Fail closed when no active Codex profile exists

Author: igneous-prose

Sources/CodexBar/Providers/Codex/CodexSettingsStore.swift

@@ -29,7 +29,7 @@ extension SettingsStore {
                     return exact
                 }
             }
-            return override.first(where: \.isActiveInCodex) ?? override.first
+            return override.first(where: \.isActiveInCodex)
         }
         #endif
         return CodexProfileStore.selectedDisplayProfile(selectedPath: self.selectedCodexProfilePath)

Sources/CodexBarCore/Providers/Codex/CodexProfileStore.swift

@@ -114,7 +114,9 @@ public enum CodexProfileStore {
             }
 
         if let activeProfile,
-           discovered.contains(where: { $0.fileURL.standardizedFileURL == activeProfile.fileURL.standardizedFileURL }) == false
+           discovered.contains(where: {
+               $0.fileURL.standardizedFileURL == activeProfile.fileURL.standardizedFileURL
+           }) == false
         {
             discovered.append(activeProfile)
         }
@@ -213,10 +215,10 @@ public enum CodexProfileStore {
             }
             let authPath = authFileURL.standardizedFileURL.path
             if standardizedPath == authPath {
-                return displayed.first(where: \.isActiveInCodex) ?? displayed.first
+                return displayed.first(where: \.isActiveInCodex)
             }
         }
-        return displayed.first(where: \.isActiveInCodex) ?? displayed.first
+        return displayed.first(where: \.isActiveInCodex)
     }
 
     private static func credentials(at url: URL, fileManager: FileManager) -> CodexOAuthCredentials? {

Tests/CodexBarTests/CodexProfileStoreTests.swift

@@ -71,6 +71,34 @@ struct CodexProfileStoreTests {
         #expect(selected?.isActiveInCodex == true)
     }
 
+    @Test
+    func `selected profile stays unset when no active auth exists`() throws {
+        let root = FileManager.default.temporaryDirectory.appendingPathComponent(UUID().uuidString, isDirectory: true)
+        try FileManager.default.createDirectory(at: root, withIntermediateDirectories: true)
+        defer { try? FileManager.default.removeItem(at: root) }
+
+        let authURL = root.appendingPathComponent("auth.json")
+        let profilesURL = root.appendingPathComponent("profiles", isDirectory: true)
+        try FileManager.default.createDirectory(at: profilesURL, withIntermediateDirectories: true)
+
+        try self.writeAuthFile(
+            to: profilesURL.appendingPathComponent("plus-a.json"),
+            email: "plus-a@example.com",
+            plan: "plus",
+            accountID: "acct-a")
+        try self.writeAuthFile(
+            to: profilesURL.appendingPathComponent("plus-b.json"),
+            email: "plus-b@example.com",
+            plan: "plus",
+            accountID: "acct-b")
+
+        let selected = CodexProfileStore.selectedDisplayProfile(
+            selectedPath: nil,
+            authFileURL: authURL)
+
+        #expect(selected == nil)
+    }
+
     @Test
     func `display profiles collapse live auth into matching saved profile`() throws {
         let root = FileManager.default.temporaryDirectory.appendingPathComponent(UUID().uuidString, isDirectory: true)