diff --git a/codex-rs/Cargo.lock b/codex-rs/Cargo.lock
index f3e84a90ca..d7df4b89ad 100644
--- a/codex-rs/Cargo.lock
+++ b/codex-rs/Cargo.lock
@@ -4770,6 +4770,7 @@ dependencies = [
  "codex-features",
  "codex-home",
  "codex-hooks",
+ "codex-http-client",
  "codex-login",
  "codex-model-provider-info",
  "codex-models-manager",
@@ -4784,7 +4785,6 @@ dependencies = [
  "opentelemetry_sdk",
  "pretty_assertions",
  "regex-lite",
- "reqwest 0.12.28",
  "serde_json",
  "shlex",
  "similar",
diff --git a/codex-rs/core/tests/common/Cargo.toml b/codex-rs/core/tests/common/Cargo.toml
index 46546fca32..05adeb044e 100644
--- a/codex-rs/core/tests/common/Cargo.toml
+++ b/codex-rs/core/tests/common/Cargo.toml
@@ -50,5 +50,5 @@ shlex = { workspace = true }
 zstd = { workspace = true }
 
 [dev-dependencies]
+codex-http-client = { workspace = true }
 pretty_assertions = { workspace = true }
-reqwest = { workspace = true }
diff --git a/codex-rs/core/tests/common/streaming_sse.rs b/codex-rs/core/tests/common/streaming_sse.rs
index 95fff73b9b..3766bbd880 100644
--- a/codex-rs/core/tests/common/streaming_sse.rs
+++ b/codex-rs/core/tests/common/streaming_sse.rs
@@ -284,8 +284,10 @@ fn unix_ms_now() -> i64 {
 #[cfg(test)]
 mod tests {
     use super::*;
+    use codex_http_client::ClientRouteClass;
+    use codex_http_client::HttpClientFactory;
+    use codex_http_client::OutboundProxyPolicy;
     use pretty_assertions::assert_eq;
-    use reqwest::StatusCode;
     use tokio::net::TcpStream;
     use tokio::time::Duration;
     use tokio::time::timeout;
@@ -607,13 +609,16 @@ data: {"type":"response.completed","response":{"id":"resp-1"}}
             "stream": true
         });
 
-        let resp = reqwest::Client::new()
+        let client = HttpClientFactory::new(OutboundProxyPolicy::ReqwestDefault)
+            .build_client(&url, ClientRouteClass::Other)
+            .expect("build HTTP client");
+        let resp = client
             .post(url)
             .json(&payload)
             .send()
             .await
             .expect("send request");
-        assert_eq!(resp.status(), StatusCode::OK);
+        assert_eq!(resp.status().as_u16(), 200);
 
         let bytes = resp.bytes().await.expect("read response body");
         assert_eq!(bytes, response_body.as_bytes());
diff --git a/codex-rs/deny.toml b/codex-rs/deny.toml
index 94ca4d28a8..23f4468280 100644
--- a/codex-rs/deny.toml
+++ b/codex-rs/deny.toml
@@ -250,7 +250,6 @@ deny = [
         "codex-responses-api-proxy",
         "codex-rmcp-client",
         "codex-tui",
-        "core_test_support",
         # Third-party crates that own their reqwest integration. These are not part of the
         # first-party migration count above.
         "oauth2",