headroom/tests/test_provider_codex_install.py

from __future__ import annotations

from pathlib import Path

from headroom.providers.codex.install import build_provider_section, codex_uses_chatgpt_auth


def test_codex_provider_section_omits_requires_openai_auth_by_default() -> None:
    """#406: the flag must default off (API-key users), and only on for OAuth.

    Setting requires_openai_auth on a custom [model_providers.headroom] block
    forces codex to demand OpenAI OAuth login for every headroom-routed request,
    which breaks API-key users; so callers opt in explicitly for ChatGPT users.
    """
    section = build_provider_section(port=8787, name="OpenAI via Headroom proxy")

    assert 'name = "OpenAI via Headroom proxy"' in section
    assert 'base_url = "http://127.0.0.1:8787/v1"' in section
    assert "requires_openai_auth" not in section, (
        f"requires_openai_auth must be absent by default; got:\n{section}"
    )
    assert "supports_websockets = true" in section
    assert 'env_key = "OPENAI_API_KEY"' not in section


def test_codex_provider_section_emits_requires_openai_auth_when_flagged() -> None:
    section = build_provider_section(
        port=8787, name="OpenAI via Headroom proxy", requires_openai_auth=True
    )

    assert "requires_openai_auth = true" in section


def test_codex_uses_chatgpt_auth_true_for_chatgpt_mode(tmp_path: Path) -> None:
    auth = tmp_path / "auth.json"
    auth.write_text('{"auth_mode": "chatgpt"}', encoding="utf-8")

    assert codex_uses_chatgpt_auth(auth) is True


def test_codex_uses_chatgpt_auth_true_for_account_id_without_mode(tmp_path: Path) -> None:
    auth = tmp_path / "auth.json"
    auth.write_text('{"tokens": {"account_id": "acct_1"}}', encoding="utf-8")

    assert codex_uses_chatgpt_auth(auth) is True


def test_codex_uses_chatgpt_auth_false_for_api_key(tmp_path: Path) -> None:
    auth = tmp_path / "auth.json"
    auth.write_text('{"auth_mode": "apikey", "OPENAI_API_KEY": "sk-x"}', encoding="utf-8")

    assert codex_uses_chatgpt_auth(auth) is False


def test_codex_uses_chatgpt_auth_false_for_missing_or_malformed(tmp_path: Path) -> None:
    assert codex_uses_chatgpt_auth(tmp_path / "absent.json") is False
    bad = tmp_path / "auth.json"
    bad.write_text("not json", encoding="utf-8")
    assert codex_uses_chatgpt_auth(bad) is False


def test_codex_uses_chatgpt_auth_false_for_non_dict_json(tmp_path: Path) -> None:
    auth = tmp_path / "auth.json"
    auth.write_text("[]", encoding="utf-8")

    assert codex_uses_chatgpt_auth(auth) is False


def test_codex_uses_chatgpt_auth_false_for_empty_object(tmp_path: Path) -> None:
    auth = tmp_path / "auth.json"
    auth.write_text("{}", encoding="utf-8")

    assert codex_uses_chatgpt_auth(auth) is False


def test_codex_provider_section_supports_custom_markers() -> None:
    section = build_provider_section(
        port=9100,
        name="Headroom init proxy",
        marker_start="# --- start ---",
        marker_end="# --- end ---",
    )

    assert section.startswith("# --- start ---\n")
    assert section.endswith("# --- end ---\n")
    assert 'base_url = "http://127.0.0.1:9100/v1"' in section
    assert 'env_key = "OPENAI_API_KEY"' not in section