Merge branch 'dev/winston/credentialed-routes-backend-adapter-review-20260618' into dev/winston/credentialed-routes-context-review-20260618

codex-rs/Cargo.lock

@@ -2831,6 +2831,8 @@ dependencies = [
  "codex-login",
  "codex-network-proxy",
  "http 1.4.0",
+ "pretty_assertions",
+ "tokio",
  "tracing",
 ]
 

codex-rs/Cargo.toml

@@ -166,7 +166,6 @@ codex-home = { path = "codex-home" }
 codex-config = { path = "config" }
 codex-connectors = { path = "connectors" }
 codex-context-fragments = { path = "context-fragments" }
-codex-credentialed-routes = { path = "credentialed-routes" }
 codex-core = { path = "core" }
 codex-core-api = { path = "core-api" }
 codex-core-plugins = { path = "core-plugins" }

codex-rs/credentialed-routes/Cargo.toml

@@ -19,3 +19,7 @@ codex-login = { workspace = true }
 codex-network-proxy = { workspace = true }
 http = { workspace = true }
 tracing = { workspace = true }
+
+[dev-dependencies]
+pretty_assertions = { workspace = true }
+tokio = { workspace = true, features = ["macros", "rt"] }

codex-rs/credentialed-routes/src/lib.rs

@@ -99,3 +99,7 @@ fn credentialed_route_proxy_headers(headers: HeaderMap) -> Vec<CredentialedRoute
         })
         .collect()
 }
+
+#[cfg(test)]
+#[path = "lib_tests.rs"]
+mod tests;

codex-rs/credentialed-routes/src/lib_tests.rs

@@ -0,0 +1,10 @@
+use super::*;
+use pretty_assertions::assert_eq;
+
+#[tokio::test]
+async fn load_without_codex_backend_auth_returns_no_routes() {
+    assert_eq!(
+        load_for_session("https://example.invalid", None).await,
+        CredentialedRoutesConfig::default()
+    );
+}