test(agent): update codex local-tools-mcp desktop test for always-on speak

The speak tool is now alwaysLoad/always-enabled, so buildLocalToolsServer no longer returns null on a desktop run — it returns a server exposing just the speak tool. Reframe the desktop-run assertion to match the claude adapter's equivalent test: the always-on speak tool is present while the cloud-only signed-git tools are not.

Generated-By: PostHog Code
Task-Id: e012ce8b-197a-41c1-b96a-36bad4a1aa86

Author: jonmcwest

packages/agent/src/adapters/codex-app-server/local-tools-mcp.test.ts

@@ -90,11 +90,22 @@ describe("buildLocalToolsServer", () => {
     ).toBeNull();
   });
 
-  it("returns null when no tool's gate passes (desktop run)", () => {
+  it("exposes only the always-on tools on a desktop run (no cloud-only tools)", () => {
     process.env.GH_TOKEN = "ghs_test";
 
-    expect(
-      buildLocalToolsServer({ cwd: "/repo" }, { environment: "local" }),
-    ).toBeNull();
+    const server = buildLocalToolsServer(
+      { cwd: "/repo" },
+      { environment: "local" },
+    );
+
+    expect(server).not.toBeNull();
+    const enabled =
+      server?.env.find((e) => e.name === "POSTHOG_LOCAL_TOOLS_ENABLED")
+        ?.value ?? "";
+    const names = enabled.split(",");
+    // `speak` is always on (narration works on desktop and cloud alike).
+    expect(names).toContain("speak");
+    // Signed-git tools are cloud-only and must not leak into a desktop run.
+    expect(names).not.toContain("git_signed_commit");
   });
 });