fix(codex-auth): surface registry corruption

tests/integration/web-server/codex-profiles-endpoint.test.ts

@@ -110,6 +110,19 @@ describe('GET /api/codex/profiles', () => {
     expect((b.profiles as unknown[]).length).toBe(0);
   });
 
+  it('returns 500 when registry YAML is malformed', async () => {
+    const registryPath = path.join(ccsDir, 'codex-profiles.yaml');
+    fs.writeFileSync(registryPath, '{ invalid: yaml: [', { mode: 0o600 });
+
+    const svc = await import('../../../src/codex-auth/codex-auth-dashboard-service');
+    svc.invalidateCodexAuthProfilesCache();
+
+    const { status, body } = await get('/api/codex/profiles');
+
+    expect(status).toBe(500);
+    expect((body as { error?: string }).error).toContain('could not be read safely');
+  });
+
   it('returns 200 with decoded email and plan for a valid profile', async () => {
     const instancesDir = path.join(ccsDir, 'codex-instances');
     const workDir = path.join(instancesDir, 'work');

tests/unit/codex-auth/codex-auth-dashboard-service.test.ts

@@ -115,6 +115,16 @@ describe('getCodexAuthProfilesSummary', () => {
     expect(result.default).toBeNull();
   });
 
+  it('throws instead of returning an empty list when registry YAML is malformed', async () => {
+    const { getCodexAuthProfilesSummary, invalidateCodexAuthProfilesCache } = await importService();
+    invalidateCodexAuthProfilesCache();
+
+    const registryPath = path.join(ccsDir, 'codex-profiles.yaml');
+    fs.writeFileSync(registryPath, '{ invalid: yaml: [', { mode: 0o600 });
+
+    await expect(getCodexAuthProfilesSummary()).rejects.toThrow(/could not be read safely/i);
+  });
+
   it('returns decoded email, plan, accountId for valid registry with 2 profiles', async () => {
     const { getCodexAuthProfilesSummary, invalidateCodexAuthProfilesCache } = await importService();
     invalidateCodexAuthProfilesCache();

tests/unit/codex-auth/codex-profile-registry.test.ts

@@ -127,6 +127,18 @@ describe('CodexProfileRegistry — remove', () => {
     reg.removeProfile('work');
     expect(reg.getDefault()).toBeNull();
   });
+
+  it('does not promote another profile when the default profile is removed', () => {
+    const reg = new CodexProfileRegistry(registryPath);
+    reg.createProfile('work');
+    reg.createProfile('personal');
+    reg.setDefault('work');
+
+    reg.removeProfile('work');
+
+    expect(reg.listProfiles()).toEqual(['personal']);
+    expect(reg.getDefault()).toBeNull();
+  });
 });
 
 describe('CodexProfileRegistry — default pointer', () => {