#!/usr/bin/env zsh

set -euo pipefail

export CODEX_HOME="${CODEX_HOME:-${HOME}/.codex-sso}"
CODEX_AUTH_COMMON_SCRIPT="${CODEX_AUTH_COMMON_SCRIPT:-${HOME}/bin/codex-auth-common.zsh}"
CODEX_BIN="${CODEX_BIN:-/opt/homebrew/bin/codex}"

if [[ ! -r "${CODEX_AUTH_COMMON_SCRIPT}" ]]; then
  print -u2 -- "Codex auth common helper not found or not readable: ${CODEX_AUTH_COMMON_SCRIPT}"
  exit 1
fi
source "${CODEX_AUTH_COMMON_SCRIPT}"

trap codex_auth_cleanup EXIT INT TERM

codex_auth_preflight

unset OPENAI_API_KEY
unset CODEX_ACCESS_TOKEN

"${CODEX_BIN}" --disable guardian_approval -a untrusted "$@"
# "${CODEX_BIN}" "$@"