codex/codex-rs/app-server/src/request_processors/config_reload_tests.rs

//! Regressions for reload entry points composing the final thread configuration.

use super::config_processor::reload_user_config;
use crate::config_manager::ConfigManager;
use crate::mcp_refresh::reload_mcp_config;
use codex_config::types::AuthKeyringBackendKind;
use codex_core::config::ConfigOverrides;
use codex_exec_server::EnvironmentManager;
use codex_login::CodexAuth;
use pretty_assertions::assert_eq;
use serde_json::json;
use std::collections::HashMap;
use std::sync::Arc;

#[tokio::test]
async fn reloads_accept_a_provider_supplied_by_thread_overrides() -> anyhow::Result<()> {
    let home = tempfile::tempdir()?;
    let manager = ConfigManager::without_managed_config_for_tests(home.path().to_path_buf());
    let initial = manager
        .load_for_cwd(
            Some(HashMap::from([
                ("model_provider".to_string(), json!("thread-provider")),
                (
                    "model_providers.thread-provider".to_string(),
                    json!({"name": "Thread provider", "base_url": "https://provider.example/v1", "wire_api": "responses"}),
                ),
            ])),
            ConfigOverrides::default(),
            Some(home.path().to_path_buf()),
        )
        .await?;
    let threads = Arc::new(
        codex_core::test_support::thread_manager_with_models_provider_and_home(
            CodexAuth::from_api_key("dummy"),
            initial.model_provider.clone(),
            initial.codex_home.to_path_buf(),
            Arc::new(EnvironmentManager::default_for_tests()),
        ),
    );
    let thread = threads
        .start_thread(codex_core::StartThreadOptions::new(initial))
        .await?
        .thread;

    for enabled in [true, false] {
        std::fs::write(
            home.path().join(codex_config::CONFIG_TOML_FILE),
            format!(
                "model_provider = 'missing-provider'\n[features]\nsecret_auth_storage = {enabled}\n"
            ),
        )?;
        if enabled {
            reload_mcp_config(&threads, &manager).await?;
        } else {
            reload_user_config(&manager, &threads).await;
        }
        let config = thread.config().await;
        assert_eq!(config.model_provider_id, "thread-provider");
        assert_eq!(
            config.auth_keyring_backend_kind(),
            if enabled {
                AuthKeyringBackendKind::Secrets
            } else {
                AuthKeyringBackendKind::Direct
            }
        );
    }
    Ok(())
}

#[tokio::test]
async fn user_reload_promotes_plugin_and_feature_requirements_without_server_changes()
-> anyhow::Result<()> {
    let home = tempfile::tempdir()?;
    let requirements_path = home.path().join("requirements.toml");
    std::fs::write(&requirements_path, "")?;
    std::fs::write(
        home.path().join(codex_config::CONFIG_TOML_FILE),
        "[features]\nenable_mcp_apps = true\n",
    )?;
    let mut overrides = codex_config::LoaderOverrides::without_managed_config_for_tests();
    overrides.ignore_managed_requirements = false;
    overrides.system_requirements_path = Some(requirements_path.clone());
    let manager = ConfigManager::new(
        home.path().to_path_buf(),
        Vec::new(),
        overrides,
        /*strict_config*/ false,
        codex_config::CloudConfigBundleLoader::default(),
        codex_arg0::Arg0DispatchPaths::default(),
        Arc::new(codex_config::NoopThreadConfigLoader),
    );
    let initial = manager
        .load_latest_config(Some(home.path().to_path_buf()))
        .await?;
    let threads = Arc::new(
        codex_core::test_support::thread_manager_with_models_provider_and_home(
            CodexAuth::from_api_key("dummy"),
            initial.model_provider.clone(),
            initial.codex_home.to_path_buf(),
            Arc::new(EnvironmentManager::default_for_tests()),
        ),
    );
    assert!(
        initial
            .features
            .enabled(codex_features::Feature::EnableMcpApps)
    );
    let original_servers = initial.mcp_servers.get().clone();
    let thread = threads
        .start_thread(codex_core::StartThreadOptions::new(initial))
        .await?
        .thread;
    std::fs::write(
        &requirements_path,
        "[features]\nenable_mcp_apps = false\n[plugins.example.mcp_servers]\n",
    )?;
    tokio::time::timeout(
        std::time::Duration::from_secs(10),
        reload_user_config(&manager, &threads),
    )
    .await
    .expect("policy promotion must terminate");
    let config = thread.config().await;
    assert_eq!(config.mcp_servers.get(), &original_servers);
    assert!(
        !config
            .features
            .enabled(codex_features::Feature::EnableMcpApps)
    );
    assert!(
        config
            .config_layer_stack
            .requirements()
            .plugins
            .as_ref()
            .unwrap()
            .value
            .get("example")
            .unwrap()
            .mcp_servers
            .as_ref()
            .unwrap()
            .is_empty()
    );
    assert!(
        config
            .config_layer_stack
            .requirements()
            .feature_requirements
            .is_some()
    );
    Ok(())
}

#[test_case::test_case(codex_config::CloudConfigBundleBindingStatus::Stale)]
#[test_case::test_case(codex_config::CloudConfigBundleBindingStatus::Suspended)]
#[tokio::test]
async fn mcp_refresh_rejects_superseded_app_server_policy(
    status: codex_config::CloudConfigBundleBindingStatus,
) -> anyhow::Result<()> {
    use codex_config::CloudConfigBundle;
    use codex_config::CloudConfigBundleLoader;
    use codex_config::CloudConfigBundlePolicy;
    use codex_config::CloudConfigBundleSnapshot;
    use codex_core::ConfigRefreshOutcome;

    let home = tempfile::tempdir()?;
    let policy = CloudConfigBundlePolicy::default();
    let mut snapshot = CloudConfigBundleSnapshot {
        bundle: Ok(None),
        binding: None,
    };
    policy.publish_snapshot(&mut snapshot);
    let loader =
        CloudConfigBundleLoader::default().with_ema_policy_snapshots(policy.clone(), move || {
            let snapshot = snapshot.clone();
            async move { snapshot }
        });
    let manager = ConfigManager::new(
        home.path().to_path_buf(),
        Vec::new(),
        codex_config::LoaderOverrides::without_managed_config_for_tests(),
        /*strict_config*/ false,
        loader,
        codex_arg0::Arg0DispatchPaths::default(),
        Arc::new(codex_config::NoopThreadConfigLoader),
    );
    let initial = manager
        .load_latest_config(Some(home.path().to_path_buf()))
        .await?;
    let threads = codex_core::test_support::thread_manager_with_models_provider_and_home(
        CodexAuth::from_api_key("dummy"),
        initial.model_provider.clone(),
        initial.codex_home.to_path_buf(),
        Arc::new(EnvironmentManager::default_for_tests()),
    );
    let thread = threads
        .start_thread(codex_core::StartThreadOptions::new(initial))
        .await?
        .thread;
    let current = thread.config().await;
    let next = manager
        .load_latest_config_with_session_layers(&current.config_layer_stack, &current.cwd)
        .await?;
    let mut replacement = CloudConfigBundle::default();
    replacement
        .config_toml
        .enterprise_managed
        .push(codex_config::CloudConfigFragment {
            id: "replacement".into(),
            name: "replacement".into(),
            contents: "model = 'replacement-model'".into(),
        });
    policy.observe_remote_bundle(&replacement);
    if status == codex_config::CloudConfigBundleBindingStatus::Stale {
        policy.publish_snapshot(&mut CloudConfigBundleSnapshot {
            bundle: Ok(Some(replacement)),
            binding: None,
        });
    }
    assert_eq!(
        next.config_layer_stack
            .cloud_config_binding()
            .expect("app-server must retain the policy binding")
            .read()
            .status,
        status,
    );
    let outcome = thread.refresh_mcp_config(Arc::clone(&current), next).await;
    let expected = match status {
        codex_config::CloudConfigBundleBindingStatus::Stale => ConfigRefreshOutcome::Stale,
        codex_config::CloudConfigBundleBindingStatus::Suspended => ConfigRefreshOutcome::Rejected,
        codex_config::CloudConfigBundleBindingStatus::Current => unreachable!(),
    };
    assert_eq!(outcome, expected);
    if status == codex_config::CloudConfigBundleBindingStatus::Stale {
        assert!(Arc::ptr_eq(&current, &thread.config().await));
    } else {
        assert!(
            thread
                .config()
                .await
                .config_layer_stack
                .cloud_config_binding()
                .is_none()
        );
    }
    Ok(())
}