Share Codex auth preflight

bin/codex-sso

@@ -0,0 +1,22 @@
+#!/usr/bin/env zsh
+
+set -euo pipefail
+
+export CODEX_HOME="${CODEX_HOME:-${HOME}/.codex-sso}"
+CODEX_AUTH_COMMON_SCRIPT="${CODEX_AUTH_COMMON_SCRIPT:-${HOME}/bin/codex-auth-common.zsh}"
+CODEX_BIN="${CODEX_BIN:-/opt/homebrew/bin/codex}"
+
+if [[ ! -r "${CODEX_AUTH_COMMON_SCRIPT}" ]]; then
+  print -u2 -- "Codex auth common helper not found or not readable: ${CODEX_AUTH_COMMON_SCRIPT}"
+  exit 1
+fi
+source "${CODEX_AUTH_COMMON_SCRIPT}"
+
+trap codex_auth_cleanup EXIT INT TERM
+
+codex_auth_preflight
+
+unset OPENAI_API_KEY
+unset CODEX_ACCESS_TOKEN
+
+"${CODEX_BIN}" --disable guardian_approval -a untrusted "$@"