect(css).toContain('color: var(--badge-success, #22c55e);');
+    expect(css).toContain('border-color: var(--badge-success, #22c55e);');
+    expect(css).toContain('color: var(--badge-error, #ef4444);');
+    expect(css).toContain('border-color: var(--badge-error, #ef4444);');
+    expect(css).not.toContain('background: #2aa32a;');
+    expect(css).not.toContain('background: #a33e2a;');
     expect(css).toContain('width: 90px;');
     expect(script).toContain("connectBtn.textContent = canDisconnect ? 'Disconnect' : 'Connect';");
     expect(script).toContain("connectBtn.classList.toggle('ws-disconnect-state', canDisconnect);");

From 8789243308b1b6ab98701f4aa2a6f6e668cd9e71 Mon Sep 17 00:00:00 2001
From: Chris Johnstone <chris@johnstone.net>
Date: Mon, 15 Jun 2026 16:19:02 +1200
Subject: [PATCH 09/14] Record WebSocket lifecycle button restyle

---
 docs/open-collection-gap-analysis/AGENT_PROGRESS.md      | 9 ++++++++-
 .../tasks/15-runtime-assertion-variables.md              | 6 +++---
 2 files changed, 11 insertions(+), 4 deletions(-)

diff --git a/docs/open-collection-gap-analysis/AGENT_PROGRESS.md b/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
index a81e519..69f9ca0 100644
--- a/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
+++ b/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
@@ -72,7 +72,7 @@ Use full branch names for stacking existing branches with `but move <child-branc
 | OC-120 | Preview media zoom and rotate controls | Done | Codex | `feature/oc-120-preview-media-controls` (ia), currently stacked under OC-130/OC-140; commits `cf8d2e3`, `7d3f766`, `18dc78c`, `e31c2cd`, `fc3e164`, and `c5296ea`; no PR yet | Satisfied by `test/previewMediaControls.test.ts`: pure transform helpers, compact toolbar markup/labels/icons, rotate controls using rotate-like codicons, Ctrl+wheel and toolbar zoom handling, image/PDF controls, stale PDF render and loading-task cancellation, large PDF canvas pixel/render-scale budgeting while preserving visual zoom dimensions, packaged PDF.js asset eligibility, and generated request panel CSP checks. | `npx vitest run test/previewMediaControls.test.ts` passed 10 tests; `npm run compile` passed; targeted `npx vitest run test/previewMediaControls.test.ts test/requestTypeUx.test.ts test/responseProvider.test.ts` passed 3 files/22 tests; `npm run build` passed; `npx @vscode/vsce package --out $env:TEMP\missio-0.8.0-oc120-pdf-zoom-stability.vsix` passed; direct VSIX zip inspection found `extension/media/pdf.worker.min.mjs` and `extension/media/pdf.min.mjs`. | 2026-06-15 13:40 NZT | OC-120 user follow-up fixed. Preserve unrelated unassigned PDF.js media churn IDs `qp`/`ko`. |
 | OC-130 | Protocol-native request editor first paint | Done | Codex | `feature/oc-130-protocol-layout-stability` (g0), stacked on `feature/oc-120-preview-media-controls`; implementation commit `a3d3251` | Satisfied by `test/protocolLayoutStability.test.ts` plus shared request editor/protocol regressions: neutral first-paint shell, host invalid-YAML fallback message, direct HTTP/GraphQL/WebSocket/gRPC hydration, no visible HTTP default or stale non-HTTP controls during hydration, layout-stability CSS assertions, no-op round-trip and protocol-aware validation coverage, and request type UX startup regression. | `npx vitest run test/protocolLayoutStability.test.ts` passed 9 tests; `npm run compile` passed; focused `npx vitest run test/protocolLayoutStability.test.ts test/requestTypeUx.test.ts test/runtimeAuthoringUx.test.ts test/schemaRoundTrip.test.ts test/validationService.test.ts` passed 5 files/34 tests; targeted protocol/editor matrix passed 9 files/89 tests; `node scripts\validate-collection.js examples\demo-api` passed 44/44 files; `npm test` passed 25 files/454 tests; `npm run build` passed. | 2026-06-15 12:03 NZT | OC-130 complete. Preserve parallel/unrelated unassigned OC-140 docs IDs `wp`/`tks`/`tkt`/`uxu` and PDF.js media churn IDs `qp`/`ko`; do not commit them to OC-130. |
 | OC-140 | First-class WebSocket lifecycle UX | Done | Codex | `feature/oc-140-websocket-lifecycle-ux` (g0 after restack), stacked on `supervisor/add-websocket-lifecycle-task`; implementation commit `ec0f014`; supervisor/user follow-up commits `d2b93d4`, `1c918d5`, `401a82e`, `3bfc234`, and `b3ff548` | Satisfied by `test/webSocketSupport.test.ts` plus shared command, CodeLens, Copilot, editor, validation, round-trip, and demo regressions: persistent WebSocket sessions now expose connect/disconnect lifecycle operations through one fixed-width stateful editor button plus a separate send-message flow; retain session state and message history; surface editor controls/history, bottom status bar management, command palette/tree/CodeLens actions, and `missio_websocket_session`; route live send-tool WebSocket execution to lifecycle diagnostics; disconnect on editor/session cleanup; prefer freshly posted WebSocket lifecycle requests over stale debounced YAML; extract send-message payloads from the same resolved lifecycle request; keep Send styled as the primary request action; hide the HTTP-style response placeholder/body pane so WebSocket history fills the response area; show millisecond-precision history timestamps; and add local connect-only, repeated-send, and server-push fixtures. | `npm run compile` passed; `npx vitest run test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 2 files/35 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; live local WebSocket lifecycle smoke returned `LIVE_WS_LIFECYCLE_SMOKE ok`; `npm test` passed 25 files/465 tests; `npm run build` passed. | 2026-06-15 14:32 NZT | OC-140 complete. WebSocket lifecycle sessions are file-path scoped for editor/command flows, persist for that request until disconnect/close/editor disposal, and are intentionally not shared across separate request files. Preserve unrelated PDF.js media churn IDs `qp`/`ko`. |
-| OC-150 | Runtime assertion variables and WebSocket runtime results UX | Done | Codex | feature/oc-150-runtime-assertion-variables, stacked on supervisor/add-runtime-assertion-variable-task; implementation commit `302d325`; completion ledger commit `f583218`; acceptance rework commit `828ab07`; WebSocket runtime-tab follow-up commit `32076b7` | Satisfied by `test/runtimeAuthoringUx.test.ts` for shared variable-aware assertion expression/value/description inputs and dynamic row overlays; `test/runtimeExecutionService.test.ts` for assertion expression/value/description interpolation, after-response script-produced assertion variables avoiding preflight prompts, deterministic unresolved assertion diagnostics, disabled assertions, and HTTP/GraphQL/WebSocket/gRPC runtime parity; `test/unresolvedVars.test.ts` for preserving request/auth preflight while deferring runtime assertion placeholders to runtime diagnostics; `test/webSocketSupport.test.ts` for WebSocket messages/history inside the existing response tab container plus visible runtime assertion/test/action results and dark-mode lifecycle contrast; `test/protocolLayoutStability.test.ts` for no HTTP response placeholder flash, no duplicate WebSocket response panel, Runtime tab visibility before WebSocket runtime results exist, and non-WebSocket response layout reset after WebSocket. | Rework verification passed: `npm run compile`; `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts test/responseProvider.test.ts test/sendRequestTool.test.ts` passed 7 files/91 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/476 tests; `npm run build` passed. Follow-up verification passed: `npx vitest run test/protocolLayoutStability.test.ts test/webSocketSupport.test.ts` passed 2 files/40 tests; `npm run compile` passed; OC-150 matrix passed 7 files/92 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm run build` passed. Supervisor install pass also packaged `C:\Users\chris\AppData\Local\Temp\missio-0.8.0-oc150-rework.vsix` and installed `missio.missio@0.8.0`. | 2026-06-15 16:10 NZT | OC-150 accepted after WebSocket runtime-tab follow-up; no remaining OC-150 action. |
+| OC-150 | Runtime assertion variables and WebSocket runtime results UX | Done | Codex | feature/oc-150-runtime-assertion-variables, stacked on supervisor/add-runtime-assertion-variable-task; implementation commit `302d325`; completion ledger commit `f583218`; acceptance rework commit `828ab07`; WebSocket runtime-tab follow-up commit `32076b7`; lifecycle restyle follow-up commit `6ed6f42` | Satisfied by `test/runtimeAuthoringUx.test.ts` for shared variable-aware assertion expression/value/description inputs and dynamic row overlays; `test/runtimeExecutionService.test.ts` for assertion expression/value/description interpolation, after-response script-produced assertion variables avoiding preflight prompts, deterministic unresolved assertion diagnostics, disabled assertions, and HTTP/GraphQL/WebSocket/gRPC runtime parity; `test/unresolvedVars.test.ts` for preserving request/auth preflight while deferring runtime assertion placeholders to runtime diagnostics; `test/webSocketSupport.test.ts` for WebSocket messages/history inside the existing response tab container plus visible runtime assertion/test/action results and theme-coloured no-fill lifecycle controls; `test/protocolLayoutStability.test.ts` for no HTTP response placeholder flash, no duplicate WebSocket response panel, Runtime tab visibility before WebSocket runtime results exist, and non-WebSocket response layout reset after WebSocket. | Rework verification passed: `npm run compile`; `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts test/responseProvider.test.ts test/sendRequestTool.test.ts` passed 7 files/91 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/476 tests; `npm run build` passed. Follow-up verification passed: `npx vitest run test/protocolLayoutStability.test.ts test/webSocketSupport.test.ts` passed 2 files/40 tests; `npm run compile` passed; OC-150 matrix passed 7 files/92 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm run build` passed. Lifecycle restyle verification passed: `npx vitest run test/webSocketSupport.test.ts` passed 26 tests; `npm run compile` passed; `npx vitest run test/protocolLayoutStability.test.ts test/webSocketSupport.test.ts` passed 2 files/40 tests; `npm run build` passed. Supervisor install pass also packaged `C:\Users\chris\AppData\Local\Temp\missio-0.8.0-oc150-rework.vsix` and installed `missio.missio@0.8.0`. | 2026-06-15 16:17 NZT | OC-150 accepted after WebSocket runtime-tab and lifecycle style follow-ups; no remaining OC-150 action. |
 
 ## Dependency Map
 
@@ -208,6 +208,13 @@ Record cross-cutting decisions here so parallel agents do not rediscover them.
   Verified: `npx vitest run test/protocolLayoutStability.test.ts test/webSocketSupport.test.ts` passed 2 files/40 tests; `npm run compile` passed; `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts test/responseProvider.test.ts test/sendRequestTool.test.ts` passed 7 files/92 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm run build` passed.
   Next: commit this ledger-only evidence update; OC-150 remains Done.
 
+- 2026-06-15 16:17 NZT - Codex: Restyled the WebSocket lifecycle button after user feedback to match the collection Add/Remove Environment controls instead of the earlier filled exact-colour treatment.
+  GitButler: committed source/test follow-up `6ed6f42` (`Restyle WebSocket lifecycle buttons`) on `feature/oc-150-runtime-assertion-variables`; commit output showed `zz [unassigned changes] (no changes)` afterward.
+  Coverage: lifecycle Connect now uses transparent background, normal input border, theme success text, and theme success border on hover; Disconnect uses transparent background, normal input border, theme error text, and theme error border on hover. The existing 90px lifecycle button size/shape is preserved, and source assertions prove the hardcoded `#2aa32a`/`#a33e2a` filled backgrounds are gone from the request-panel CSS path.
+  Changed: `src/webview/requestPanel.css`, `test/webSocketSupport.test.ts`, `docs/open-collection-gap-analysis/tasks/15-runtime-assertion-variables.md`, and this ledger.
+  Verified: `npx vitest run test/webSocketSupport.test.ts` passed 26 tests; `npm run compile` passed; `npx vitest run test/protocolLayoutStability.test.ts test/webSocketSupport.test.ts` passed 2 files/40 tests; `npm run build` passed.
+  Next: commit this docs/ledger evidence update; OC-150 remains Done.
+
 ### OC-140 First-Class WebSocket Lifecycle UX
 
 - 2026-06-15 14:32 NZT - Codex: Removed the unused HTTP-style response body area from the WebSocket editor layout.
diff --git a/docs/open-collection-gap-analysis/tasks/15-runtime-assertion-variables.md b/docs/open-collection-gap-analysis/tasks/15-runtime-assertion-variables.md
index 3bbdb0d..0a11210 100644
--- a/docs/open-collection-gap-analysis/tasks/15-runtime-assertion-variables.md
+++ b/docs/open-collection-gap-analysis/tasks/15-runtime-assertion-variables.md
@@ -63,8 +63,8 @@ This task also owns the dark-mode contrast polish for WebSocket lifecycle button
 
 | Area | Expected Work |
 | --- | --- |
-| Dark mode connect | In dark mode, use background `#2aa32a` and white text for the connected/connect action state. |
-| Dark mode disconnect | In dark mode, use background `#a33e2a` and white text for the disconnect/destructive action state. |
+| Dark mode connect | Use the same no-fill treatment as the collection Add Environment control: theme success text, normal input border, and theme success border on hover while preserving the current lifecycle button size and shape. |
+| Dark mode disconnect | Use the same no-fill treatment as the collection Remove Environment control: theme error text, normal input border, and theme error border on hover while preserving the current lifecycle button size and shape. |
 | States | Preserve disabled, hover, active, and focus-visible states with accessible contrast. |
 | Theme safety | Keep light/high-contrast themes readable. Use scoped CSS and VS Code theme selectors where appropriate. |
 
@@ -87,7 +87,7 @@ This task also owns the dark-mode contrast polish for WebSocket lifecycle button
 | Clear unresolved behavior | Missing variables in assertion fields are detected before execution or reported through deterministic assertion diagnostics. |
 | WebSocket result visibility | WebSocket users can see runtime script/test/assertion/action output in the editor after the relevant lifecycle response or disconnect event. |
 | Stable WebSocket layout | Result visibility does not bring back an empty HTTP response pane or stale HTTP controls for WebSocket requests. |
-| Button contrast | Dark-mode WebSocket lifecycle buttons use white text, connect green `#2aa32a`, and disconnect red `#a33e2a` without black text. |
+| Button contrast | WebSocket lifecycle buttons use theme success/error text and hover borders with no filled background, matching the collection environment toolbar style without black text or hardcoded OC-150 color fills. |
 | Tests | Complete automated tests cover editor field behavior, runtime interpolation, unresolved-variable detection, WebSocket result visibility, button contrast, and shared runtime/protocol regressions. |
 
 ## Suggested Tests

From e5d537170e94f7e6ebcf10195e81a5258bcfb36d Mon Sep 17 00:00:00 2001
From: Chris Johnstone <chris@johnstone.net>
Date: Mon, 15 Jun 2026 16:24:08 +1200
Subject: [PATCH 10/14] Record OC-150 theme supervisor review

---
 docs/open-collection-gap-analysis/AGENT_PROGRESS.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/docs/open-collection-gap-analysis/AGENT_PROGRESS.md b/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
index 69f9ca0..1ef59a9 100644
--- a/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
+++ b/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
@@ -215,6 +215,12 @@ Record cross-cutting decisions here so parallel agents do not rediscover them.
   Verified: `npx vitest run test/webSocketSupport.test.ts` passed 26 tests; `npm run compile` passed; `npx vitest run test/protocolLayoutStability.test.ts test/webSocketSupport.test.ts` passed 2 files/40 tests; `npm run build` passed.
   Next: commit this docs/ledger evidence update; OC-150 remains Done.
 
+- 2026-06-15 16:23 NZT - Codex Supervisor: Reviewed the WebSocket Runtime tab and lifecycle theme follow-ups, rebuilt, packaged, and installed for user testing.
+  GitButler: `feature/oc-150-runtime-assertion-variables` includes runtime-tab commit `32076b7`, lifecycle restyle commit `6ed6f42`, and follow-up ledger commit `2007952`; `but status -fv` was clean before this supervisor ledger update.
+  Findings: none. The WebSocket Runtime tab remains visible before runtime results exist, and the lifecycle button styling now uses no-fill theme success/error text with hover borders instead of hardcoded filled red/green backgrounds.
+  Verified: focused `npx vitest run test/protocolLayoutStability.test.ts test/webSocketSupport.test.ts test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts` passed 5 files/79 tests; `npm run compile` passed; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/477 tests; `npm run build` passed; `npx @vscode/vsce package --out $env:TEMP\missio-0.8.0-oc150-theme-review.vsix` passed; `code.cmd --install-extension $env:TEMP\missio-0.8.0-oc150-theme-review.vsix --force` installed `missio.missio@0.8.0`.
+  Next: Ready for user testing.
+
 ### OC-140 First-Class WebSocket Lifecycle UX
 
 - 2026-06-15 14:32 NZT - Codex: Removed the unused HTTP-style response body area from the WebSocket editor layout.

From 198ddce89fd6928c2e75810e9f4eb031fc05667b Mon Sep 17 00:00:00 2001
From: Chris Johnstone <chris@johnstone.net>
Date: Mon, 15 Jun 2026 16:30:39 +1200
Subject: [PATCH 11/14] Use no-fill send buttons

---
 src/webview/requestPanel.css  | 15 ++++++++++++++-
 test/webSocketSupport.test.ts |  4 ++++
 2 files changed, 18 insertions(+), 1 deletion(-)

diff --git a/src/webview/requestPanel.css b/src/webview/requestPanel.css
index a81ba4d..6c5514c 100644
--- a/src/webview/requestPanel.css
+++ b/src/webview/requestPanel.css
@@ -355,10 +355,23 @@ body {
 .btn-primary { background: var(--btn-bg); color: var(--btn-fg); }
 #sendBtn { min-width: 70px; text-align: center; }
 #exportCopyBtn, #exportSaveBtn { width: 70px; text-align: center; }
+#sendBtn:not(.btn-cancel), #wsSendBtn {
+  background: transparent;
+  border: 1px solid var(--input-border);
+  color: var(--btn-bg, #0078d4);
+}
+#sendBtn:not(.btn-cancel):hover:not(:disabled), #wsSendBtn:hover:not(:disabled) {
+  background: transparent;
+  border-color: var(--btn-bg, #0078d4);
+}
 .btn-primary:hover { background: var(--btn-hover); }
 .btn-primary:disabled { opacity: 0.5; cursor: not-allowed; }
 .btn-primary.sending { animation: pulse 1s infinite; }
-.btn-primary.btn-cancel { background: var(--vscode-errorForeground, #f14c4c); animation: none; }
+.btn-primary.btn-cancel {
+  background: var(--vscode-errorForeground, #f14c4c);
+  border-color: var(--vscode-errorForeground, #f14c4c);
+  animation: none;
+}
 .request-editor-shell[data-protocol="websocket"] #sendBtn {
   flex: 0 0 90px;
   width: 90px;
diff --git a/test/webSocketSupport.test.ts b/test/webSocketSupport.test.ts
index 8494ab1..fa54d93 100644
--- a/test/webSocketSupport.test.ts
+++ b/test/webSocketSupport.test.ts
@@ -610,6 +610,10 @@ describe('WebSocket editor, variables, and tools', () => {
     expect(css).toContain('.response-section.websocket-response-tabs #respBodyWrap');
     expect(css).not.toContain('.response-section.websocket-response-ledger-only .response-body');
     expect(css).toContain('max-height: none;');
+    expect(css).toContain('#sendBtn:not(.btn-cancel), #wsSendBtn');
+    expect(css).toContain('color: var(--btn-bg, #0078d4);');
+    expect(css).toContain('#sendBtn:not(.btn-cancel):hover:not(:disabled), #wsSendBtn:hover:not(:disabled)');
+    expect(css).toContain('border-color: var(--btn-bg, #0078d4);');
     expect(css).toContain('.request-editor-shell[data-protocol="websocket"] #sendBtn');
     expect(css).toContain('#sendBtn.ws-disconnect-state');
     expect(css).toContain('background: transparent;');

From ae5dedf508872d48c3a2d52446067924bea38ba5 Mon Sep 17 00:00:00 2001
From: Chris Johnstone <chris@johnstone.net>
Date: Mon, 15 Jun 2026 16:31:50 +1200
Subject: [PATCH 12/14] Record no-fill send button follow-up

---
 docs/open-collection-gap-analysis/AGENT_PROGRESS.md | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/docs/open-collection-gap-analysis/AGENT_PROGRESS.md b/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
index 1ef59a9..7f6734c 100644
--- a/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
+++ b/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
@@ -72,7 +72,7 @@ Use full branch names for stacking existing branches with `but move <child-branc
 | OC-120 | Preview media zoom and rotate controls | Done | Codex | `feature/oc-120-preview-media-controls` (ia), currently stacked under OC-130/OC-140; commits `cf8d2e3`, `7d3f766`, `18dc78c`, `e31c2cd`, `fc3e164`, and `c5296ea`; no PR yet | Satisfied by `test/previewMediaControls.test.ts`: pure transform helpers, compact toolbar markup/labels/icons, rotate controls using rotate-like codicons, Ctrl+wheel and toolbar zoom handling, image/PDF controls, stale PDF render and loading-task cancellation, large PDF canvas pixel/render-scale budgeting while preserving visual zoom dimensions, packaged PDF.js asset eligibility, and generated request panel CSP checks. | `npx vitest run test/previewMediaControls.test.ts` passed 10 tests; `npm run compile` passed; targeted `npx vitest run test/previewMediaControls.test.ts test/requestTypeUx.test.ts test/responseProvider.test.ts` passed 3 files/22 tests; `npm run build` passed; `npx @vscode/vsce package --out $env:TEMP\missio-0.8.0-oc120-pdf-zoom-stability.vsix` passed; direct VSIX zip inspection found `extension/media/pdf.worker.min.mjs` and `extension/media/pdf.min.mjs`. | 2026-06-15 13:40 NZT | OC-120 user follow-up fixed. Preserve unrelated unassigned PDF.js media churn IDs `qp`/`ko`. |
 | OC-130 | Protocol-native request editor first paint | Done | Codex | `feature/oc-130-protocol-layout-stability` (g0), stacked on `feature/oc-120-preview-media-controls`; implementation commit `a3d3251` | Satisfied by `test/protocolLayoutStability.test.ts` plus shared request editor/protocol regressions: neutral first-paint shell, host invalid-YAML fallback message, direct HTTP/GraphQL/WebSocket/gRPC hydration, no visible HTTP default or stale non-HTTP controls during hydration, layout-stability CSS assertions, no-op round-trip and protocol-aware validation coverage, and request type UX startup regression. | `npx vitest run test/protocolLayoutStability.test.ts` passed 9 tests; `npm run compile` passed; focused `npx vitest run test/protocolLayoutStability.test.ts test/requestTypeUx.test.ts test/runtimeAuthoringUx.test.ts test/schemaRoundTrip.test.ts test/validationService.test.ts` passed 5 files/34 tests; targeted protocol/editor matrix passed 9 files/89 tests; `node scripts\validate-collection.js examples\demo-api` passed 44/44 files; `npm test` passed 25 files/454 tests; `npm run build` passed. | 2026-06-15 12:03 NZT | OC-130 complete. Preserve parallel/unrelated unassigned OC-140 docs IDs `wp`/`tks`/`tkt`/`uxu` and PDF.js media churn IDs `qp`/`ko`; do not commit them to OC-130. |
 | OC-140 | First-class WebSocket lifecycle UX | Done | Codex | `feature/oc-140-websocket-lifecycle-ux` (g0 after restack), stacked on `supervisor/add-websocket-lifecycle-task`; implementation commit `ec0f014`; supervisor/user follow-up commits `d2b93d4`, `1c918d5`, `401a82e`, `3bfc234`, and `b3ff548` | Satisfied by `test/webSocketSupport.test.ts` plus shared command, CodeLens, Copilot, editor, validation, round-trip, and demo regressions: persistent WebSocket sessions now expose connect/disconnect lifecycle operations through one fixed-width stateful editor button plus a separate send-message flow; retain session state and message history; surface editor controls/history, bottom status bar management, command palette/tree/CodeLens actions, and `missio_websocket_session`; route live send-tool WebSocket execution to lifecycle diagnostics; disconnect on editor/session cleanup; prefer freshly posted WebSocket lifecycle requests over stale debounced YAML; extract send-message payloads from the same resolved lifecycle request; keep Send styled as the primary request action; hide the HTTP-style response placeholder/body pane so WebSocket history fills the response area; show millisecond-precision history timestamps; and add local connect-only, repeated-send, and server-push fixtures. | `npm run compile` passed; `npx vitest run test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 2 files/35 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; live local WebSocket lifecycle smoke returned `LIVE_WS_LIFECYCLE_SMOKE ok`; `npm test` passed 25 files/465 tests; `npm run build` passed. | 2026-06-15 14:32 NZT | OC-140 complete. WebSocket lifecycle sessions are file-path scoped for editor/command flows, persist for that request until disconnect/close/editor disposal, and are intentionally not shared across separate request files. Preserve unrelated PDF.js media churn IDs `qp`/`ko`. |
-| OC-150 | Runtime assertion variables and WebSocket runtime results UX | Done | Codex | feature/oc-150-runtime-assertion-variables, stacked on supervisor/add-runtime-assertion-variable-task; implementation commit `302d325`; completion ledger commit `f583218`; acceptance rework commit `828ab07`; WebSocket runtime-tab follow-up commit `32076b7`; lifecycle restyle follow-up commit `6ed6f42` | Satisfied by `test/runtimeAuthoringUx.test.ts` for shared variable-aware assertion expression/value/description inputs and dynamic row overlays; `test/runtimeExecutionService.test.ts` for assertion expression/value/description interpolation, after-response script-produced assertion variables avoiding preflight prompts, deterministic unresolved assertion diagnostics, disabled assertions, and HTTP/GraphQL/WebSocket/gRPC runtime parity; `test/unresolvedVars.test.ts` for preserving request/auth preflight while deferring runtime assertion placeholders to runtime diagnostics; `test/webSocketSupport.test.ts` for WebSocket messages/history inside the existing response tab container plus visible runtime assertion/test/action results and theme-coloured no-fill lifecycle controls; `test/protocolLayoutStability.test.ts` for no HTTP response placeholder flash, no duplicate WebSocket response panel, Runtime tab visibility before WebSocket runtime results exist, and non-WebSocket response layout reset after WebSocket. | Rework verification passed: `npm run compile`; `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts test/responseProvider.test.ts test/sendRequestTool.test.ts` passed 7 files/91 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/476 tests; `npm run build` passed. Follow-up verification passed: `npx vitest run test/protocolLayoutStability.test.ts test/webSocketSupport.test.ts` passed 2 files/40 tests; `npm run compile` passed; OC-150 matrix passed 7 files/92 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm run build` passed. Lifecycle restyle verification passed: `npx vitest run test/webSocketSupport.test.ts` passed 26 tests; `npm run compile` passed; `npx vitest run test/protocolLayoutStability.test.ts test/webSocketSupport.test.ts` passed 2 files/40 tests; `npm run build` passed. Supervisor install pass also packaged `C:\Users\chris\AppData\Local\Temp\missio-0.8.0-oc150-rework.vsix` and installed `missio.missio@0.8.0`. | 2026-06-15 16:17 NZT | OC-150 accepted after WebSocket runtime-tab and lifecycle style follow-ups; no remaining OC-150 action. |
+| OC-150 | Runtime assertion variables and WebSocket runtime results UX | Done | Codex | feature/oc-150-runtime-assertion-variables, stacked on supervisor/add-runtime-assertion-variable-task; implementation commit `302d325`; completion ledger commit `f583218`; acceptance rework commit `828ab07`; WebSocket runtime-tab follow-up commit `32076b7`; lifecycle restyle follow-up commit `6ed6f42`; no-fill send follow-up commit `32ecc78` | Satisfied by `test/runtimeAuthoringUx.test.ts` for shared variable-aware assertion expression/value/description inputs and dynamic row overlays; `test/runtimeExecutionService.test.ts` for assertion expression/value/description interpolation, after-response script-produced assertion variables avoiding preflight prompts, deterministic unresolved assertion diagnostics, disabled assertions, and HTTP/GraphQL/WebSocket/gRPC runtime parity; `test/unresolvedVars.test.ts` for preserving request/auth preflight while deferring runtime assertion placeholders to runtime diagnostics; `test/webSocketSupport.test.ts` for WebSocket messages/history inside the existing response tab container plus visible runtime assertion/test/action results, theme-coloured no-fill lifecycle controls, and blue no-fill Send controls; `test/protocolLayoutStability.test.ts` for no HTTP response placeholder flash, no duplicate WebSocket response panel, Runtime tab visibility before WebSocket runtime results exist, and non-WebSocket response layout reset after WebSocket. | Rework verification passed: `npm run compile`; `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts test/responseProvider.test.ts test/sendRequestTool.test.ts` passed 7 files/91 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/476 tests; `npm run build` passed. Follow-up verification passed: `npx vitest run test/protocolLayoutStability.test.ts test/webSocketSupport.test.ts` passed 2 files/40 tests; `npm run compile` passed; OC-150 matrix passed 7 files/92 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm run build` passed. Lifecycle restyle verification passed: `npx vitest run test/webSocketSupport.test.ts` passed 26 tests; `npm run compile` passed; `npx vitest run test/protocolLayoutStability.test.ts test/webSocketSupport.test.ts` passed 2 files/40 tests; `npm run build` passed. Send follow-up verification passed: `npx vitest run test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 2 files/40 tests; `npm run compile` passed; `npm run build` passed. Supervisor install pass also packaged `C:\Users\chris\AppData\Local\Temp\missio-0.8.0-oc150-rework.vsix` and installed `missio.missio@0.8.0`. | 2026-06-15 16:30 NZT | OC-150 accepted after WebSocket runtime-tab, lifecycle style, and send-button style follow-ups; no remaining OC-150 action. |
 
 ## Dependency Map
 
@@ -221,6 +221,14 @@ Record cross-cutting decisions here so parallel agents do not rediscover them.
   Verified: focused `npx vitest run test/protocolLayoutStability.test.ts test/webSocketSupport.test.ts test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts` passed 5 files/79 tests; `npm run compile` passed; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/477 tests; `npm run build` passed; `npx @vscode/vsce package --out $env:TEMP\missio-0.8.0-oc150-theme-review.vsix` passed; `code.cmd --install-extension $env:TEMP\missio-0.8.0-oc150-theme-review.vsix --force` installed `missio.missio@0.8.0`.
   Next: Ready for user testing.
 
+- 2026-06-15 16:30 NZT - Codex: Styled request Send controls after user feedback to match the collection Import Environment no-fill colour treatment.
+  GitButler: committed source/test follow-up `32ecc78` (`Use no-fill send buttons`) on `feature/oc-150-runtime-assertion-variables`; commit output showed `zz [unassigned changes] (no changes)` afterward.
+  Coverage: normal request `#sendBtn` states, including HTTP Send, GraphQL Send, and gRPC Invoke, plus the WebSocket message `#wsSendBtn`, now use transparent background, normal input border, `var(--btn-bg, #0078d4)` text, and the same colour as the hover border. The WebSocket lifecycle Connect/Disconnect state remains on the existing theme success/error no-fill styling, Cancel remains filled error, and the export Copy primary button was left alone by scoping the change to Send controls instead of `.btn-primary`.
+  Runtime note: the WebSocket Runtime tab is expected to be visible but empty until a completed response includes `resp.runtime`; live session/message updates currently refresh the Messages/history panel, while runtime assertions/tests/actions render when the WebSocket lifecycle response is emitted.
+  Changed: `src/webview/requestPanel.css`, `test/webSocketSupport.test.ts`, and this ledger.
+  Verified: `npx vitest run test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 2 files/40 tests; `npm run compile` passed; `npm run build` passed.
+  Next: commit this ledger evidence update; OC-150 remains Done.
+
 ### OC-140 First-Class WebSocket Lifecycle UX
 
 - 2026-06-15 14:32 NZT - Codex: Removed the unused HTTP-style response body area from the WebSocket editor layout.

From 93c20a0557c6e9dc9d12c2abfa0ae20bc5435b1e Mon Sep 17 00:00:00 2001
From: Chris Johnstone <chris@johnstone.net>
Date: Mon, 15 Jun 2026 16:43:05 +1200
Subject: [PATCH 13/14] Use no-fill cancel button styling

---
 src/webview/requestPanel.css  | 9 +++++++--
 test/webSocketSupport.test.ts | 3 +++
 2 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/src/webview/requestPanel.css b/src/webview/requestPanel.css
index 6c5514c..c0bbc4e 100644
--- a/src/webview/requestPanel.css
+++ b/src/webview/requestPanel.css
@@ -368,10 +368,15 @@ body {
 .btn-primary:disabled { opacity: 0.5; cursor: not-allowed; }
 .btn-primary.sending { animation: pulse 1s infinite; }
 .btn-primary.btn-cancel {
-  background: var(--vscode-errorForeground, #f14c4c);
-  border-color: var(--vscode-errorForeground, #f14c4c);
+  background: transparent;
+  border: 1px solid var(--input-border);
+  color: var(--badge-error, #ef4444);
   animation: none;
 }
+.btn-primary.btn-cancel:hover:not(:disabled) {
+  background: transparent;
+  border-color: var(--badge-error, #ef4444);
+}
 .request-editor-shell[data-protocol="websocket"] #sendBtn {
   flex: 0 0 90px;
   width: 90px;
diff --git a/test/webSocketSupport.test.ts b/test/webSocketSupport.test.ts
index fa54d93..d9ba2be 100644
--- a/test/webSocketSupport.test.ts
+++ b/test/webSocketSupport.test.ts
@@ -614,6 +614,9 @@ describe('WebSocket editor, variables, and tools', () => {
     expect(css).toContain('color: var(--btn-bg, #0078d4);');
     expect(css).toContain('#sendBtn:not(.btn-cancel):hover:not(:disabled), #wsSendBtn:hover:not(:disabled)');
     expect(css).toContain('border-color: var(--btn-bg, #0078d4);');
+    expect(css).toContain('.btn-primary.btn-cancel');
+    expect(css).toContain('.btn-primary.btn-cancel:hover:not(:disabled)');
+    expect(css).not.toContain('background: var(--vscode-errorForeground, #f14c4c);');
     expect(css).toContain('.request-editor-shell[data-protocol="websocket"] #sendBtn');
     expect(css).toContain('#sendBtn.ws-disconnect-state');
     expect(css).toContain('background: transparent;');

From afdeccd770a7ce80c0731913e908779359c113e6 Mon Sep 17 00:00:00 2001
From: Chris Johnstone <chris@johnstone.net>
Date: Mon, 15 Jun 2026 16:44:35 +1200
Subject: [PATCH 14/14] Record no-fill cancel button follow-up

---
 docs/open-collection-gap-analysis/AGENT_PROGRESS.md | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/docs/open-collection-gap-analysis/AGENT_PROGRESS.md b/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
index 7f6734c..fd38764 100644
--- a/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
+++ b/docs/open-collection-gap-analysis/AGENT_PROGRESS.md
@@ -72,7 +72,7 @@ Use full branch names for stacking existing branches with `but move <child-branc
 | OC-120 | Preview media zoom and rotate controls | Done | Codex | `feature/oc-120-preview-media-controls` (ia), currently stacked under OC-130/OC-140; commits `cf8d2e3`, `7d3f766`, `18dc78c`, `e31c2cd`, `fc3e164`, and `c5296ea`; no PR yet | Satisfied by `test/previewMediaControls.test.ts`: pure transform helpers, compact toolbar markup/labels/icons, rotate controls using rotate-like codicons, Ctrl+wheel and toolbar zoom handling, image/PDF controls, stale PDF render and loading-task cancellation, large PDF canvas pixel/render-scale budgeting while preserving visual zoom dimensions, packaged PDF.js asset eligibility, and generated request panel CSP checks. | `npx vitest run test/previewMediaControls.test.ts` passed 10 tests; `npm run compile` passed; targeted `npx vitest run test/previewMediaControls.test.ts test/requestTypeUx.test.ts test/responseProvider.test.ts` passed 3 files/22 tests; `npm run build` passed; `npx @vscode/vsce package --out $env:TEMP\missio-0.8.0-oc120-pdf-zoom-stability.vsix` passed; direct VSIX zip inspection found `extension/media/pdf.worker.min.mjs` and `extension/media/pdf.min.mjs`. | 2026-06-15 13:40 NZT | OC-120 user follow-up fixed. Preserve unrelated unassigned PDF.js media churn IDs `qp`/`ko`. |
 | OC-130 | Protocol-native request editor first paint | Done | Codex | `feature/oc-130-protocol-layout-stability` (g0), stacked on `feature/oc-120-preview-media-controls`; implementation commit `a3d3251` | Satisfied by `test/protocolLayoutStability.test.ts` plus shared request editor/protocol regressions: neutral first-paint shell, host invalid-YAML fallback message, direct HTTP/GraphQL/WebSocket/gRPC hydration, no visible HTTP default or stale non-HTTP controls during hydration, layout-stability CSS assertions, no-op round-trip and protocol-aware validation coverage, and request type UX startup regression. | `npx vitest run test/protocolLayoutStability.test.ts` passed 9 tests; `npm run compile` passed; focused `npx vitest run test/protocolLayoutStability.test.ts test/requestTypeUx.test.ts test/runtimeAuthoringUx.test.ts test/schemaRoundTrip.test.ts test/validationService.test.ts` passed 5 files/34 tests; targeted protocol/editor matrix passed 9 files/89 tests; `node scripts\validate-collection.js examples\demo-api` passed 44/44 files; `npm test` passed 25 files/454 tests; `npm run build` passed. | 2026-06-15 12:03 NZT | OC-130 complete. Preserve parallel/unrelated unassigned OC-140 docs IDs `wp`/`tks`/`tkt`/`uxu` and PDF.js media churn IDs `qp`/`ko`; do not commit them to OC-130. |
 | OC-140 | First-class WebSocket lifecycle UX | Done | Codex | `feature/oc-140-websocket-lifecycle-ux` (g0 after restack), stacked on `supervisor/add-websocket-lifecycle-task`; implementation commit `ec0f014`; supervisor/user follow-up commits `d2b93d4`, `1c918d5`, `401a82e`, `3bfc234`, and `b3ff548` | Satisfied by `test/webSocketSupport.test.ts` plus shared command, CodeLens, Copilot, editor, validation, round-trip, and demo regressions: persistent WebSocket sessions now expose connect/disconnect lifecycle operations through one fixed-width stateful editor button plus a separate send-message flow; retain session state and message history; surface editor controls/history, bottom status bar management, command palette/tree/CodeLens actions, and `missio_websocket_session`; route live send-tool WebSocket execution to lifecycle diagnostics; disconnect on editor/session cleanup; prefer freshly posted WebSocket lifecycle requests over stale debounced YAML; extract send-message payloads from the same resolved lifecycle request; keep Send styled as the primary request action; hide the HTTP-style response placeholder/body pane so WebSocket history fills the response area; show millisecond-precision history timestamps; and add local connect-only, repeated-send, and server-push fixtures. | `npm run compile` passed; `npx vitest run test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 2 files/35 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; live local WebSocket lifecycle smoke returned `LIVE_WS_LIFECYCLE_SMOKE ok`; `npm test` passed 25 files/465 tests; `npm run build` passed. | 2026-06-15 14:32 NZT | OC-140 complete. WebSocket lifecycle sessions are file-path scoped for editor/command flows, persist for that request until disconnect/close/editor disposal, and are intentionally not shared across separate request files. Preserve unrelated PDF.js media churn IDs `qp`/`ko`. |
-| OC-150 | Runtime assertion variables and WebSocket runtime results UX | Done | Codex | feature/oc-150-runtime-assertion-variables, stacked on supervisor/add-runtime-assertion-variable-task; implementation commit `302d325`; completion ledger commit `f583218`; acceptance rework commit `828ab07`; WebSocket runtime-tab follow-up commit `32076b7`; lifecycle restyle follow-up commit `6ed6f42`; no-fill send follow-up commit `32ecc78` | Satisfied by `test/runtimeAuthoringUx.test.ts` for shared variable-aware assertion expression/value/description inputs and dynamic row overlays; `test/runtimeExecutionService.test.ts` for assertion expression/value/description interpolation, after-response script-produced assertion variables avoiding preflight prompts, deterministic unresolved assertion diagnostics, disabled assertions, and HTTP/GraphQL/WebSocket/gRPC runtime parity; `test/unresolvedVars.test.ts` for preserving request/auth preflight while deferring runtime assertion placeholders to runtime diagnostics; `test/webSocketSupport.test.ts` for WebSocket messages/history inside the existing response tab container plus visible runtime assertion/test/action results, theme-coloured no-fill lifecycle controls, and blue no-fill Send controls; `test/protocolLayoutStability.test.ts` for no HTTP response placeholder flash, no duplicate WebSocket response panel, Runtime tab visibility before WebSocket runtime results exist, and non-WebSocket response layout reset after WebSocket. | Rework verification passed: `npm run compile`; `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts test/responseProvider.test.ts test/sendRequestTool.test.ts` passed 7 files/91 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/476 tests; `npm run build` passed. Follow-up verification passed: `npx vitest run test/protocolLayoutStability.test.ts test/webSocketSupport.test.ts` passed 2 files/40 tests; `npm run compile` passed; OC-150 matrix passed 7 files/92 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm run build` passed. Lifecycle restyle verification passed: `npx vitest run test/webSocketSupport.test.ts` passed 26 tests; `npm run compile` passed; `npx vitest run test/protocolLayoutStability.test.ts test/webSocketSupport.test.ts` passed 2 files/40 tests; `npm run build` passed. Send follow-up verification passed: `npx vitest run test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 2 files/40 tests; `npm run compile` passed; `npm run build` passed. Supervisor install pass also packaged `C:\Users\chris\AppData\Local\Temp\missio-0.8.0-oc150-rework.vsix` and installed `missio.missio@0.8.0`. | 2026-06-15 16:30 NZT | OC-150 accepted after WebSocket runtime-tab, lifecycle style, and send-button style follow-ups; no remaining OC-150 action. |
+| OC-150 | Runtime assertion variables and WebSocket runtime results UX | Done | Codex | feature/oc-150-runtime-assertion-variables, stacked on supervisor/add-runtime-assertion-variable-task; implementation commit `55dd694`; completion ledger commit `940a696`; acceptance rework commit `a2e63b4`; WebSocket runtime-tab follow-up commit `0cfc7f8`; lifecycle restyle follow-up commit `608eb19`; no-fill send follow-up commit `3e6cee0`; no-fill cancel follow-up commit `7f021ca` | Satisfied by `test/runtimeAuthoringUx.test.ts` for shared variable-aware assertion expression/value/description inputs and dynamic row overlays; `test/runtimeExecutionService.test.ts` for assertion expression/value/description interpolation, after-response script-produced assertion variables avoiding preflight prompts, deterministic unresolved assertion diagnostics, disabled assertions, and HTTP/GraphQL/WebSocket/gRPC runtime parity; `test/unresolvedVars.test.ts` for preserving request/auth preflight while deferring runtime assertion placeholders to runtime diagnostics; `test/webSocketSupport.test.ts` for WebSocket messages/history inside the existing response tab container plus visible runtime assertion/test/action results, theme-coloured no-fill lifecycle controls, blue no-fill Send controls, and red no-fill Cancel controls; `test/protocolLayoutStability.test.ts` for no HTTP response placeholder flash, no duplicate WebSocket response panel, Runtime tab visibility before WebSocket runtime results exist, and non-WebSocket response layout reset after WebSocket. | Rework verification passed: `npm run compile`; `npx vitest run test/runtimeAuthoringUx.test.ts test/runtimeExecutionService.test.ts test/unresolvedVars.test.ts test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts test/responseProvider.test.ts test/sendRequestTool.test.ts` passed 7 files/91 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm test` passed 25 files/476 tests; `npm run build` passed. Follow-up verification passed: `npx vitest run test/protocolLayoutStability.test.ts test/webSocketSupport.test.ts` passed 2 files/40 tests; `npm run compile` passed; OC-150 matrix passed 7 files/92 tests; `node scripts/validate-collection.js examples/demo-api` passed 47/47 files; `npm run build` passed. Lifecycle restyle verification passed: `npx vitest run test/webSocketSupport.test.ts` passed 26 tests; `npm run compile` passed; `npx vitest run test/protocolLayoutStability.test.ts test/webSocketSupport.test.ts` passed 2 files/40 tests; `npm run build` passed. Send follow-up verification passed: `npx vitest run test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 2 files/40 tests; `npm run compile` passed; `npm run build` passed. Cancel follow-up verification passed: `npx vitest run test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 2 files/40 tests; `npm run compile` passed; `npm run build` passed. Supervisor install pass also packaged `C:\Users\chris\AppData\Local\Temp\missio-0.8.0-oc150-rework.vsix` and installed `missio.missio@0.8.0`. | 2026-06-15 16:43 NZT | OC-150 accepted after WebSocket runtime-tab, lifecycle style, send-button style, and cancel-button style follow-ups; no remaining OC-150 action. |
 
 ## Dependency Map
 
@@ -222,13 +222,20 @@ Record cross-cutting decisions here so parallel agents do not rediscover them.
   Next: Ready for user testing.
 
 - 2026-06-15 16:30 NZT - Codex: Styled request Send controls after user feedback to match the collection Import Environment no-fill colour treatment.
-  GitButler: committed source/test follow-up `32ecc78` (`Use no-fill send buttons`) on `feature/oc-150-runtime-assertion-variables`; commit output showed `zz [unassigned changes] (no changes)` afterward.
-  Coverage: normal request `#sendBtn` states, including HTTP Send, GraphQL Send, and gRPC Invoke, plus the WebSocket message `#wsSendBtn`, now use transparent background, normal input border, `var(--btn-bg, #0078d4)` text, and the same colour as the hover border. The WebSocket lifecycle Connect/Disconnect state remains on the existing theme success/error no-fill styling, Cancel remains filled error, and the export Copy primary button was left alone by scoping the change to Send controls instead of `.btn-primary`.
+  GitButler: committed source/test follow-up `3e6cee0` (`Use no-fill send buttons`) on `feature/oc-150-runtime-assertion-variables`; commit output showed `zz [unassigned changes] (no changes)` afterward.
+  Coverage: normal request `#sendBtn` states, including HTTP Send, GraphQL Send, and gRPC Invoke, plus the WebSocket message `#wsSendBtn`, now use transparent background, normal input border, `var(--btn-bg, #0078d4)` text, and the same colour as the hover border. The WebSocket lifecycle Connect/Disconnect state remains on the existing theme success/error no-fill styling, while the later 16:43 NZT follow-up moves Cancel to the same red no-fill treatment. The export Copy primary button was left alone by scoping the change to Send controls instead of `.btn-primary`.
   Runtime note: the WebSocket Runtime tab is expected to be visible but empty until a completed response includes `resp.runtime`; live session/message updates currently refresh the Messages/history panel, while runtime assertions/tests/actions render when the WebSocket lifecycle response is emitted.
   Changed: `src/webview/requestPanel.css`, `test/webSocketSupport.test.ts`, and this ledger.
   Verified: `npx vitest run test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 2 files/40 tests; `npm run compile` passed; `npm run build` passed.
   Next: commit this ledger evidence update; OC-150 remains Done.
 
+- 2026-06-15 16:43 NZT - Codex: Updated the request Cancel state to the new theme-red no-fill styling.
+  GitButler: committed source/test follow-up `7f021ca` (`Use no-fill cancel button styling`) on `feature/oc-150-runtime-assertion-variables`; commit output showed `zz [unassigned changes] (no changes)` afterward.
+  Coverage: `.btn-primary.btn-cancel` now uses transparent background, normal input border, `var(--badge-error, #ef4444)` text, and the same theme-red hover border instead of a filled `var(--vscode-errorForeground, #f14c4c)` background. The source assertion in `test/webSocketSupport.test.ts` now fails if the old filled error background returns.
+  Changed: `src/webview/requestPanel.css`, `test/webSocketSupport.test.ts`, and this ledger.
+  Verified: `npx vitest run test/webSocketSupport.test.ts test/protocolLayoutStability.test.ts` passed 2 files/40 tests; `npm run compile` passed; `npm run build` passed.
+  Next: commit this ledger evidence update; OC-150 remains Done.
+
 ### OC-140 First-Class WebSocket Lifecycle UX
 
 - 2026-06-15 14:32 NZT - Codex: Removed the unused HTTP-style response body area from the WebSocket editor layout.