expect(result?.profiles[0]?.credential).not.toHaveProperty("idToken");

});

it("does not log the device pairing code in remote mode", async () => {

async function runRemoteDeviceCodeAuthFlow() {

const provider = buildOpenAICodexProviderPlugin();

const deviceCodeMethod = provider.auth?.find((method) => method.id === "device-code");

const note = vi.fn(async () => {});

}),

).resolves.toBeDefined();

const logOutput = runtime.log.mock.calls.flat().join("\n");

expect(logOutput).toContain("https://auth.openai.com/codex/device");

expect(logOutput).not.toContain("CODE-12345");

return { note, runtime };

}

it("surfaces the device pairing code via the prompter note in remote (SSH) mode (#74212)", async () => {

const { note } = await runRemoteDeviceCodeAuthFlow();

expect(note).toHaveBeenCalledWith(

expect.stringContaining("Code: [shown on the local device only]"),

expect.stringContaining("Code: CODE-12345"),

"OpenAI Codex device code",

);

expect(note).not.toHaveBeenCalledWith(

expect.stringContaining("Code: CODE-12345"),

expect.stringContaining("Code: [shown on the local device only]"),

"OpenAI Codex device code",

);

});

it("does not write the device pairing code to the runtime log in remote mode", async () => {

const { runtime } = await runRemoteDeviceCodeAuthFlow();

const logOutput = runtime.log.mock.calls.flat().join("\n");

expect(logOutput).toContain("https://auth.openai.com/codex/device");

expect(logOutput).not.toContain("CODE-12345");

});

it("owns native reasoning output mode for Codex responses", () => {

const provider = buildOpenAICodexProviderPlugin();