#!/usr/bin/env bash
set -euo pipefail

if [[ -z "${CODEX_APP_SERVER_TOKEN:-}" ]]; then
  echo "CODEX_APP_SERVER_TOKEN is required" >&2
  exit 1
fi

token_sha256="$(printf '%s' "$CODEX_APP_SERVER_TOKEN" | sha256sum)"
token_sha256="${token_sha256%% *}"
unset CODEX_APP_SERVER_TOKEN

agent-codex-seed-projects \
  /opt/agent-codex/project-seeds \
  "$PROJECTS_ROOT_DIR" \
  "$CODEX_HOME"

exec codex app-server \
  --ws-auth capability-token \
  --ws-token-sha256 "$token_sha256" \
  "$@"