Merge branch 'main' into fix/1639

Merge PR #1651: feat: add WebSocket load testing infrastructure (#1505)

js/spatial-search.js

@@ -0,0 +1,317 @@
+// ═══════════════════════════════════════════════════════════════
+// SPATIAL SEARCH — Find nearest user/object by name
+// ═══════════════════════════════════════════════════════════════
+//
+// Search for users/objects by name with distance and direction.
+// Provides autocomplete, pathfinding arrow, and keyboard shortcuts.
+//
+// Usage:
+//   const search = new SpatialSearch({ maxDistance: 1000 });
+//   search.registerEntity('id', { name, type, position });
+//   const results = search.searchEntities('query');
+// ═══════════════════════════════════════════════════════════════
+
+class SpatialSearch {
+  constructor(options = {}) {
+    this.maxDistance = options.maxDistance || 1000;
+    this.onResultSelect = options.onResultSelect || null;
+    this.entities = new Map();
+    this.selectedIndex = -1;
+    this.results = [];
+    this.isOpen = false;
+    this._initUI();
+    this._bindKeys();
+  }
+
+  // ─── Entity Management ─────────────────────────────────
+  
+  registerEntity(id, { name, type = 'object', position }) {
+    this.entities.set(id, {
+      id,
+      name: name.toLowerCase(),
+      displayName: name,
+      type,
+      position: { ...position }
+    });
+  }
+
+  unregisterEntity(id) {
+    this.entities.delete(id);
+  }
+
+  updateEntityPosition(id, position) {
+    const entity = this.entities.get(id);
+    if (entity) {
+      entity.position = { ...position };
+    }
+  }
+
+  // ─── Search ────────────────────────────────────────────
+
+  searchEntities(query, cameraPosition = null) {
+    if (!query || query.length < 1) {
+      this.results = [];
+      this._renderResults();
+      return [];
+    }
+
+    const q = query.toLowerCase();
+    const results = [];
+
+    for (const [id, entity] of this.entities) {
+      if (!entity.name.includes(q)) continue;
+
+      let distance = 0;
+      let direction = '';
+
+      if (cameraPosition) {
+        distance = this._calculateDistance(cameraPosition, entity.position);
+        if (distance > this.maxDistance) continue;
+        direction = this._calculateDirection(cameraPosition, entity.position);
+      }
+
+      results.push({
+        id,
+        name: entity.displayName,
+        type: entity.type,
+        distance: Math.round(distance * 10) / 10,
+        direction,
+        position: entity.position
+      });
+    }
+
+    // Sort by distance
+    results.sort((a, b) => a.distance - b.distance);
+    
+    this.results = results.slice(0, 10); // Limit to 10 results
+    this.selectedIndex = this.results.length > 0 ? 0 : -1;
+    this._renderResults();
+    
+    return this.results;
+  }
+
+  selectResult(index) {
+    if (index < 0 || index >= this.results.length) return;
+    
+    this.selectedIndex = index;
+    this._renderResults();
+    
+    const result = this.results[index];
+    if (result && this.onResultSelect) {
+      this.onResultSelect(result);
+    }
+    
+    this.close();
+  }
+
+  // ─── Distance & Direction ──────────────────────────────
+
+  _calculateDistance(from, to) {
+    const dx = to.x - from.x;
+    const dy = to.y - from.y;
+    const dz = to.z - from.z;
+    return Math.sqrt(dx * dx + dy * dy + dz * dz);
+  }
+
+  _calculateDirection(from, to) {
+    const dx = to.x - from.x;
+    const dz = to.z - from.z;
+    const angle = Math.atan2(dx, dz) * (180 / Math.PI);
+    
+    // Convert to compass direction
+    if (angle >= -22.5 && angle < 22.5) return 'N';
+    if (angle >= 22.5 && angle < 67.5) return 'NE';
+    if (angle >= 67.5 && angle < 112.5) return 'E';
+    if (angle >= 112.5 && angle < 157.5) return 'SE';
+    if (angle >= 157.5 || angle < -157.5) return 'S';
+    if (angle >= -157.5 && angle < -112.5) return 'SW';
+    if (angle >= -112.5 && angle < -67.5) return 'W';
+    if (angle >= -67.5 && angle < -22.5) return 'NW';
+    return 'N';
+  }
+
+  // ─── UI ────────────────────────────────────────────────
+
+  _initUI() {
+    // Search container
+    this.container = document.createElement('div');
+    this.container.id = 'spatial-search';
+    this.container.className = 'spatial-search';
+    this.container.style.display = 'none';
+    
+    // Input
+    this.input = document.createElement('input');
+    this.input.type = 'text';
+    this.input.className = 'spatial-search-input';
+    this.input.placeholder = 'Search by name... (Ctrl+F)';
+    this.input.addEventListener('input', () => this._onInput());
+    this.input.addEventListener('keydown', (e) => this._onKeyDown(e));
+    
+    // Results dropdown
+    this.dropdown = document.createElement('div');
+    this.dropdown.className = 'spatial-search-dropdown';
+    
+    // Path arrow
+    this.arrow = document.createElement('div');
+    this.arrow.className = 'spatial-search-arrow';
+    this.arrow.style.display = 'none';
+    this.arrow.innerHTML = '<span class="arrow-icon">➤</span><span class="arrow-info"></span>';
+    
+    this.container.appendChild(this.input);
+    this.container.appendChild(this.dropdown);
+    
+    document.body.appendChild(this.container);
+    document.body.appendChild(this.arrow);
+  }
+
+  _bindKeys() {
+    document.addEventListener('keydown', (e) => {
+      // Ctrl+F or Cmd+F to toggle
+      if ((e.ctrlKey || e.metaKey) && e.key === 'f') {
+        e.preventDefault();
+        this.toggle();
+        return;
+      }
+      
+      // Escape to close
+      if (e.key === 'Escape' && this.isOpen) {
+        e.preventDefault();
+        this.close();
+        return;
+      }
+    });
+  }
+
+  _onInput() {
+    const query = this.input.value;
+    // Get camera position if available
+    const cameraPos = window.camera ? {
+      x: window.camera.position.x,
+      y: window.camera.position.y,
+      z: window.camera.position.z
+    } : null;
+    
+    this.searchEntities(query, cameraPos);
+  }
+
+  _onKeyDown(e) {
+    if (!this.isOpen || this.results.length === 0) return;
+    
+    switch (e.key) {
+      case 'ArrowDown':
+        e.preventDefault();
+        this.selectedIndex = Math.min(this.selectedIndex + 1, this.results.length - 1);
+        this._renderResults();
+        break;
+      case 'ArrowUp':
+        e.preventDefault();
+        this.selectedIndex = Math.max(this.selectedIndex - 1, 0);
+        this._renderResults();
+        break;
+      case 'Enter':
+        e.preventDefault();
+        if (this.selectedIndex >= 0) {
+          this.selectResult(this.selectedIndex);
+        }
+        break;
+    }
+  }
+
+  _renderResults() {
+    this.dropdown.innerHTML = '';
+    
+    if (this.results.length === 0) {
+      if (this.input.value) {
+        this.dropdown.innerHTML = '<div class="spatial-search-empty">No results found</div>';
+      }
+      return;
+    }
+    
+    this.results.forEach((result, index) => {
+      const item = document.createElement('div');
+      item.className = `spatial-search-item ${index === this.selectedIndex ? 'selected' : ''}`;
+      item.innerHTML = `
+        <span class="item-name">${this._escapeHtml(result.name)}</span>
+        <span class="item-type">${result.type}</span>
+        <span class="item-distance">${result.distance}m ${result.direction}</span>
+      `;
+      item.addEventListener('click', () => this.selectResult(index));
+      this.dropdown.appendChild(item);
+    });
+  }
+
+  _updateArrow(result) {
+    if (!result) {
+      this.arrow.style.display = 'none';
+      return;
+    }
+    
+    this.arrow.style.display = 'flex';
+    const info = this.arrow.querySelector('.arrow-info');
+    if (info) {
+      info.textContent = `${result.name} — ${result.distance}m ${result.direction}`;
+    }
+    
+    // Rotate arrow based on direction
+    const rotations = {
+      'N': 0, 'NE': 45, 'E': 90, 'SE': 135,
+      'S': 180, 'SW': 225, 'W': 270, 'NW': 315
+    };
+    const arrowIcon = this.arrow.querySelector('.arrow-icon');
+    if (arrowIcon) {
+      arrowIcon.style.transform = `rotate(${rotations[result.direction] || 0}deg)`;
+    }
+  }
+
+  _escapeHtml(str) {
+    const div = document.createElement('div');
+    div.textContent = str;
+    return div.innerHTML;
+  }
+
+  // ─── Public API ────────────────────────────────────────
+
+  open() {
+    this.isOpen = true;
+    this.container.style.display = 'flex';
+    this.input.focus();
+    this.input.value = '';
+    this.results = [];
+    this._renderResults();
+  }
+
+  close() {
+    this.isOpen = false;
+    this.container.style.display = 'none';
+    this.input.blur();
+    this.selectedIndex = -1;
+    this._updateArrow(null);
+  }
+
+  toggle() {
+    if (this.isOpen) {
+      this.close();
+    } else {
+      this.open();
+    }
+  }
+
+  getStatus() {
+    return {
+      entityCount: this.entities.size,
+      isOpen: this.isOpen,
+      resultCount: this.results.length,
+      selectedIndex: this.selectedIndex
+    };
+  }
+}
+
+// Export for module systems
+if (typeof module !== 'undefined' && module.exports) {
+  module.exports = SpatialSearch;
+}
+
+// Make available globally
+if (typeof window !== 'undefined') {
+  window.SpatialSearch = SpatialSearch;
+}

server.py

@@ -3,20 +3,34 @@
 The Nexus WebSocket Gateway — Robust broadcast bridge for Timmy's consciousness.
 This server acts as the central hub for the-nexus, connecting the mind (nexus_think.py),
 the body (Evennia/Morrowind), and the visualization surface.
+
+Security features:
+- Binds to 127.0.0.1 by default (localhost only)
+- Optional external binding via NEXUS_WS_HOST environment variable
+- Token-based authentication via NEXUS_WS_TOKEN environment variable
+- Rate limiting on connections
+- Connection logging and monitoring
 """
 import asyncio
 import json
 import logging
+import os
 import signal
 import sys
-from typing import Set
+import time
+from typing import Set, Dict, Optional
+from collections import defaultdict
 
 # Branch protected file - see POLICY.md
 import websockets
 
 # Configuration
-PORT = 8765
+PORT = int(os.environ.get("NEXUS_WS_PORT", "8765"))
-HOST = "0.0.0.0"  # Allow external connections if needed
+HOST = os.environ.get("NEXUS_WS_HOST", "127.0.0.1")  # Default to localhost only
+AUTH_TOKEN = os.environ.get("NEXUS_WS_TOKEN", "")  # Empty = no auth required
+RATE_LIMIT_WINDOW = 60  # seconds
+RATE_LIMIT_MAX_CONNECTIONS = 10  # max connections per IP per window
+RATE_LIMIT_MAX_MESSAGES = 100  # max messages per connection per window
 
 # Logging setup
 logging.basicConfig(
@@ -28,15 +42,97 @@ logger = logging.getLogger("nexus-gateway")
 
 # State
 clients: Set[websockets.WebSocketServerProtocol] = set()
+connection_tracker: Dict[str, list] = defaultdict(list)  # IP -> [timestamps]
+message_tracker: Dict[int, list] = defaultdict(list)  # connection_id -> [timestamps]
+
+def check_rate_limit(ip: str) -> bool:
+    """Check if IP has exceeded connection rate limit."""
+    now = time.time()
+    # Clean old entries
+    connection_tracker[ip] = [t for t in connection_tracker[ip] if now - t < RATE_LIMIT_WINDOW]
+    
+    if len(connection_tracker[ip]) >= RATE_LIMIT_MAX_CONNECTIONS:
+        return False
+    
+    connection_tracker[ip].append(now)
+    return True
+
+def check_message_rate_limit(connection_id: int) -> bool:
+    """Check if connection has exceeded message rate limit."""
+    now = time.time()
+    # Clean old entries
+    message_tracker[connection_id] = [t for t in message_tracker[connection_id] if now - t < RATE_LIMIT_WINDOW]
+    
+    if len(message_tracker[connection_id]) >= RATE_LIMIT_MAX_MESSAGES:
+        return False
+    
+    message_tracker[connection_id].append(now)
+    return True
+
+async def authenticate_connection(websocket: websockets.WebSocketServerProtocol) -> bool:
+    """Authenticate WebSocket connection using token."""
+    if not AUTH_TOKEN:
+        # No authentication required
+        return True
+    
+    try:
+        # Wait for authentication message (first message should be auth)
+        auth_message = await asyncio.wait_for(websocket.recv(), timeout=5.0)
+        auth_data = json.loads(auth_message)
+        
+        if auth_data.get("type") != "auth":
+            logger.warning(f"Invalid auth message type from {websocket.remote_address}")
+            return False
+        
+        token = auth_data.get("token", "")
+        if token != AUTH_TOKEN:
+            logger.warning(f"Invalid auth token from {websocket.remote_address}")
+            return False
+        
+        logger.info(f"Authenticated connection from {websocket.remote_address}")
+        return True
+        
+    except asyncio.TimeoutError:
+        logger.warning(f"Authentication timeout from {websocket.remote_address}")
+        return False
+    except json.JSONDecodeError:
+        logger.warning(f"Invalid auth JSON from {websocket.remote_address}")
+        return False
+    except Exception as e:
+        logger.error(f"Authentication error from {websocket.remote_address}: {e}")
+        return False
 
 async def broadcast_handler(websocket: websockets.WebSocketServerProtocol):
     """Handles individual client connections and message broadcasting."""
-    clients.add(websocket)
     addr = websocket.remote_address
+    ip = addr[0] if addr else "unknown"
+    connection_id = id(websocket)
+    
+    # Check connection rate limit
+    if not check_rate_limit(ip):
+        logger.warning(f"Connection rate limit exceeded for {ip}")
+        await websocket.close(1008, "Rate limit exceeded")
+        return
+    
+    # Authenticate if token is required
+    if not await authenticate_connection(websocket):
+        await websocket.close(1008, "Authentication failed")
+        return
+    
+    clients.add(websocket)
     logger.info(f"Client connected from {addr}. Total clients: {len(clients)}")
     
     try:
         async for message in websocket:
+            # Check message rate limit
+            if not check_message_rate_limit(connection_id):
+                logger.warning(f"Message rate limit exceeded for {addr}")
+                await websocket.send(json.dumps({
+                    "type": "error",
+                    "message": "Message rate limit exceeded"
+                }))
+                continue
+            
             # Parse for logging/validation if it's JSON
             try:
                 data = json.loads(message)
@@ -81,6 +177,20 @@ async def broadcast_handler(websocket: websockets.WebSocketServerProtocol):
 
 async def main():
     """Main server loop with graceful shutdown."""
+    # Log security configuration
+    if AUTH_TOKEN:
+        logger.info("Authentication: ENABLED (token required)")
+    else:
+        logger.warning("Authentication: DISABLED (no token required)")
+    
+    if HOST == "0.0.0.0":
+        logger.warning("Host binding: 0.0.0.0 (all interfaces) - SECURITY RISK")
+    else:
+        logger.info(f"Host binding: {HOST} (localhost only)")
+    
+    logger.info(f"Rate limiting: {RATE_LIMIT_MAX_CONNECTIONS} connections/IP/{RATE_LIMIT_WINDOW}s, "
+                f"{RATE_LIMIT_MAX_MESSAGES} messages/connection/{RATE_LIMIT_WINDOW}s")
+    
     logger.info(f"Starting Nexus WS gateway on ws://{HOST}:{PORT}")
     
     # Set up signal handlers for graceful shutdown

tests/load/websocket_load_test.py

@@ -0,0 +1,193 @@
+#!/usr/bin/env python3
+"""
+WebSocket Load Test — Benchmark concurrent user sessions on the Nexus gateway.
+
+Tests:
+- Concurrent WebSocket connections
+- Message throughput under load
+- Memory profiling per connection
+- Connection failure/recovery
+
+Usage:
+    python3 tests/load/websocket_load_test.py                    # default (50 users)
+    python3 tests/load/websocket_load_test.py --users 200        # 200 concurrent
+    python3 tests/load/websocket_load_test.py --duration 60      # 60 second test
+    python3 tests/load/websocket_load_test.py --json             # JSON output
+
+Ref: #1505
+"""
+
+import asyncio
+import json
+import os
+import sys
+import time
+import argparse
+from dataclasses import dataclass, field
+from typing import List, Optional
+
+WS_URL = os.environ.get("WS_URL", "ws://localhost:8765")
+
+
+@dataclass
+class ConnectionStats:
+    connected: bool = False
+    connect_time_ms: float = 0
+    messages_sent: int = 0
+    messages_received: int = 0
+    errors: int = 0
+    latencies: List[float] = field(default_factory=list)
+    disconnected: bool = False
+
+
+async def ws_client(user_id: int, duration: int, stats: ConnectionStats, ws_url: str = WS_URL):
+    """Single WebSocket client for load testing."""
+    try:
+        import websockets
+    except ImportError:
+        # Fallback: use raw asyncio
+        stats.errors += 1
+        return
+
+    try:
+        start = time.time()
+        async with websockets.connect(ws_url, open_timeout=5) as ws:
+            stats.connect_time_ms = (time.time() - start) * 1000
+            stats.connected = True
+
+            # Send periodic messages for the duration
+            end_time = time.time() + duration
+            msg_count = 0
+            while time.time() < end_time:
+                try:
+                    msg_start = time.time()
+                    message = json.dumps({
+                        "type": "chat",
+                        "user": f"load-test-{user_id}",
+                        "content": f"Load test message {msg_count} from user {user_id}",
+                    })
+                    await ws.send(message)
+                    stats.messages_sent += 1
+
+                    # Wait for response (with timeout)
+                    try:
+                        response = await asyncio.wait_for(ws.recv(), timeout=5.0)
+                        stats.messages_received += 1
+                        latency = (time.time() - msg_start) * 1000
+                        stats.latencies.append(latency)
+                    except asyncio.TimeoutError:
+                        stats.errors += 1
+
+                    msg_count += 1
+                    await asyncio.sleep(0.5)  # 2 messages/sec per user
+
+                except websockets.exceptions.ConnectionClosed:
+                    stats.disconnected = True
+                    break
+                except Exception:
+                    stats.errors += 1
+
+    except Exception as e:
+        stats.errors += 1
+        if "Connection refused" in str(e) or "connect" in str(e).lower():
+            pass  # Expected if server not running
+
+
+async def run_load_test(users: int, duration: int, ws_url: str = WS_URL) -> dict:
+    """Run the load test with N concurrent users."""
+    stats = [ConnectionStats() for _ in range(users)]
+
+    print(f"  Starting {users} concurrent connections for {duration}s...")
+    start = time.time()
+
+    tasks = [ws_client(i, duration, stats[i], ws_url) for i in range(users)]
+    await asyncio.gather(*tasks, return_exceptions=True)
+
+    total_time = time.time() - start
+
+    # Aggregate results
+    connected = sum(1 for s in stats if s.connected)
+    total_sent = sum(s.messages_sent for s in stats)
+    total_received = sum(s.messages_received for s in stats)
+    total_errors = sum(s.errors for s in stats)
+    disconnected = sum(1 for s in stats if s.disconnected)
+
+    all_latencies = []
+    for s in stats:
+        all_latencies.extend(s.latencies)
+
+    avg_latency = sum(all_latencies) / len(all_latencies) if all_latencies else 0
+    p95_latency = sorted(all_latencies)[int(len(all_latencies) * 0.95)] if all_latencies else 0
+    p99_latency = sorted(all_latencies)[int(len(all_latencies) * 0.99)] if all_latencies else 0
+
+    avg_connect_time = sum(s.connect_time_ms for s in stats if s.connected) / connected if connected else 0
+
+    return {
+        "users": users,
+        "duration_seconds": round(total_time, 1),
+        "connected": connected,
+        "connect_rate": round(connected / users * 100, 1),
+        "messages_sent": total_sent,
+        "messages_received": total_received,
+        "throughput_msg_per_sec": round(total_sent / total_time, 1) if total_time > 0 else 0,
+        "avg_latency_ms": round(avg_latency, 1),
+        "p95_latency_ms": round(p95_latency, 1),
+        "p99_latency_ms": round(p99_latency, 1),
+        "avg_connect_time_ms": round(avg_connect_time, 1),
+        "errors": total_errors,
+        "disconnected": disconnected,
+    }
+
+
+def print_report(result: dict):
+    """Print load test report."""
+    print(f"\n{'='*60}")
+    print(f"  WEBSOCKET LOAD TEST REPORT")
+    print(f"{'='*60}\n")
+
+    print(f"  Connections:    {result['connected']}/{result['users']} ({result['connect_rate']}%)")
+    print(f"  Duration:       {result['duration_seconds']}s")
+    print(f"  Messages sent:  {result['messages_sent']}")
+    print(f"  Messages recv:  {result['messages_received']}")
+    print(f"  Throughput:     {result['throughput_msg_per_sec']} msg/s")
+    print(f"  Avg connect:    {result['avg_connect_time_ms']}ms")
+    print()
+    print(f"  Latency:")
+    print(f"    Avg: {result['avg_latency_ms']}ms")
+    print(f"    P95: {result['p95_latency_ms']}ms")
+    print(f"    P99: {result['p99_latency_ms']}ms")
+    print()
+    print(f"  Errors:         {result['errors']}")
+    print(f"  Disconnected:   {result['disconnected']}")
+
+    # Verdict
+    if result['connect_rate'] >= 95 and result['errors'] == 0:
+        print(f"\n  ✅ PASS")
+    elif result['connect_rate'] >= 80:
+        print(f"\n  ⚠️  DEGRADED")
+    else:
+        print(f"\n  ❌ FAIL")
+
+
+def main():
+    parser = argparse.ArgumentParser(description="WebSocket Load Test")
+    parser.add_argument("--users", type=int, default=50, help="Concurrent users")
+    parser.add_argument("--duration", type=int, default=30, help="Test duration in seconds")
+    parser.add_argument("--json", action="store_true", help="JSON output")
+    parser.add_argument("--url", default=WS_URL, help="WebSocket URL")
+    args = parser.parse_args()
+
+    ws_url = args.url
+
+    print(f"\nWebSocket Load Test — {args.users} users, {args.duration}s\n")
+
+    result = asyncio.run(run_load_test(args.users, args.duration, ws_url))
+
+    if args.json:
+        print(json.dumps(result, indent=2))
+    else:
+        print_report(result)
+
+
+if __name__ == "__main__":
+    main()

tests/test_spatial_search.js

@@ -0,0 +1,99 @@
+// Test suite for SpatialSearch module
+// Run: node --test tests/test_spatial_search.js
+
+const { describe, it, beforeEach } = require('node:test');
+const assert = require('node:assert');
+
+// Mock DOM for Node.js environment
+global.document = {
+  createElement: (tag) => ({
+    className: '',
+    style: {},
+    innerHTML: '',
+    textContent: '',
+    addEventListener: () => {},
+    appendChild: () => {},
+    querySelector: () => ({ style: {}, textContent: '' })
+  }),
+  body: { appendChild: () => {} },
+  addEventListener: () => {}
+};
+global.window = { camera: null };
+
+// Load module
+const SpatialSearch = require('../js/spatial-search.js');
+
+describe('SpatialSearch', () => {
+  let search;
+
+  beforeEach(() => {
+    search = new SpatialSearch({ maxDistance: 1000 });
+  });
+
+  it('loads correctly', () => {
+    assert.ok(SpatialSearch);
+  });
+
+  it('can be instantiated', () => {
+    assert.ok(search instanceof SpatialSearch);
+  });
+
+  it('can register entities', () => {
+    search.registerEntity('user1', {
+      name: 'Alice',
+      type: 'user',
+      position: { x: 10, y: 0, z: 5 }
+    });
+    const status = search.getStatus();
+    assert.strictEqual(status.entityCount, 1);
+  });
+
+  it('can unregister entities', () => {
+    search.registerEntity('user1', { name: 'Alice', type: 'user', position: { x: 0, y: 0, z: 0 } });
+    search.unregisterEntity('user1');
+    assert.strictEqual(search.getStatus().entityCount, 0);
+  });
+
+  it('can update entity position', () => {
+    search.registerEntity('user1', { name: 'Alice', type: 'user', position: { x: 0, y: 0, z: 0 } });
+    search.updateEntityPosition('user1', { x: 10, y: 0, z: 10 });
+    // Verify by searching with camera position
+    const results = search.searchEntities('alice', { x: 0, y: 0, z: 0 });
+    assert.strictEqual(results.length, 1);
+    assert.ok(results[0].distance > 0);
+  });
+
+  it('calculates distance correctly', () => {
+    const from = { x: 0, y: 0, z: 0 };
+    const to = { x: 3, y: 0, z: 4 };
+    const distance = search._calculateDistance(from, to);
+    assert.strictEqual(distance, 5); // 3-4-5 triangle
+  });
+
+  it('calculates direction correctly', () => {
+    const from = { x: 0, y: 0, z: 0 };
+    assert.strictEqual(search._calculateDirection(from, { x: 0, y: 0, z: 10 }), 'N');
+    assert.strictEqual(search._calculateDirection(from, { x: 10, y: 0, z: 0 }), 'E');
+    assert.strictEqual(search._calculateDirection(from, { x: 0, y: 0, z: -10 }), 'S');
+    assert.strictEqual(search._calculateDirection(from, { x: -10, y: 0, z: 0 }), 'W');
+  });
+
+  it('searches entities correctly', () => {
+    search.registerEntity('1', { name: 'Alice', type: 'user', position: { x: 5, y: 0, z: 0 } });
+    search.registerEntity('2', { name: 'Bob', type: 'user', position: { x: 10, y: 0, z: 0 } });
+    search.registerEntity('3', { name: 'Alice Shop', type: 'object', position: { x: 20, y: 0, z: 0 } });
+
+    const results = search.searchEntities('ali', { x: 0, y: 0, z: 0 });
+    assert.strictEqual(results.length, 2);
+    assert.strictEqual(results[0].name, 'Alice'); // Closer
+    assert.strictEqual(results[1].name, 'Alice Shop');
+  });
+
+  it('gets status', () => {
+    search.registerEntity('1', { name: 'Test', type: 'object', position: { x: 0, y: 0, z: 0 } });
+    const status = search.getStatus();
+    assert.strictEqual(status.entityCount, 1);
+    assert.strictEqual(status.isOpen, false);
+    assert.strictEqual(status.resultCount, 0);
+  });
+});