codex: fix CI failure on PR #15150

Switch the remaining TUI login restriction callsite to the explicit client path so codex-tui builds after removing the no-client auth wrapper.

Co-authored-by: Codex <noreply@openai.com>

Author: aibrahim-oai

codex-rs/tui/src/lib.rs

@@ -13,7 +13,9 @@ use codex_core::CodexAuth;
 use codex_core::INTERACTIVE_SESSION_SOURCES;
 use codex_core::RolloutRecorder;
 use codex_core::ThreadSortKey;
+use codex_core::auth::AuthConfig;
 use codex_core::auth::AuthMode;
+use codex_core::auth::enforce_login_restrictions_with_client;
 use codex_core::check_execpolicy_for_warnings;
 use codex_core::config::Config;
 use codex_core::config::ConfigBuilder;
@@ -452,7 +454,15 @@ pub async fn run_main(
     }
 
     #[allow(clippy::print_stderr)]
-    if let Err(err) = enforce_login_restrictions(&config) {
+    if let Err(err) = enforce_login_restrictions_with_client(
+        &AuthConfig {
+            codex_home: config.codex_home.clone(),
+            auth_credentials_store_mode: config.cli_auth_credentials_store_mode,
+            forced_login_method: config.forced_login_method,
+            forced_chatgpt_workspace_id: config.forced_chatgpt_workspace_id.clone(),
+        },
+        create_client(),
+    ) {
         eprintln!("{err}");
         std::process::exit(1);
     }