import { handleCodexAppServerApprovalRequest } from "./approval-bridge.js";

import { refreshCodexAppServerAuthTokens } from "./auth-bridge.js";

import { isCodexAppServerApprovalRequest, type CodexAppServerClient } from "./client.js";

import { readCodexPluginConfig, resolveCodexAppServerRuntimeOptions } from "./config.js";

import {

readCodexPluginConfig,

resolveCodexAppServerRuntimeOptions,

shouldAutoApproveCodexAppServerApprovals,

type CodexAppServerRuntimeOptions,

} from "./config.js";

import {

emitDynamicToolErrorDiagnostic,

emitDynamicToolStartedDiagnostic,

try {

const cwd = binding.cwd || params.workspaceDir || process.cwd();

const sideRunParams = buildSideRunAttemptParams(params, { cwd, authProfileId });

const approvalPolicy = binding.approvalPolicy ?? appServer.approvalPolicy;

const sandbox = binding.sandbox ?? appServer.sandbox;

const { sessionAgentId } = resolveSessionAgentIds({

sessionKey: params.sessionKey,

config: params.cfg,

threadId: childThreadId,

turnId,

nativeHookRelay,

autoApprove: shouldAutoApproveCodexAppServerApprovals({ approvalPolicy, sandbox }),

signal: runAbortController.signal,

});

}

}

});

const approvalPolicy = binding.approvalPolicy ?? appServer.approvalPolicy;

const sandbox = binding.sandbox ?? appServer.sandbox;

const serviceTier = binding.serviceTier ?? appServer.serviceTier;

const nativeHookRelayEvents = resolveCodexSideNativeHookRelayEvents({

configuredEvents: options.nativeHookRelay?.events,

function resolveCodexSideNativeHookRelayEvents(params: {

configuredEvents?: readonly NativeHookRelayEvent[];

approvalPolicy: ReturnType<typeof resolveCodexAppServerRuntimeOptions>["approvalPolicy"];

approvalPolicy: CodexAppServerRuntimeOptions["approvalPolicy"];

}): readonly NativeHookRelayEvent[] {

if (params.configuredEvents?.length) {

return params.configuredEvents;