From 8a301a56b4084575523477a6e1fdf17767d73cbc Mon Sep 17 00:00:00 2001
From: Winston Howes <winston@openai.com>
Date: Thu, 18 Jun 2026 15:20:19 -0700
Subject: [PATCH] Fix credentialed routes cargo shear checks

---
 codex-rs/Cargo.lock                           |  2 ++
 codex-rs/Cargo.toml                           |  1 -
 codex-rs/credentialed-routes/Cargo.toml       |  4 ++++
 codex-rs/credentialed-routes/src/lib.rs       |  4 ++++
 codex-rs/credentialed-routes/src/lib_tests.rs | 10 ++++++++++
 5 files changed, 20 insertions(+), 1 deletion(-)
 create mode 100644 codex-rs/credentialed-routes/src/lib_tests.rs

diff --git a/codex-rs/Cargo.lock b/codex-rs/Cargo.lock
index 73691a9389..0fad9b025b 100644
--- a/codex-rs/Cargo.lock
+++ b/codex-rs/Cargo.lock
@@ -2830,6 +2830,8 @@ dependencies = [
  "codex-login",
  "codex-network-proxy",
  "http 1.4.0",
+ "pretty_assertions",
+ "tokio",
  "tracing",
 ]
 
diff --git a/codex-rs/Cargo.toml b/codex-rs/Cargo.toml
index 42856e0f38..6baca4551e 100644
--- a/codex-rs/Cargo.toml
+++ b/codex-rs/Cargo.toml
@@ -166,7 +166,6 @@ codex-home = { path = "codex-home" }
 codex-config = { path = "config" }
 codex-connectors = { path = "connectors" }
 codex-context-fragments = { path = "context-fragments" }
-codex-credentialed-routes = { path = "credentialed-routes" }
 codex-core = { path = "core" }
 codex-core-api = { path = "core-api" }
 codex-core-plugins = { path = "core-plugins" }
diff --git a/codex-rs/credentialed-routes/Cargo.toml b/codex-rs/credentialed-routes/Cargo.toml
index dbabf86330..8d8c219ebe 100644
--- a/codex-rs/credentialed-routes/Cargo.toml
+++ b/codex-rs/credentialed-routes/Cargo.toml
@@ -19,3 +19,7 @@ codex-login = { workspace = true }
 codex-network-proxy = { workspace = true }
 http = { workspace = true }
 tracing = { workspace = true }
+
+[dev-dependencies]
+pretty_assertions = { workspace = true }
+tokio = { workspace = true, features = ["macros", "rt"] }
diff --git a/codex-rs/credentialed-routes/src/lib.rs b/codex-rs/credentialed-routes/src/lib.rs
index c453398e36..878e07fa97 100644
--- a/codex-rs/credentialed-routes/src/lib.rs
+++ b/codex-rs/credentialed-routes/src/lib.rs
@@ -99,3 +99,7 @@ fn credentialed_route_proxy_headers(headers: HeaderMap) -> Vec<CredentialedRoute
         })
         .collect()
 }
+
+#[cfg(test)]
+#[path = "lib_tests.rs"]
+mod tests;
diff --git a/codex-rs/credentialed-routes/src/lib_tests.rs b/codex-rs/credentialed-routes/src/lib_tests.rs
new file mode 100644
index 0000000000..5859289345
--- /dev/null
+++ b/codex-rs/credentialed-routes/src/lib_tests.rs
@@ -0,0 +1,10 @@
+use super::*;
+use pretty_assertions::assert_eq;
+
+#[tokio::test]
+async fn load_without_codex_backend_auth_returns_no_routes() {
+    assert_eq!(
+        load_for_session("https://example.invalid", None).await,
+        CredentialedRoutesConfig::default()
+    );
+}