refreshCodexAppServerAuthTokens,

resolveCodexAppServerAuthAccountCacheKey,

resolveCodexAppServerEnvApiKeyCacheKey,

resolveCodexAppServerHomeDir,

resolveCodexAppServerAuthProfileId,

resolveCodexAppServerAuthProfileIdForAgent,

} from "./auth-bridge.js";

async function listCodexAppServerRolloutFilesForThread(

agentDir: string,

threadId: string,

codexHome?: string,

): Promise<Array<{ path: string; bytes: number }>> {

const resolvedAgentDir = path.resolve(agentDir);

const resolvedCodexHome = codexHome?.trim()

? path.resolve(codexHome)

: resolveCodexAppServerHomeDir(resolvedAgentDir);

const roots = [

path.join(resolvedAgentDir, "codex-home", "sessions"),

path.join(resolvedCodexHome, "sessions"),

path.join(resolveCodexAppServerHomeDir(resolvedAgentDir), "sessions"),

path.join(resolvedAgentDir, "agent", "codex-home", "sessions"),

path.join(path.dirname(resolvedAgentDir), "codex-home", "sessions"),

];

binding: CodexAppServerThreadBinding | undefined;

sessionFile: string;

agentDir: string;

codexHome?: string;

config: EmbeddedRunAttemptParams["config"] | undefined;

}): Promise<CodexAppServerThreadBinding | undefined> {

const binding = params.binding;

const rolloutFiles = await listCodexAppServerRolloutFilesForThread(

params.agentDir,

binding.threadId,

params.codexHome,

);

if (maxBytes !== undefined) {

const oversizedFiles = rolloutFiles.filter((file) => file.bytes > maxBytes);

binding: startupBinding,

sessionFile: params.sessionFile,

agentDir,

codexHome: appServer.start.env?.CODEX_HOME,

config: params.config,

});

const startupAuthProfileCandidate =