@vellumai/assistant 0.10.8 → 0.10.9-dev.202607152225.ec6fdbf

package/src/__tests__/managed-profile-guard.test.ts

@@ -15,25 +15,53 @@
  * config reads: PATCH/SET strip them so a GET → write round-trip succeeds.
  */
 
+import { readFileSync, utimesSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
 import { beforeEach, describe, expect, mock, test } from "bun:test";
 
-// Imported before the `mock.module` below so the mock can pass the real
-// implementation through instead of hand-copying it.
-import { setNestedValue } from "../config/loader.js";
-import { makeMockLogger } from "./helpers/mock-logger.js";
-
-mock.module("../util/logger.js", () => ({
-  getLogger: () => makeMockLogger(),
-}));
-
-let savedRaw: Record<string, unknown> | null = null;
+// The config routes under test read and write the workspace config.json via
+// the real loader (`loadRawConfig`/`saveRawConfig`). Tests seed the raw file
+// directly (the fixtures are raw-file shapes, not schema-parsed configs, so
+// the whole file is replaced rather than composed via `setConfig`) and detect
+// commits by comparing the on-disk text against the seeded snapshot —
+// `saveRawConfig` pretty-prints, so any commit (even a content no-op) changes
+// the text.
 let rawConfig: Record<string, unknown>;
-// Counters so tests can assert whether `commitConfigWrite` ran its post-write
-// side effects: rejected writes must leave both at 0, allowed writes bump
-// each exactly once.
-let invalidateConfigCacheCalls = 0;
+let seededRawText = "";
+let mtimeSeq = 0;
+// Counter so tests can assert whether `commitConfigWrite` ran its post-write
+// side effects: rejected writes must leave it at 0, allowed writes bump it
+// exactly once.
 let initializeProvidersCalls = 0;
 
+function configJsonPath(): string {
+  return join(process.env.VELLUM_WORKSPACE_DIR!, "config.json");
+}
+
+/**
+ * Write `raw` to the workspace config.json as the seeded pre-test state.
+ * Also called after in-place mutations of `rawConfig` to flush them to disk.
+ */
+function seedRawConfig(raw: Record<string, unknown>): void {
+  rawConfig = raw;
+  seededRawText = JSON.stringify(raw);
+  writeFileSync(configJsonPath(), seededRawText);
+  // Distinct mtime per write so the loader's file-signature cache can never
+  // read two consecutive seeds as identical.
+  mtimeSeq += 1;
+  const stamp = new Date(Date.now() + mtimeSeq);
+  utimesSync(configJsonPath(), stamp, stamp);
+}
+
+/** The raw config a route commit persisted, or null when nothing was saved. */
+function committedRaw(): Record<string, unknown> | null {
+  const text = readFileSync(configJsonPath(), "utf8");
+  if (text === seededRawText) {
+    return null;
+  }
+  return JSON.parse(text) as Record<string, unknown>;
+}
+
 function makeDefaultRawConfig(): Record<string, unknown> {
   return {
     llm: {
@@ -59,50 +87,6 @@ function makeDefaultRawConfig(): Record<string, unknown> {
   };
 }
 
-function deepMergeForTest(
-  target: Record<string, unknown>,
-  overrides: Record<string, unknown>,
-): void {
-  for (const [key, value] of Object.entries(overrides)) {
-    if (
-      value !== null &&
-      typeof value === "object" &&
-      !Array.isArray(value) &&
-      target[key] !== null &&
-      typeof target[key] === "object" &&
-      !Array.isArray(target[key])
-    ) {
-      deepMergeForTest(
-        target[key] as Record<string, unknown>,
-        value as Record<string, unknown>,
-      );
-      continue;
-    }
-    target[key] = value;
-  }
-}
-
-mock.module("../config/loader.js", () => ({
-  loadRawConfig: () => structuredClone(rawConfig),
-  saveRawConfig: (raw: Record<string, unknown>) => {
-    savedRaw = raw;
-  },
-  deepMergeOverwrite: (
-    target: Record<string, unknown>,
-    overrides: Record<string, unknown>,
-  ) => {
-    deepMergeForTest(target, overrides);
-  },
-  getConfig: () => rawConfig,
-  getDeploymentContextDefaults: () => ({}),
-  invalidateConfigCache: () => {
-    invalidateConfigCacheCalls += 1;
-  },
-  setNestedValue,
-  withSuppressedConfigDiskWrites: async (fn: () => unknown) => fn(),
-  withSuppressedConfigDiskWritesSync: (fn: () => unknown) => fn(),
-}));
-
 mock.module("../providers/registry.js", () => ({
   initializeProviders: async () => {
     initializeProvidersCalls += 1;
@@ -136,26 +120,22 @@ const patchRoute = ROUTES.find((r) => r.operationId === "config_patch")!;
 const setRoute = ROUTES.find((r) => r.operationId === "config_set")!;
 
 beforeEach(() => {
-  rawConfig = makeDefaultRawConfig();
-  savedRaw = null;
-  invalidateConfigCacheCalls = 0;
+  seedRawConfig(makeDefaultRawConfig());
   initializeProvidersCalls = 0;
 });
 
 function expectNothingCommitted(): void {
-  expect(savedRaw).toBeNull();
+  expect(committedRaw()).toBeNull();
   expect(initializeProvidersCalls).toBe(0);
-  expect(invalidateConfigCacheCalls).toBe(0);
 }
 
 function expectOneCommitCycle(): void {
-  expect(savedRaw).not.toBeNull();
+  expect(committedRaw()).not.toBeNull();
   expect(initializeProvidersCalls).toBe(1);
-  expect(invalidateConfigCacheCalls).toBe(1);
 }
 
 function savedProfile(name: string): Record<string, unknown> {
-  return (savedRaw as Record<string, any>).llm.profiles[name] as Record<
+  return (committedRaw() as Record<string, any>).llm.profiles[name] as Record<
     string,
     unknown
   >;
@@ -198,23 +178,21 @@ describe("PUT /v1/config/llm/profiles/:name — managed profile guard", () => {
   });
 
   test("allows edits to custom-balanced (user-owned)", async () => {
-    savedRaw = null;
     const result = await replaceRoute.handler({
       pathParams: { name: "custom-balanced" },
       body: { provider: "openai", model: "gpt-4o" },
     });
     expect(result).toEqual({ ok: true });
-    expect(savedRaw).not.toBeNull();
+    expect(committedRaw()).not.toBeNull();
   });
 
   test("allows edits to a user-defined profile", async () => {
-    savedRaw = null;
     const result = await replaceRoute.handler({
       pathParams: { name: "my-custom" },
       body: { provider: "openai", model: "gpt-4o" },
     });
     expect(result).toEqual({ ok: true });
-    expect(savedRaw).not.toBeNull();
+    expect(committedRaw()).not.toBeNull();
   });
 
   // -------------------------------------------------------------------------
@@ -227,8 +205,7 @@ describe("PUT /v1/config/llm/profiles/:name — managed profile guard", () => {
   // -------------------------------------------------------------------------
 
   test("PUT { label: null } on a managed profile is rejected (label is frozen)", async () => {
-    savedRaw = null;
-    rawConfig = {
+    seedRawConfig({
       llm: {
         profiles: {
           balanced: {
@@ -239,7 +216,7 @@ describe("PUT /v1/config/llm/profiles/:name — managed profile guard", () => {
           },
         },
       },
-    };
+    });
     await expect(
       replaceRoute.handler({
         pathParams: { name: "balanced" },
@@ -250,8 +227,7 @@ describe("PUT /v1/config/llm/profiles/:name — managed profile guard", () => {
   });
 
   test("PUT { status: null } on managed profile clears status (back to active-by-absence)", async () => {
-    savedRaw = null;
-    rawConfig = {
+    seedRawConfig({
       llm: {
         profiles: {
           "quality-optimized": {
@@ -262,22 +238,20 @@ describe("PUT /v1/config/llm/profiles/:name — managed profile guard", () => {
           },
         },
       },
-    };
+    });
     const result = await replaceRoute.handler({
       pathParams: { name: "quality-optimized" },
       body: { status: null },
     });
     expect(result).toEqual({ ok: true });
-    const profile = (savedRaw as unknown as Record<string, any>)?.llm
-      ?.profiles?.["quality-optimized"] as Record<string, unknown>;
+    const profile = savedProfile("quality-optimized");
     expect("status" in profile).toBe(false);
     expect(profile.provider).toBe("anthropic");
     expect(profile.model).toBe("claude-opus");
   });
 
   test("PUT { label: null, status: null } on managed os-beta is rejected (label is frozen)", async () => {
-    savedRaw = null;
-    rawConfig = {
+    seedRawConfig({
       llm: {
         profiles: {
           "os-beta": {
@@ -289,7 +263,7 @@ describe("PUT /v1/config/llm/profiles/:name — managed profile guard", () => {
           },
         },
       },
-    };
+    });
     // The status clear alone is the re-enable direction and would pass, but
     // the label clear touches a frozen field so the whole write is rejected.
     await expect(
@@ -302,8 +276,7 @@ describe("PUT /v1/config/llm/profiles/:name — managed profile guard", () => {
   });
 
   test("PUT { status: 'disabled' } on managed os-beta is rejected (read-only)", async () => {
-    savedRaw = null;
-    rawConfig = {
+    seedRawConfig({
       llm: {
         profiles: {
           "os-beta": {
@@ -314,7 +287,7 @@ describe("PUT /v1/config/llm/profiles/:name — managed profile guard", () => {
           },
         },
       },
-    };
+    });
     await expect(
       replaceRoute.handler({
         pathParams: { name: "os-beta" },
@@ -327,8 +300,7 @@ describe("PUT /v1/config/llm/profiles/:name — managed profile guard", () => {
   });
 
   test("PUT { topP } on managed os-beta is rejected (topP is frozen)", async () => {
-    savedRaw = null;
-    rawConfig = {
+    seedRawConfig({
       llm: {
         profiles: {
           "os-beta": {
@@ -338,7 +310,7 @@ describe("PUT /v1/config/llm/profiles/:name — managed profile guard", () => {
           },
         },
       },
-    };
+    });
     await expect(
       replaceRoute.handler({
         pathParams: { name: "os-beta" },
@@ -349,8 +321,7 @@ describe("PUT /v1/config/llm/profiles/:name — managed profile guard", () => {
   });
 
   test("PUT { topP: null } on managed os-beta is rejected (frozen even when clearing)", async () => {
-    savedRaw = null;
-    rawConfig = {
+    seedRawConfig({
       llm: {
         profiles: {
           "os-beta": {
@@ -361,7 +332,7 @@ describe("PUT /v1/config/llm/profiles/:name — managed profile guard", () => {
           },
         },
       },
-    };
+    });
     await expect(
       replaceRoute.handler({
         pathParams: { name: "os-beta" },
@@ -372,8 +343,7 @@ describe("PUT /v1/config/llm/profiles/:name — managed profile guard", () => {
   });
 
   test("PUT { status: 'active' } re-enables a disabled managed os-beta profile", async () => {
-    savedRaw = null;
-    rawConfig = {
+    seedRawConfig({
       llm: {
         profiles: {
           "os-beta": {
@@ -384,7 +354,7 @@ describe("PUT /v1/config/llm/profiles/:name — managed profile guard", () => {
           },
         },
       },
-    };
+    });
     const result = await replaceRoute.handler({
       pathParams: { name: "os-beta" },
       body: { status: "active" },
@@ -398,8 +368,7 @@ describe("PUT /v1/config/llm/profiles/:name — managed profile guard", () => {
   });
 
   test("allows edits to a user-owned profile sharing a managed name (os-beta)", async () => {
-    savedRaw = null;
-    rawConfig = {
+    seedRawConfig({
       llm: {
         profiles: {
           "os-beta": {
@@ -409,20 +378,19 @@ describe("PUT /v1/config/llm/profiles/:name — managed profile guard", () => {
           },
         },
       },
-    };
+    });
     const result = await replaceRoute.handler({
       pathParams: { name: "os-beta" },
       body: { provider: "openai", model: "gpt-4o" },
     });
     expect(result).toEqual({ ok: true });
-    const profile = (savedRaw as unknown as Record<string, any>)?.llm
-      ?.profiles?.["os-beta"] as Record<string, unknown>;
+    const profile = savedProfile("os-beta");
     expect(profile.provider).toBe("openai");
     expect(profile.model).toBe("gpt-4o");
   });
 
   test("rejects edits to a managed os-beta profile", async () => {
-    rawConfig = {
+    seedRawConfig({
       llm: {
         profiles: {
           "os-beta": {
@@ -432,7 +400,7 @@ describe("PUT /v1/config/llm/profiles/:name — managed profile guard", () => {
           },
         },
       },
-    };
+    });
     await expect(
       replaceRoute.handler({
         pathParams: { name: "os-beta" },
@@ -442,18 +410,19 @@ describe("PUT /v1/config/llm/profiles/:name — managed profile guard", () => {
   });
 
   test("rejects PUT to os-beta when no os-beta profile exists, writing no stub", async () => {
-    savedRaw = null;
-    rawConfig = { llm: { profiles: {} } };
+    seedRawConfig({ llm: { profiles: {} } });
     await expect(
       replaceRoute.handler({
         pathParams: { name: "os-beta" },
         body: { label: "My OS Beta" },
       }),
     ).rejects.toThrow("not currently available");
-    expect(savedRaw).toBeNull();
-    expect(
-      (rawConfig as Record<string, any>)?.llm?.profiles?.["os-beta"],
-    ).toBeUndefined();
+    expect(committedRaw()).toBeNull();
+    const onDisk = JSON.parse(readFileSync(configJsonPath(), "utf8")) as Record<
+      string,
+      any
+    >;
+    expect(onDisk?.llm?.profiles?.["os-beta"]).toBeUndefined();
   });
 
   test("PUT { label: '' } on managed profile still rejected by `.min(1)`", async () => {
@@ -500,7 +469,6 @@ describe("PATCH /v1/config — managed profile deletion guard", () => {
   });
 
   test("allows deletion of custom-balanced via null (user-owned)", async () => {
-    savedRaw = null;
     const result = await patchRoute.handler({
       body: { llm: { profiles: { "custom-balanced": null } } },
     });
@@ -508,7 +476,6 @@ describe("PATCH /v1/config — managed profile deletion guard", () => {
   });
 
   test("allows deletion of a user-defined profile via null", async () => {
-    savedRaw = null;
     const result = await patchRoute.handler({
       body: { llm: { profiles: { "my-custom": null } } },
     });
@@ -523,12 +490,12 @@ describe("PATCH /v1/config — managed profile deletion guard", () => {
   });
 
   test("clears stale Velay ownership when manually patching public base URL", async () => {
-    rawConfig = {
+    seedRawConfig({
       ingress: {
         publicBaseUrl: "https://stale-velay.example.test",
         publicBaseUrlManagedBy: "velay",
       },
-    };
+    });
 
     const result = await patchRoute.handler({
       body: {
@@ -537,7 +504,7 @@ describe("PATCH /v1/config — managed profile deletion guard", () => {
     });
 
     expect(result).toHaveProperty("ingress");
-    expect(savedRaw).toEqual({
+    expect(committedRaw()).toEqual({
       ingress: {
         publicBaseUrl: "https://manual.example.test",
         publicBaseUrlManagedBy: "velay",
@@ -546,7 +513,6 @@ describe("PATCH /v1/config — managed profile deletion guard", () => {
   });
 
   test("allows patches that modify a managed profile (non-null)", async () => {
-    savedRaw = null;
     const result = await patchRoute.handler({
       body: {
         llm: {
@@ -558,8 +524,7 @@ describe("PATCH /v1/config — managed profile deletion guard", () => {
   });
 
   test("allows deletion of a user-owned profile sharing a managed name (os-beta)", async () => {
-    savedRaw = null;
-    rawConfig = {
+    seedRawConfig({
       llm: {
         profiles: {
           "os-beta": {
@@ -569,7 +534,7 @@ describe("PATCH /v1/config — managed profile deletion guard", () => {
           },
         },
       },
-    };
+    });
     const result = await patchRoute.handler({
       body: { llm: { profiles: { "os-beta": null } } },
     });
@@ -577,7 +542,7 @@ describe("PATCH /v1/config — managed profile deletion guard", () => {
   });
 
   test("rejects deletion of a managed os-beta profile", async () => {
-    rawConfig = {
+    seedRawConfig({
       llm: {
         profiles: {
           "os-beta": {
@@ -587,7 +552,7 @@ describe("PATCH /v1/config — managed profile deletion guard", () => {
           },
         },
       },
-    };
+    });
     await expect(
       patchRoute.handler({
         body: { llm: { profiles: { "os-beta": null } } },
@@ -639,6 +604,7 @@ describe("managed-profile invariant guard — rejected writes", () => {
 
   test("PATCH { label: null } on balanced is rejected when a label exists", async () => {
     (rawConfig as Record<string, any>).llm.profiles.balanced.label = "Balanced";
+    seedRawConfig(rawConfig);
     await expect(
       patchRoute.handler({
         body: { llm: { profiles: { balanced: { label: null } } } },
@@ -658,6 +624,7 @@ describe("managed-profile invariant guard — rejected writes", () => {
 
   test("PATCH { topP: null } on balanced is rejected when an on-disk override exists", async () => {
     (rawConfig as Record<string, any>).llm.profiles.balanced.topP = 0.7;
+    seedRawConfig(rawConfig);
     await expect(
       patchRoute.handler({
         body: { llm: { profiles: { balanced: { topP: null } } } },
@@ -672,6 +639,7 @@ describe("managed-profile invariant guard — rejected writes", () => {
       model: "zai-org/GLM-5.2",
       source: "managed",
     };
+    seedRawConfig(rawConfig);
     await expect(
       patchRoute.handler({
         body: { llm: { profiles: { "os-beta": { status: "disabled" } } } },
@@ -686,6 +654,7 @@ describe("managed-profile invariant guard — rejected writes", () => {
       model: "zai-org/GLM-5.2",
       source: "managed",
     };
+    seedRawConfig(rawConfig);
     await expect(
       setRoute.handler({
         body: { path: "llm.profiles.os-beta.label", value: "My OS Beta" },
@@ -770,6 +739,7 @@ describe("default-profile invariant guard — allowed writes", () => {
   test("PATCH re-enables a disabled managed profile (BYOK re-enable)", async () => {
     (rawConfig as Record<string, any>).llm.profiles.balanced.status =
       "disabled";
+    seedRawConfig(rawConfig);
     const result = await patchRoute.handler({
       body: { llm: { profiles: { balanced: { status: "active" } } } },
     });
@@ -781,6 +751,7 @@ describe("default-profile invariant guard — allowed writes", () => {
   test("PATCH { status: null } clears a disabled default back to active-by-absence", async () => {
     (rawConfig as Record<string, any>).llm.profiles.balanced.status =
       "disabled";
+    seedRawConfig(rawConfig);
     const result = await patchRoute.handler({
       body: { llm: { profiles: { balanced: { status: null } } } },
     });
@@ -792,6 +763,7 @@ describe("default-profile invariant guard — allowed writes", () => {
   test("PUT { status: 'active' } re-enables a disabled managed profile", async () => {
     (rawConfig as Record<string, any>).llm.profiles.balanced.status =
       "disabled";
+    seedRawConfig(rawConfig);
     const result = await replaceRoute.handler({
       pathParams: { name: "balanced" },
       body: { status: "active" },
@@ -804,6 +776,7 @@ describe("default-profile invariant guard — allowed writes", () => {
   test("SET llm.profiles.balanced.status = 'active' re-enables a disabled managed profile", async () => {
     (rawConfig as Record<string, any>).llm.profiles.balanced.status =
       "disabled";
+    seedRawConfig(rawConfig);
     const result = await setRoute.handler({
       body: { path: "llm.profiles.balanced.status", value: "active" },
     });
@@ -814,6 +787,7 @@ describe("default-profile invariant guard — allowed writes", () => {
 
   test("SET llm passes when the value carries the invariant profiles unchanged (incl. frozen topP override)", async () => {
     (rawConfig as Record<string, any>).llm.profiles.balanced.topP = 0.7;
+    seedRawConfig(rawConfig);
     const nextLlm = structuredClone(
       (rawConfig as Record<string, any>).llm,
     ) as Record<string, unknown>;
@@ -825,7 +799,7 @@ describe("default-profile invariant guard — allowed writes", () => {
     expectOneCommitCycle();
     // The pre-existing topP override survives untouched.
     expect(savedProfile("balanced").topP).toBe(0.7);
-    expect((savedRaw as Record<string, any>).llm.activeProfile).toBe(
+    expect((committedRaw() as Record<string, any>).llm.activeProfile).toBe(
       "my-custom",
     );
   });
@@ -835,6 +809,7 @@ describe("default-profile invariant guard — allowed writes", () => {
     // invariant guard — both key on the on-disk entry's managed source, so
     // a user-owned profile sharing a managed name stays deletable.
     (rawConfig as Record<string, any>).llm.profiles.balanced.source = "user";
+    seedRawConfig(rawConfig);
     const result = await patchRoute.handler({
       body: { llm: { profiles: { balanced: null } } },
     });
@@ -848,6 +823,7 @@ describe("default-profile invariant guard — allowed writes", () => {
       model: "claude-sonnet",
       source: "user",
     };
+    seedRawConfig(rawConfig);
     const result = await replaceRoute.handler({
       pathParams: { name: "os-beta" },
       body: { provider: "openai", model: "gpt-4o", topP: 0.5 },
@@ -879,7 +855,9 @@ describe("default-profile invariant guard — allowed writes", () => {
     });
     expect(result).toHaveProperty("llm");
     expectOneCommitCycle();
-    expect((savedRaw as Record<string, any>).llm.activeProfile).toBe("custom");
+    expect((committedRaw() as Record<string, any>).llm.activeProfile).toBe(
+      "custom",
+    );
     // The invariant profiles are untouched by an unrelated llm write.
     expect(savedProfile("balanced")).toEqual(
       (makeDefaultRawConfig() as Record<string, any>).llm.profiles.balanced,
@@ -898,6 +876,7 @@ describe("wire-only profile keys are stripped from writes", () => {
   test("PATCH re-enable carrying wire keys succeeds and persists neither key", async () => {
     (rawConfig as Record<string, any>).llm.profiles.balanced.status =
       "disabled";
+    seedRawConfig(rawConfig);
     const result = await patchRoute.handler({
       body: {
         llm: {
@@ -957,6 +936,7 @@ describe("wire-only profile keys are stripped from writes", () => {
     const balanced = (rawConfig as Record<string, any>).llm.profiles.balanced;
     balanced.supportsVision = true; // stale pre-strip persistence
     balanced.status = "disabled";
+    seedRawConfig(rawConfig);
     const entry = structuredClone(balanced) as Record<string, unknown>;
     entry.invariant = true; // wire stamp from GET
     entry.status = "active"; // legal re-enable
@@ -976,6 +956,7 @@ describe("wire-only profile keys are stripped from writes", () => {
   test("pure no-op SET round-trip with stale on-disk supportsVision succeeds", async () => {
     const balanced = (rawConfig as Record<string, any>).llm.profiles.balanced;
     balanced.supportsVision = true; // stale pre-strip persistence
+    seedRawConfig(rawConfig);
     const entry = structuredClone(balanced) as Record<string, unknown>;
     entry.invariant = true; // wire stamp from GET
     const result = await setRoute.handler({
@@ -994,6 +975,7 @@ describe("wire-only profile keys are stripped from writes", () => {
     const balanced = (rawConfig as Record<string, any>).llm.profiles.balanced;
     balanced.supportsVision = true; // stale pre-strip persistence
     balanced.status = "disabled";
+    seedRawConfig(rawConfig);
     const result = await patchRoute.handler({
       body: {
         llm: {
@@ -1041,11 +1023,11 @@ const getRoute = ROUTES.find((r) => r.operationId === "config_get")!;
 
 describe("code-owned default profiles — wire view and write normalization", () => {
   test("GET materializes catalog bodies over thin stubs (wire-only)", async () => {
-    rawConfig = {
+    seedRawConfig({
       llm: {
         profiles: { balanced: { source: "managed", status: "disabled" } },
       },
-    };
+    });
     const response = (await getRoute.handler({})) as Record<string, any>;
     const wireBalanced = response.llm.profiles.balanced;
     expect(wireBalanced.model).toBe("accounts/fireworks/models/glm-5p2");
@@ -1057,14 +1039,14 @@ describe("code-owned default profiles — wire view and write normalization", ()
   });
 
   test("GET → PATCH round-trip of the wire view is accepted and keeps disk stubs thin", async () => {
-    rawConfig = {
+    seedRawConfig({
       llm: {
         profiles: {
           balanced: { source: "managed", status: "disabled" },
           "my-custom": { provider: "openai", model: "gpt-4o", source: "user" },
         },
       },
-    };
+    });
     const response = (await getRoute.handler({})) as Record<string, any>;
     const result = await patchRoute.handler({
       body: { llm: { profiles: response.llm.profiles } },
@@ -1085,7 +1067,7 @@ describe("code-owned default profiles — wire view and write normalization", ()
   });
 
   test("creating a new profile under a default name is rejected", async () => {
-    rawConfig = { llm: { profiles: {} } };
+    seedRawConfig({ llm: { profiles: {} } });
     await expect(
       patchRoute.handler({
         body: {
@@ -1103,7 +1085,7 @@ describe("code-owned default profiles — wire view and write normalization", ()
   });
 
   test("writing content to an absent default name is rejected", async () => {
-    rawConfig = { llm: { profiles: {} } };
+    seedRawConfig({ llm: { profiles: {} } });
     await expect(
       patchRoute.handler({
         body: {
@@ -1121,7 +1103,7 @@ describe("code-owned default profiles — wire view and write normalization", ()
   });
 
   test("disabling an absent default via a generic write is rejected", async () => {
-    rawConfig = { llm: { profiles: {} } };
+    seedRawConfig({ llm: { profiles: {} } });
     await expect(
       patchRoute.handler({
         body: {
@@ -1135,7 +1117,7 @@ describe("code-owned default profiles — wire view and write normalization", ()
   });
 
   test("PUT status re-enable on an absent always-available default creates a thin managed stub", async () => {
-    rawConfig = { llm: { profiles: {} } };
+    seedRawConfig({ llm: { profiles: {} } });
     const result = await replaceRoute.handler({
       pathParams: { name: "balanced" },
       body: { status: "active" },
@@ -1148,7 +1130,7 @@ describe("code-owned default profiles — wire view and write normalization", ()
   });
 
   test("PUT on absent flag-gated os-beta is still rejected", async () => {
-    rawConfig = { llm: { profiles: {} } };
+    seedRawConfig({ llm: { profiles: {} } });
     await expect(
       replaceRoute.handler({
         pathParams: { name: "os-beta" },
@@ -1161,13 +1143,13 @@ describe("code-owned default profiles — wire view and write normalization", ()
   });
 
   test("an existing user-source shadow of a default name stays editable", async () => {
-    rawConfig = {
+    seedRawConfig({
       llm: {
         profiles: {
           balanced: { source: "user", provider: "openai", model: "gpt-4o" },
         },
       },
-    };
+    });
     const result = await patchRoute.handler({
       body: { llm: { profiles: { balanced: { model: "gpt-5.4" } } } },
     });
@@ -1179,7 +1161,7 @@ describe("code-owned default profiles — wire view and write normalization", ()
 
 describe("code-owned default profiles — leaf SET source stamping", () => {
   test("a leaf SET creating a managed entry stamps the managed marker", async () => {
-    rawConfig = { llm: { profiles: {} } };
+    seedRawConfig({ llm: { profiles: {} } });
     const result = await setRoute.handler({
       body: { path: "llm.profiles.balanced.status", value: "active" },
     });
@@ -1191,13 +1173,13 @@ describe("code-owned default profiles — leaf SET source stamping", () => {
   });
 
   test("a leaf SET on an existing user shadow does not stamp it managed", async () => {
-    rawConfig = {
+    seedRawConfig({
       llm: {
         profiles: {
           balanced: { source: "user", provider: "openai", model: "gpt-4o" },
         },
       },
-    };
+    });
     const result = await setRoute.handler({
       body: { path: "llm.profiles.balanced.model", value: "gpt-5.4" },
     });
@@ -1213,7 +1195,7 @@ describe("code-owned default profiles — leaf SET source stamping", () => {
   });
 
   test("a leaf SET writing content to an absent default is rejected", async () => {
-    rawConfig = { llm: { profiles: {} } };
+    seedRawConfig({ llm: { profiles: {} } });
     await expect(
       setRoute.handler({
         body: { path: "llm.profiles.balanced.model", value: "gpt-4o" },
@@ -1236,7 +1218,9 @@ describe("code-owned default profiles — echoes over stale on-disk bodies", ()
   };
 
   test("GET → PATCH round-trip over a stale managed body is accepted and changes nothing", async () => {
-    rawConfig = { llm: { profiles: { balanced: structuredClone(staleBody) } } };
+    seedRawConfig({
+      llm: { profiles: { balanced: structuredClone(staleBody) } },
+    });
     const response = (await getRoute.handler({})) as Record<string, any>;
     // The wire view serves catalog content, not the stale body.
     expect(response.llm.profiles.balanced.model).toBe(
@@ -1251,7 +1235,9 @@ describe("code-owned default profiles — echoes over stale on-disk bodies", ()
   });
 
   test("GET → SET llm round-trip over a stale managed body is accepted and changes nothing", async () => {
-    rawConfig = { llm: { profiles: { balanced: structuredClone(staleBody) } } };
+    seedRawConfig({
+      llm: { profiles: { balanced: structuredClone(staleBody) } },
+    });
     const response = (await getRoute.handler({})) as Record<string, any>;
     const result = await setRoute.handler({
       body: { path: "llm.profiles", value: response.llm.profiles },
@@ -1261,7 +1247,9 @@ describe("code-owned default profiles — echoes over stale on-disk bodies", ()
   });
 
   test("a genuine content edit over a stale managed body is still rejected", async () => {
-    rawConfig = { llm: { profiles: { balanced: structuredClone(staleBody) } } };
+    seedRawConfig({
+      llm: { profiles: { balanced: structuredClone(staleBody) } },
+    });
     await expect(
       patchRoute.handler({
         body: {