@coda-console/codex 1.8.4 → 1.8.5

package/agent/entry.mjs

@@ -1,6 +1,6 @@
 // The Codex agent as Coda starts it (the plugin's `contributes.agents`): the locked codex-acp, run in this process with Coda's
 // patches, which fail the start once the adapter changes. Between it and Coda the entry speaks Coda's protocol for it
-// (waits.mjs, docs/agent-protocol.md): its session instructions become the thread's developer instructions (instructions.mjs),
+// (waits.mjs, docs/agent-protocol.md), and of its own check of a call as that call's (reviews.mjs): its session instructions become the thread's developer instructions (instructions.mjs),
 // and a steer that finds no turn going is answered `promptRequired` (steering.mjs); the models of the model service chosen in
 // Coda join Codex's own (providers.mjs). What Coda wants of Codex beyond ACP is set here: the mode a session starts in, and
 // which Codex program runs, through the account bridge when another plugin chooses the account (accounts.mjs).
@@ -22,6 +22,7 @@ import { promptRequiredCodexSteering } from './steering.mjs';
 import { servedCodexModels } from './providers.mjs';
 import { input, listen, relayedCodexStreams } from './relay.mjs';
 import { CodexWaits } from './waits.mjs';
+import { CodexReviews } from './reviews.mjs';
 import { explainCodexError, reportedCodexFailures } from './errors.mjs';
 import { reportedCodexSleeps } from './sleep.mjs';
 
@@ -48,8 +49,8 @@ if (!env.CODEX_PATH && accountSource(env) && env.CODA_PLUGIN_STATE) {
 
 const version = codexVersion();
 const waits = new CodexWaits({ agentInfo: version ? { name: 'codex', version } : null }), parse = line => { try { return JSON.parse(line); } catch { return null; } };
-const say = message => process.stdout.write(`${JSON.stringify(message)}\n`);
-listen(line => { for (const message of waits.fromAgent(parse(line))) say(explainCodexError(message)); });
+const reviews = new CodexReviews(), say = message => process.stdout.write(`${JSON.stringify(message)}\n`);
+listen(line => { for (const message of waits.fromAgent(parse(line))) for (const each of reviews.fromAgent(message)) say(explainCodexError(each)); });
 readLines(process.stdin).on('line', line => {
   const message = parse(line);
   if (!message || typeof message !== 'object') return;

package/agent/reviews.mjs

@@ -0,0 +1,55 @@
+// Codex's own check of a call before running it (its automatic approval review), said to Coda as part of that call
+// (docs/agent-protocol.md「工具调用的审核」). codex-acp makes each check a call of its own, `Guardian Review`
+// (`guardian_assessment:<id>`), which names the call it checks (`targetItemId`); here it becomes `_meta.coda.review` of that
+// call. A check can begin before codex-acp tells of the call: the call is told then, pending, and codex-acp's own telling of
+// it later is an update of it.
+const record = value => value && typeof value === 'object' && !Array.isArray(value);
+const CHECK = 'guardian_assessment:';
+const STATE = { inProgress: 'reviewing', approved: 'approved', denied: 'denied', aborted: 'denied', timedOut: 'denied' };
+const RISKS = new Set(['low', 'medium', 'high', 'critical']);
+// What the call is, as far as the check says (each kind of action codex-acp 1.12.0 names), until codex-acp tells it. ACP
+// requires a call's title: one the action does not give is said plainly.
+const PLACEHOLDER = {
+  command: a => [a.command, 'execute'],
+  execve: a => [(a.argv?.length ? a.argv : [a.program]).join(' '), 'execute'],
+  writeStdin: a => [`向进程 ${a.processId} 写入输入`, 'execute'],
+  applyPatch: a => [a.files?.length === 1 ? `修改 ${a.files[0]}` : `修改 ${a.files?.length ?? 0} 个文件`, 'edit'],
+  networkAccess: a => [`访问 ${a.target || a.host}`, 'fetch'],
+  mcpToolCall: a => [`MCP ${a.toolName}（${a.connectorName ?? a.server}）`],
+  requestPermissions: a => [a.reason || '申请更多权限'],
+};
+const placeholder = action => {
+  const [title, kind] = PLACEHOLDER[action?.type]?.(action) ?? [];
+  return { title: typeof title === 'string' && title.trim() ? title : '待审核的操作', ...(kind ? { kind } : {}) };
+};
+
+export class CodexReviews {
+  constructor() {
+    // The calls told of, and those told here before codex-acp did, by session.
+    this.told = new Set(); this.early = new Set();
+  }
+  // What codex-acp says, as said to Coda: the same, but a check is said of the call it checks.
+  fromAgent(message) {
+    const u = message?.params?.update;
+    if (message?.method !== 'session/update' || !record(u) || !['tool_call', 'tool_call_update'].includes(u.sessionUpdate)
+      || typeof u.toolCallId !== 'string') return [message];
+    const { sessionId } = message.params, key = id => `${sessionId}\n${id}`;
+    const said = update => ({ ...message, params: { ...message.params, update } });
+    if (!u.toolCallId.startsWith(CHECK)) {
+      if (u.sessionUpdate !== 'tool_call') return [message];
+      if (this.early.delete(key(u.toolCallId))) return [said({ ...u, sessionUpdate: 'tool_call_update' })];
+      this.told.add(key(u.toolCallId));
+      return [message];
+    }
+    // The started event, then the completed one: the later is the last word.
+    const check = record(u.rawOutput) ? u.rawOutput : u.rawInput, target = check?.targetItemId, state = STATE[check?.review?.status];
+    if (typeof target !== 'string' || !target || !state) return [message];
+    const { rationale, riskLevel } = check.review;
+    const review = { state, ...(typeof rationale === 'string' && rationale.trim() ? { reason: rationale.slice(0, 4000) } : {}),
+      ...(RISKS.has(riskLevel) ? { risk: riskLevel } : {}) };
+    const meta = { toolCallId: target, _meta: { coda: { review } } };
+    if (this.told.has(key(target)) || this.early.has(key(target))) return [said({ sessionUpdate: 'tool_call_update', ...meta })];
+    this.early.add(key(target)); this.told.add(key(target));
+    return [said({ sessionUpdate: 'tool_call', ...meta, ...placeholder(check.action), status: 'pending' })];
+  }
+}

package/package.json

@@ -2,8 +2,8 @@
   "name": "@coda-console/codex",
   "id": "codex",
   "displayName": "Codex",
-  "description": "Codex Agent：Coda 自带的入口运行 codex-acp，报告子 Agent 与后台命令。额度与登录由账号来源插件接管；未接入账号来源时使用 Codex 自己的登录面板。",
-  "version": "1.8.4",
+  "description": "Codex Agent：Coda 自带的入口运行 codex-acp，报告子 Agent、后台命令与命令的自动审核。额度与登录由账号来源插件接管；未接入账号来源时使用 Codex 自己的登录面板。",
+  "version": "1.8.5",
   "categories": ["Agent"],
   "dependencies": {
     "@agentclientprotocol/codex-acp": "1.12.0",