feat: dev tools

tests/test_codex.py

@@ -69,6 +69,26 @@ def test_configures_research_agent_and_optional_context7_key(tmp_path) -> None:
     assert client._environment()["CONTEXT7_API_KEY"] == "ctx7-secret"
 
 
+def test_exposes_development_tools_without_service_secrets(tmp_path, monkeypatch) -> None:
+    monkeypatch.setenv("PATH", "/usr/bin")
+    monkeypatch.setenv("AGENTCI_PRIVATE_VALUE", "secret")
+    tools_bin = tmp_path / "tools" / "bin"
+    client = CodexClient(
+        codex_home=tmp_path / "codex",
+        schemas_dir=tmp_path / "schemas",
+        timeout_seconds=60,
+        research_model="gpt-5.6-luna",
+        research_reasoning="high",
+        context7_api_key=None,
+        tools_bin=tools_bin,
+    )
+
+    environment = client._environment()
+
+    assert environment["PATH"] == f"{tools_bin}:/usr/bin"
+    assert "AGENTCI_PRIVATE_VALUE" not in environment
+
+
 async def test_invokes_codex_from_workflow_workspace(tmp_path, monkeypatch) -> None:
     workspace = tmp_path / "workspace"
     workspace.mkdir()