test(cli): load .env.local for the ACP live suites

Move the Codex login token lookup into test/env.ts alongside it, mirroring aikit's test env setup. Only the ACP suite imports it, so the other CLI tests keep a key-free environment. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
sanchitrk · Sep 30, 2026 · Sep 24, 2026 · Sep 25, 2026 · Sep 26, 2026 · Sep 26, 2026
commit 6d3c55f25ef4c671b3e20060385f37878ffe8ad7
diff --git a/packages/codework/test/acp.test.ts b/packages/codework/test/acp.test.ts
@@ -5,36 +5,18 @@ import { type Cause, Effect, Exit, Fiber, Option, Queue, type Scope, Stream } fr
 import * as EffectCause from "effect/Cause";
 import { ChildProcess, ChildProcessSpawner } from "effect/unstable/process";
 import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
-import { homedir, tmpdir } from "node:os";
+import { tmpdir } from "node:os";
 import { crc32, deflateSync } from "node:zlib";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { afterAll, describe, expect, it } from "vite-plus/test";
+import "./env.ts";
 
 const cli = fileURLToPath(new URL("../src/index.ts", import.meta.url));
 const models = fileURLToPath(new URL("../../../models.gen.json", import.meta.url));
 // Cheap, reliable with tools, and its id contains a slash, which the model selector must keep intact.
 const LIVE_MODEL = "openrouter/openai/gpt-4.1-mini";
 
-/**
- * The Codex login's current access token, for `OPENAI_CODEX_API_KEY`. The login file itself is
- * never copied into a test home: a refresh there would rotate the refresh token and sign the
- * developer out. An expired token skips the Codex cases rather than refreshing.
- */
-const codexToken = (): string | undefined => {
-	try {
-		const login = JSON.parse(readFileSync(join(homedir(), ".codework", "aikit", "auth.json"), "utf8"))[
-			"openai-codex"
-		];
-		// @effect-diagnostics-next-line globalDate:off -- module setup, outside any Effect.
-		return typeof login?.access === "string" && login.expires > Date.now() + 10 * 60_000 ? login.access : undefined;
-	} catch {
-		return undefined;
-	}
-};
-const codex = process.env.OPENAI_CODEX_API_KEY ?? codexToken();
-if (codex !== undefined) process.env.OPENAI_CODEX_API_KEY = codex;
-
 /** Every live case runs against each of these; `env` names the key that enables it. */
 const LIVE = [
 	{ name: "openai", provider: "openai", id: "gpt-5.6-luna", env: "OPENAI_API_KEY" },

diff --git a/packages/codework/test/env.ts b/packages/codework/test/env.ts
@@ -0,0 +1,30 @@
+/* @effect-diagnostics nodeBuiltinImport:off -- test setup reads local credential files. */
+import { existsSync, readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const envPath = fileURLToPath(new URL("../.env.local", import.meta.url));
+
+if (existsSync(envPath)) {
+	process.loadEnvFile(envPath);
+}
+
+/**
+ * The Codex login's current access token, for `OPENAI_CODEX_API_KEY`. The login file itself is
+ * never copied into a test home: a refresh there would rotate the refresh token and sign the
+ * developer out. An expired token skips the Codex cases rather than refreshing.
+ */
+const codexToken = (): string | undefined => {
+	try {
+		const login = JSON.parse(readFileSync(join(homedir(), ".codework", "aikit", "auth.json"), "utf8"))[
+			"openai-codex"
+		];
+		// @effect-diagnostics-next-line globalDate:off -- module setup, outside any Effect.
+		return typeof login?.access === "string" && login.expires > Date.now() + 10 * 60_000 ? login.access : undefined;
+	} catch {
+		return undefined;
+	}
+};
+const codex = process.env.OPENAI_CODEX_API_KEY ?? codexToken();
+if (codex !== undefined) process.env.OPENAI_CODEX_API_KEY = codex;