Function TestCodexEngineMCPScriptsSecrets

pkg/workflow/codex_engine_test.go:889–938

TestCodexEngineMCPScriptsSecrets verifies that mcp-scripts secrets are passed to the execution step

(t *testing.T)

// TestCodexEngineMCPScriptsSecrets verifies that mcp-scripts secrets are passed to the execution step
func TestCodexEngineMCPScriptsSecrets(t *testing.T) {
	engine := NewCodexEngine()

	// Create workflow data with mcp-scripts that have env secrets
	workflowData := &WorkflowData{
		Name: "test-workflow-with-mcp-scripts",
		Features: map[string]any{
			"mcp-scripts": true, // Feature flag is optional now
		},
		MCPScripts: &MCPScriptsConfig{
			Tools: map[string]*MCPScriptToolConfig{
				"gh": {
					Name:        "gh",
					Description: "Execute gh CLI command",
					Run:         "gh $INPUT_ARGS",
					Env: map[string]string{
						"GH_TOKEN": "${{ github.token }}",
					},
				},
				"api-call": {
					Name:        "api-call",
					Description: "Call an API",
					Script:      "return fetch(url);",
					Env: map[string]string{
						"API_KEY": "${{ secrets.API_KEY }}",
					},
				},
			},
		},
	}

	// Get execution steps
	execSteps := engine.GetExecutionSteps(workflowData, "/tmp/test.log")
	if len(execSteps) == 0 {
		t.Fatal("Expected at least one execution step")
	}

	// Join all step lines to check content
	stepContent := strings.Join(execSteps[0], "\n")

	// Verify GH_TOKEN is in the env section
	if !strings.Contains(stepContent, "GH_TOKEN: ${{ github.token }}") {
		t.Errorf("Expected GH_TOKEN environment variable in step content:\n%s", stepContent)
	}

	// Verify API_KEY is in the env section
	if !strings.Contains(stepContent, "API_KEY: ${{ secrets.API_KEY }}") {
		t.Errorf("Expected API_KEY environment variable in step content:\n%s", stepContent)
	}
}

// TestCodexEngineHttpMCPServerRendered verifies that HTTP MCP servers
// are properly rendered in TOML format for Codex