pennyrouter 0.2.9 → 0.2.10

package/src/harnesses/codex.js

@@ -1,180 +1,180 @@
-import { spawnSync } from "node:child_process";
-import { atomicWrite, backupFile, compactHome, exists, expandHome, readJsonFile, readText } from "../state.js";
-
-const CONFIG_PATH = "~/.codex/config.toml";
-const AUTH_PATH = "~/.codex/auth.json";
-const PROVIDER_ID = "pennyrouter";
-const MANAGED_START = "# --- PennyRouter managed Codex provider ---";
-const MANAGED_END = "# --- end PennyRouter managed Codex provider ---";
-
-export const codexHarness = {
-  id: "codex",
-  name: "Codex",
-
-  async detect() {
-    return exists(CONFIG_PATH);
-  },
-
-  async planInstall() {
-    return {
-      configPath: expandHome(CONFIG_PATH),
-      summary: [
-        `write ${CONFIG_PATH}`,
-        "install a Responses-native PennyRouter model provider",
-        "preserve Codex-managed ChatGPT login when available",
-        "store the PennyRouter API key without printing it",
-      ],
-    };
-  },
-
-  async install({ apiKey, gatewayBaseUrl, plan, existingRecord }) {
-    const current = await readText(CONFIG_PATH, "");
-    const subscriptionAuth = await detectCodexChatgptAuth();
-    const previousModelProvider = existingRecord?.previous_model_provider
-      || rootAssignment(removeManagedCodexConfig(current), "model_provider");
-    const backupPath = await backupFile(CONFIG_PATH, "codex");
-    const next = renderCodexConfig(current, {
-      apiKey,
-      gatewayBaseUrl,
-      subscriptionAuth,
-    });
-
-    await atomicWrite(CONFIG_PATH, next);
-
-    return {
-      harness: "codex",
-      config_path: compactHome(plan.configPath),
-      backup_path: backupPath ? compactHome(backupPath) : null,
-      installed_at: new Date().toISOString(),
-      restart: "restart Codex",
-      openai_subscription_auth: subscriptionAuth,
-      previous_model_provider: previousModelProvider,
-      changes: {
-        provider: PROVIDER_ID,
-        auth: subscriptionAuth ? "openai-subscription+penny-header" : "penny-bearer",
-      },
-    };
-  },
-
-  async uninstall(record) {
-    const text = await readText(record.config_path, "");
-    const clean = removeManagedCodexConfig(text);
-    const next = record.previous_model_provider
-      ? restoreRootAssignment(clean, record.previous_model_provider)
-      : clean;
-    await atomicWrite(record.config_path, next.endsWith("\n") ? next : `${next}\n`);
-  },
-};
-
-/**
- * ChatGPT login remains owned by Codex. We inspect only the non-secret auth mode/account
- * presence and never copy, print, or persist the access/refresh tokens from auth.json.
- */
-export function codexUsesChatgptAuth(auth) {
-  if (!auth || typeof auth !== "object") return false;
-  if (String(auth.auth_mode || "").toLowerCase() === "chatgpt") return true;
-  return Boolean(auth.tokens && typeof auth.tokens === "object" && auth.tokens.account_id);
-}
-
-export async function detectCodexChatgptAuth() {
-  const auth = await readJsonFile(AUTH_PATH, null);
-  if (codexUsesChatgptAuth(auth)) return true;
-  // auth.json may be absent when Codex uses the OS keyring. `codex login status` reports
-  // only the login mode and does not expose credentials, so it is the safe fallback.
-  const status = spawnSync("codex", ["login", "status"], {
-    encoding: "utf8",
-    stdio: ["ignore", "pipe", "pipe"],
-  });
-  return status.status === 0 && /logged in using chatgpt/i.test(`${status.stdout}\n${status.stderr}`);
-}
-
-/**
- * Install one marker-fenced provider block immediately before the first TOML table.
- * Root keys appended after a table are scoped into that table by TOML, so model_provider
- * must live here rather than at EOF. This also migrates the old undocumented root-key
- * install (openai_base_url/openai_api_key).
- *
- * In subscription mode Codex owns and refreshes the OpenAI bearer. The independent
- * x-pennyrouter-key header authenticates the account to our gateway. In Penny-only mode
- * the pr- key is the provider bearer, matching the isolated probe's existing behavior.
- */
-export function renderCodexConfig(text, { apiKey, gatewayBaseUrl, subscriptionAuth }) {
-  const clean = removeManagedCodexConfig(text, { removeRootProvider: true }).trimEnd();
-  if (new RegExp(`^\\s*\\[model_providers\\.${escapeRegex(PROVIDER_ID)}\\]\\s*$`, "m").test(clean)) {
-    throw new Error(
-      `Codex already defines [model_providers.${PROVIDER_ID}] outside PennyRouter's managed block. ` +
-      "Rename that provider before installing so PennyRouter does not overwrite user configuration.",
-    );
-  }
-  const escapedKey = tomlString(apiKey);
-  const escapedUrl = tomlString(`${String(gatewayBaseUrl).replace(/\/+$/, "")}/v1`);
-  const authLines = subscriptionAuth
-    ? [
-        "requires_openai_auth = true",
-        `http_headers = { "x-pennyrouter-key" = ${escapedKey} }`,
-      ]
-    : [`experimental_bearer_token = ${escapedKey}`];
-  const block = [
-    MANAGED_START,
-    `model_provider = "${PROVIDER_ID}"`,
-    "",
-    `[model_providers.${PROVIDER_ID}]`,
-    'name = "PennyRouter"',
-    `base_url = ${escapedUrl}`,
-    'wire_api = "responses"',
-    "supports_websockets = false",
-    ...authLines,
-    MANAGED_END,
-  ].join("\n");
-
-  const lines = clean ? clean.split("\n") : [];
-  const firstTable = lines.findIndex((line) => /^\s*\[/.test(line));
-  const at = firstTable < 0 ? lines.length : firstTable;
-  lines.splice(at, 0, ...(at > 0 && lines[at - 1].trim() ? [""] : []), block,
-    ...(at < lines.length && lines[at + 1]?.trim() ? [""] : []));
-  return `${lines.join("\n").replace(/\n{3,}/g, "\n\n").trim()}\n`;
-}
-
-export function removeManagedCodexConfig(text, { removeRootProvider = false } = {}) {
-  let out = String(text || "").replace(
-    new RegExp(`${escapeRegex(MANAGED_START)}[\\s\\S]*?${escapeRegex(MANAGED_END)}\\n?`, "g"),
-    "",
-  );
-  // Migrate/uninstall the legacy PennyRouter Codex writer. These keys are not part of the
-  // documented custom-provider contract and were written only by older PennyRouter releases.
-  out = out
-    .split("\n")
-    .filter((line) => !/^\s*openai_base_url\s*=/.test(line))
-    .filter((line) => !/^\s*openai_api_key\s*=/.test(line))
-    .join("\n");
-  if (removeRootProvider) {
-    const lines = out.split("\n");
-    const firstTable = lines.findIndex((line) => /^\s*\[/.test(line));
-    const rootEnd = firstTable < 0 ? lines.length : firstTable;
-    out = lines.filter((line, i) => i >= rootEnd || !/^\s*model_provider\s*=/.test(line)).join("\n");
-  }
-  return out.replace(/\n{3,}/g, "\n\n").trim();
-}
-
-function rootAssignment(text, key) {
-  const lines = String(text || "").split("\n");
-  const firstTable = lines.findIndex((line) => /^\s*\[/.test(line));
-  const rootEnd = firstTable < 0 ? lines.length : firstTable;
-  return lines.slice(0, rootEnd).find((line) => new RegExp(`^\\s*${escapeRegex(key)}\\s*=`).test(line)) || null;
-}
-
-function restoreRootAssignment(text, line) {
-  const lines = String(text || "").trim().split("\n");
-  const firstTable = lines.findIndex((item) => /^\s*\[/.test(item));
-  const at = firstTable < 0 ? lines.length : firstTable;
-  lines.splice(at, 0, ...(at > 0 && lines[at - 1].trim() ? [""] : []), line);
-  return lines.join("\n").replace(/\n{3,}/g, "\n\n").trim();
-}
-
-function tomlString(value) {
-  return JSON.stringify(String(value));
-}
-
-function escapeRegex(value) {
-  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
+import { spawnSync } from "node:child_process";
+import { atomicWrite, backupFile, compactHome, exists, expandHome, readJsonFile, readText } from "../state.js";
+
+const CONFIG_PATH = "~/.codex/config.toml";
+const AUTH_PATH = "~/.codex/auth.json";
+const PROVIDER_ID = "pennyrouter";
+const MANAGED_START = "# --- PennyRouter managed Codex provider ---";
+const MANAGED_END = "# --- end PennyRouter managed Codex provider ---";
+
+export const codexHarness = {
+  id: "codex",
+  name: "Codex",
+
+  async detect() {
+    return exists(CONFIG_PATH);
+  },
+
+  async planInstall() {
+    return {
+      configPath: expandHome(CONFIG_PATH),
+      summary: [
+        `write ${CONFIG_PATH}`,
+        "install a Responses-native PennyRouter model provider",
+        "preserve Codex-managed ChatGPT login when available",
+        "store the PennyRouter API key without printing it",
+      ],
+    };
+  },
+
+  async install({ apiKey, gatewayBaseUrl, plan, existingRecord }) {
+    const current = await readText(CONFIG_PATH, "");
+    const subscriptionAuth = await detectCodexChatgptAuth();
+    const previousModelProvider = existingRecord?.previous_model_provider
+      || rootAssignment(removeManagedCodexConfig(current), "model_provider");
+    const backupPath = await backupFile(CONFIG_PATH, "codex");
+    const next = renderCodexConfig(current, {
+      apiKey,
+      gatewayBaseUrl,
+      subscriptionAuth,
+    });
+
+    await atomicWrite(CONFIG_PATH, next);
+
+    return {
+      harness: "codex",
+      config_path: compactHome(plan.configPath),
+      backup_path: backupPath ? compactHome(backupPath) : null,
+      installed_at: new Date().toISOString(),
+      restart: "restart Codex",
+      openai_subscription_auth: subscriptionAuth,
+      previous_model_provider: previousModelProvider,
+      changes: {
+        provider: PROVIDER_ID,
+        auth: subscriptionAuth ? "openai-subscription+penny-header" : "penny-bearer",
+      },
+    };
+  },
+
+  async uninstall(record) {
+    const text = await readText(record.config_path, "");
+    const clean = removeManagedCodexConfig(text);
+    const next = record.previous_model_provider
+      ? restoreRootAssignment(clean, record.previous_model_provider)
+      : clean;
+    await atomicWrite(record.config_path, next.endsWith("\n") ? next : `${next}\n`);
+  },
+};
+
+/**
+ * ChatGPT login remains owned by Codex. We inspect only the non-secret auth mode/account
+ * presence and never copy, print, or persist the access/refresh tokens from auth.json.
+ */
+export function codexUsesChatgptAuth(auth) {
+  if (!auth || typeof auth !== "object") return false;
+  if (String(auth.auth_mode || "").toLowerCase() === "chatgpt") return true;
+  return Boolean(auth.tokens && typeof auth.tokens === "object" && auth.tokens.account_id);
+}
+
+export async function detectCodexChatgptAuth() {
+  const auth = await readJsonFile(AUTH_PATH, null);
+  if (codexUsesChatgptAuth(auth)) return true;
+  // auth.json may be absent when Codex uses the OS keyring. `codex login status` reports
+  // only the login mode and does not expose credentials, so it is the safe fallback.
+  const status = spawnSync("codex", ["login", "status"], {
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "pipe"],
+  });
+  return status.status === 0 && /logged in using chatgpt/i.test(`${status.stdout}\n${status.stderr}`);
+}
+
+/**
+ * Install one marker-fenced provider block immediately before the first TOML table.
+ * Root keys appended after a table are scoped into that table by TOML, so model_provider
+ * must live here rather than at EOF. This also migrates the old undocumented root-key
+ * install (openai_base_url/openai_api_key).
+ *
+ * In subscription mode Codex owns and refreshes the OpenAI bearer. The independent
+ * x-pennyrouter-key header authenticates the account to our gateway. In Penny-only mode
+ * the pr- key is the provider bearer, matching the isolated probe's existing behavior.
+ */
+export function renderCodexConfig(text, { apiKey, gatewayBaseUrl, subscriptionAuth }) {
+  const clean = removeManagedCodexConfig(text, { removeRootProvider: true }).trimEnd();
+  if (new RegExp(`^\\s*\\[model_providers\\.${escapeRegex(PROVIDER_ID)}\\]\\s*$`, "m").test(clean)) {
+    throw new Error(
+      `Codex already defines [model_providers.${PROVIDER_ID}] outside PennyRouter's managed block. ` +
+      "Rename that provider before installing so PennyRouter does not overwrite user configuration.",
+    );
+  }
+  const escapedKey = tomlString(apiKey);
+  const escapedUrl = tomlString(`${String(gatewayBaseUrl).replace(/\/+$/, "")}/v1`);
+  const authLines = subscriptionAuth
+    ? [
+        "requires_openai_auth = true",
+        `http_headers = { "x-pennyrouter-key" = ${escapedKey} }`,
+      ]
+    : [`experimental_bearer_token = ${escapedKey}`];
+  const block = [
+    MANAGED_START,
+    `model_provider = "${PROVIDER_ID}"`,
+    "",
+    `[model_providers.${PROVIDER_ID}]`,
+    'name = "PennyRouter"',
+    `base_url = ${escapedUrl}`,
+    'wire_api = "responses"',
+    "supports_websockets = false",
+    ...authLines,
+    MANAGED_END,
+  ].join("\n");
+
+  const lines = clean ? clean.split("\n") : [];
+  const firstTable = lines.findIndex((line) => /^\s*\[/.test(line));
+  const at = firstTable < 0 ? lines.length : firstTable;
+  lines.splice(at, 0, ...(at > 0 && lines[at - 1].trim() ? [""] : []), block,
+    ...(at < lines.length && lines[at + 1]?.trim() ? [""] : []));
+  return `${lines.join("\n").replace(/\n{3,}/g, "\n\n").trim()}\n`;
+}
+
+export function removeManagedCodexConfig(text, { removeRootProvider = false } = {}) {
+  let out = String(text || "").replace(
+    new RegExp(`${escapeRegex(MANAGED_START)}[\\s\\S]*?${escapeRegex(MANAGED_END)}\\n?`, "g"),
+    "",
+  );
+  // Migrate/uninstall the legacy PennyRouter Codex writer. These keys are not part of the
+  // documented custom-provider contract and were written only by older PennyRouter releases.
+  out = out
+    .split("\n")
+    .filter((line) => !/^\s*openai_base_url\s*=/.test(line))
+    .filter((line) => !/^\s*openai_api_key\s*=/.test(line))
+    .join("\n");
+  if (removeRootProvider) {
+    const lines = out.split("\n");
+    const firstTable = lines.findIndex((line) => /^\s*\[/.test(line));
+    const rootEnd = firstTable < 0 ? lines.length : firstTable;
+    out = lines.filter((line, i) => i >= rootEnd || !/^\s*model_provider\s*=/.test(line)).join("\n");
+  }
+  return out.replace(/\n{3,}/g, "\n\n").trim();
+}
+
+function rootAssignment(text, key) {
+  const lines = String(text || "").split("\n");
+  const firstTable = lines.findIndex((line) => /^\s*\[/.test(line));
+  const rootEnd = firstTable < 0 ? lines.length : firstTable;
+  return lines.slice(0, rootEnd).find((line) => new RegExp(`^\\s*${escapeRegex(key)}\\s*=`).test(line)) || null;
+}
+
+function restoreRootAssignment(text, line) {
+  const lines = String(text || "").trim().split("\n");
+  const firstTable = lines.findIndex((item) => /^\s*\[/.test(item));
+  const at = firstTable < 0 ? lines.length : firstTable;
+  lines.splice(at, 0, ...(at > 0 && lines[at - 1].trim() ? [""] : []), line);
+  return lines.join("\n").replace(/\n{3,}/g, "\n\n").trim();
+}
+
+function tomlString(value) {
+  return JSON.stringify(String(value));
+}
+
+function escapeRegex(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}

package/src/harnesses/codex.test.js

@@ -1,119 +1,119 @@
-import assert from "node:assert/strict";
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-
-import {
-  codexHarness,
-  codexUsesChatgptAuth,
-  removeManagedCodexConfig,
-  renderCodexConfig,
-} from "./codex.js";
-
-function testAuthDetection() {
-  assert.equal(codexUsesChatgptAuth(null), false);
-  assert.equal(codexUsesChatgptAuth({ auth_mode: "apikey" }), false);
-  assert.equal(codexUsesChatgptAuth({ auth_mode: "chatgpt", tokens: {} }), true);
-  assert.equal(codexUsesChatgptAuth({ tokens: { account_id: "acct_test" } }), true);
-}
-
-function testSubscriptionProviderIsRootSafe() {
-  const original = `model = "gpt-test"\n\n[features]\nplugins = false\n`;
-  const next = renderCodexConfig(original, {
-    apiKey: "pr-test-secret",
-    gatewayBaseUrl: "http://localhost:8400/",
-    subscriptionAuth: true,
-  });
-
-  assert.ok(next.indexOf('model_provider = "pennyrouter"') < next.indexOf("[features]"));
-  assert.ok(next.includes('[model_providers.pennyrouter]'));
-  assert.ok(next.includes('base_url = "http://localhost:8400/v1"'));
-  assert.ok(next.includes("requires_openai_auth = true"));
-  assert.ok(next.includes('http_headers = { "x-pennyrouter-key" = "pr-test-secret" }'));
-  assert.ok(!next.includes("experimental_bearer_token"));
-  assert.equal((next.match(/# --- PennyRouter managed Codex provider ---/g) || []).length, 1);
-}
-
-function testLegacyMigrationAndIdempotence() {
-  const legacy = `[features]\nplugins = false\nopenai_base_url = "http://old/v1"\nopenai_api_key = "pr-old"\n`;
-  const once = renderCodexConfig(legacy, {
-    apiKey: "pr-new",
-    gatewayBaseUrl: "https://api.pennyrouter.com",
-    subscriptionAuth: false,
-  });
-  const twice = renderCodexConfig(once, {
-    apiKey: "pr-new",
-    gatewayBaseUrl: "https://api.pennyrouter.com",
-    subscriptionAuth: false,
-  });
-
-  assert.equal(twice, once);
-  assert.ok(!once.includes("openai_base_url"));
-  assert.ok(!once.includes("openai_api_key"));
-  assert.ok(once.includes('experimental_bearer_token = "pr-new"'));
-  assert.ok(!once.includes("requires_openai_auth"));
-}
-
-function testProviderCollisionFailsClosed() {
-  assert.throws(
-    () => renderCodexConfig('[model_providers.pennyrouter]\nname = "User provider"\n', {
-      apiKey: "pr-new",
-      gatewayBaseUrl: "https://api.pennyrouter.com",
-      subscriptionAuth: true,
-    }),
-    /already defines/,
-  );
-}
-
-function testUninstallLeavesUserConfig() {
-  const original = `model = "gpt-test"\n\n[features]\nplugins = false\n`;
-  const installed = renderCodexConfig(original, {
-    apiKey: "pr-test",
-    gatewayBaseUrl: "http://localhost:8400",
-    subscriptionAuth: true,
-  });
-  const removed = removeManagedCodexConfig(installed);
-
-  assert.equal(removed, original.trim());
-  assert.ok(!removed.includes("pr-test"));
-}
-
-async function testReinstallPreservesRecordedProvider() {
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), "pr-codex-reinstall-"));
-  const previousHome = process.env.HOME;
-  const previousState = process.env.XDG_STATE_HOME;
-  process.env.HOME = root;
-  process.env.XDG_STATE_HOME = path.join(root, ".state");
-  fs.mkdirSync(path.join(root, ".codex"), { recursive: true });
-  fs.writeFileSync(path.join(root, ".codex", "auth.json"), '{"auth_mode":"apikey"}\n');
-  fs.writeFileSync(path.join(root, ".codex", "config.toml"), renderCodexConfig("", {
-    apiKey: "pr-old", gatewayBaseUrl: "https://old.example", subscriptionAuth: false,
-  }));
-  try {
-    const plan = await codexHarness.planInstall();
-    const record = await codexHarness.install({
-      apiKey: "pr-new",
-      gatewayBaseUrl: "https://new.example",
-      plan,
-      existingRecord: { previous_model_provider: 'model_provider = "native"' },
-    });
-    assert.equal(record.previous_model_provider, 'model_provider = "native"');
-    await codexHarness.uninstall(record);
-    assert.ok(fs.readFileSync(path.join(root, ".codex", "config.toml"), "utf8")
-      .includes('model_provider = "native"'));
-  } finally {
-    if (previousHome === undefined) delete process.env.HOME;
-    else process.env.HOME = previousHome;
-    if (previousState === undefined) delete process.env.XDG_STATE_HOME;
-    else process.env.XDG_STATE_HOME = previousState;
-    fs.rmSync(root, { recursive: true, force: true });
-  }
-}
-
-testAuthDetection();
-testSubscriptionProviderIsRootSafe();
-testLegacyMigrationAndIdempotence();
-testProviderCollisionFailsClosed();
-testUninstallLeavesUserConfig();
-await testReinstallPreservesRecordedProvider();
-console.log("codex.test.js: all checks passed");
+import assert from "node:assert/strict";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+
+import {
+  codexHarness,
+  codexUsesChatgptAuth,
+  removeManagedCodexConfig,
+  renderCodexConfig,
+} from "./codex.js";
+
+function testAuthDetection() {
+  assert.equal(codexUsesChatgptAuth(null), false);
+  assert.equal(codexUsesChatgptAuth({ auth_mode: "apikey" }), false);
+  assert.equal(codexUsesChatgptAuth({ auth_mode: "chatgpt", tokens: {} }), true);
+  assert.equal(codexUsesChatgptAuth({ tokens: { account_id: "acct_test" } }), true);
+}
+
+function testSubscriptionProviderIsRootSafe() {
+  const original = `model = "gpt-test"\n\n[features]\nplugins = false\n`;
+  const next = renderCodexConfig(original, {
+    apiKey: "pr-test-secret",
+    gatewayBaseUrl: "http://localhost:8400/",
+    subscriptionAuth: true,
+  });
+
+  assert.ok(next.indexOf('model_provider = "pennyrouter"') < next.indexOf("[features]"));
+  assert.ok(next.includes('[model_providers.pennyrouter]'));
+  assert.ok(next.includes('base_url = "http://localhost:8400/v1"'));
+  assert.ok(next.includes("requires_openai_auth = true"));
+  assert.ok(next.includes('http_headers = { "x-pennyrouter-key" = "pr-test-secret" }'));
+  assert.ok(!next.includes("experimental_bearer_token"));
+  assert.equal((next.match(/# --- PennyRouter managed Codex provider ---/g) || []).length, 1);
+}
+
+function testLegacyMigrationAndIdempotence() {
+  const legacy = `[features]\nplugins = false\nopenai_base_url = "http://old/v1"\nopenai_api_key = "pr-old"\n`;
+  const once = renderCodexConfig(legacy, {
+    apiKey: "pr-new",
+    gatewayBaseUrl: "https://api.pennyrouter.com",
+    subscriptionAuth: false,
+  });
+  const twice = renderCodexConfig(once, {
+    apiKey: "pr-new",
+    gatewayBaseUrl: "https://api.pennyrouter.com",
+    subscriptionAuth: false,
+  });
+
+  assert.equal(twice, once);
+  assert.ok(!once.includes("openai_base_url"));
+  assert.ok(!once.includes("openai_api_key"));
+  assert.ok(once.includes('experimental_bearer_token = "pr-new"'));
+  assert.ok(!once.includes("requires_openai_auth"));
+}
+
+function testProviderCollisionFailsClosed() {
+  assert.throws(
+    () => renderCodexConfig('[model_providers.pennyrouter]\nname = "User provider"\n', {
+      apiKey: "pr-new",
+      gatewayBaseUrl: "https://api.pennyrouter.com",
+      subscriptionAuth: true,
+    }),
+    /already defines/,
+  );
+}
+
+function testUninstallLeavesUserConfig() {
+  const original = `model = "gpt-test"\n\n[features]\nplugins = false\n`;
+  const installed = renderCodexConfig(original, {
+    apiKey: "pr-test",
+    gatewayBaseUrl: "http://localhost:8400",
+    subscriptionAuth: true,
+  });
+  const removed = removeManagedCodexConfig(installed);
+
+  assert.equal(removed, original.trim());
+  assert.ok(!removed.includes("pr-test"));
+}
+
+async function testReinstallPreservesRecordedProvider() {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), "pr-codex-reinstall-"));
+  const previousHome = process.env.HOME;
+  const previousState = process.env.XDG_STATE_HOME;
+  process.env.HOME = root;
+  process.env.XDG_STATE_HOME = path.join(root, ".state");
+  fs.mkdirSync(path.join(root, ".codex"), { recursive: true });
+  fs.writeFileSync(path.join(root, ".codex", "auth.json"), '{"auth_mode":"apikey"}\n');
+  fs.writeFileSync(path.join(root, ".codex", "config.toml"), renderCodexConfig("", {
+    apiKey: "pr-old", gatewayBaseUrl: "https://old.example", subscriptionAuth: false,
+  }));
+  try {
+    const plan = await codexHarness.planInstall();
+    const record = await codexHarness.install({
+      apiKey: "pr-new",
+      gatewayBaseUrl: "https://new.example",
+      plan,
+      existingRecord: { previous_model_provider: 'model_provider = "native"' },
+    });
+    assert.equal(record.previous_model_provider, 'model_provider = "native"');
+    await codexHarness.uninstall(record);
+    assert.ok(fs.readFileSync(path.join(root, ".codex", "config.toml"), "utf8")
+      .includes('model_provider = "native"'));
+  } finally {
+    if (previousHome === undefined) delete process.env.HOME;
+    else process.env.HOME = previousHome;
+    if (previousState === undefined) delete process.env.XDG_STATE_HOME;
+    else process.env.XDG_STATE_HOME = previousState;
+    fs.rmSync(root, { recursive: true, force: true });
+  }
+}
+
+testAuthDetection();
+testSubscriptionProviderIsRootSafe();
+testLegacyMigrationAndIdempotence();
+testProviderCollisionFailsClosed();
+testUninstallLeavesUserConfig();
+await testReinstallPreservesRecordedProvider();
+console.log("codex.test.js: all checks passed");