@kbediako/codex-orchestrator 0.1.38 → 0.2.1

package/dist/orchestrator/src/cli/control/controlWatcher.js

@@ -13,6 +13,7 @@ export class ControlWatcher {
     lastControlSeq = 0;
     paused = false;
     lastPauseRequestId = null;
+    lastPauseIntentId = null;
     lastPauseReason = null;
     cancelRequested = false;
     failureRequested = false;
@@ -91,19 +92,24 @@ export class ControlWatcher {
     }
     async handlePause(snapshot) {
         const nextRequestId = snapshot.latest_action?.request_id ?? null;
+        const nextIntentId = snapshot.latest_action?.intent_id ?? null;
         const nextReason = snapshot.latest_action?.reason ?? null;
-        if (this.paused && nextRequestId === this.lastPauseRequestId && nextReason === this.lastPauseReason) {
+        if (this.paused &&
+            nextRequestId === this.lastPauseRequestId &&
+            nextIntentId === this.lastPauseIntentId &&
+            nextReason === this.lastPauseReason) {
             return;
         }
         const wasPaused = this.paused;
         this.paused = true;
         this.lastPauseRequestId = nextRequestId;
+        this.lastPauseIntentId = nextIntentId;
         this.lastPauseReason = nextReason;
         const nextDetail = nextReason ?? 'paused';
         if (!wasPaused || this.manifest.status_detail !== nextDetail) {
             this.manifest.status_detail = nextDetail;
             if (!wasPaused) {
-                appendSummary(this.manifest, 'Run paused by control request.');
+                appendSummary(this.manifest, `Run paused by control request${formatTraceSummary(snapshot)}.`);
             }
             await this.persist();
         }
@@ -112,6 +118,7 @@ export class ControlWatcher {
             actor: snapshot.latest_action?.requested_by ?? 'user',
             payload: {
                 request_id: snapshot.latest_action?.request_id ?? null,
+                intent_id: snapshot.latest_action?.intent_id ?? null,
                 control_seq: snapshot.control_seq ?? null,
                 requested_by: snapshot.latest_action?.requested_by ?? null,
                 reason: snapshot.latest_action?.reason ?? null
@@ -124,6 +131,7 @@ export class ControlWatcher {
             payload: {
                 reason: 'control_request',
                 request_id: snapshot.latest_action?.request_id ?? null,
+                intent_id: snapshot.latest_action?.intent_id ?? null,
                 control_seq: snapshot.control_seq ?? null,
                 requested_reason: snapshot.latest_action?.reason ?? null
             },
@@ -136,15 +144,17 @@ export class ControlWatcher {
         }
         this.paused = false;
         this.lastPauseRequestId = null;
+        this.lastPauseIntentId = null;
         this.lastPauseReason = null;
         this.manifest.status_detail = null;
-        appendSummary(this.manifest, 'Run resumed by control request.');
+        appendSummary(this.manifest, `Run resumed by control request${formatTraceSummary(snapshot)}.`);
         await this.persist();
         await this.safeAppend({
             event: 'run_resumed',
             actor: 'runner',
             payload: {
                 request_id: snapshot.latest_action?.request_id ?? null,
+                intent_id: snapshot.latest_action?.intent_id ?? null,
                 control_seq: snapshot.control_seq ?? null,
                 requested_by: snapshot.latest_action?.requested_by ?? null,
                 requested_reason: snapshot.latest_action?.reason ?? null
@@ -157,13 +167,14 @@ export class ControlWatcher {
             return;
         }
         this.cancelRequested = true;
-        appendSummary(this.manifest, 'Run cancellation requested.');
+        appendSummary(this.manifest, `Run cancellation requested${formatTraceSummary(snapshot)}.`);
         await this.persist();
         await this.safeAppend({
             event: 'run_canceled',
             actor: 'runner',
             payload: {
                 request_id: snapshot.latest_action?.request_id ?? null,
+                intent_id: snapshot.latest_action?.intent_id ?? null,
                 control_seq: snapshot.control_seq ?? null,
                 requested_by: snapshot.latest_action?.requested_by ?? null,
                 requested_reason: snapshot.latest_action?.reason ?? null
@@ -177,7 +188,7 @@ export class ControlWatcher {
         }
         this.failureRequested = true;
         this.manifest.status_detail = snapshot.latest_action?.reason ?? 'control_failed';
-        appendSummary(this.manifest, 'Run failed by control request.');
+        appendSummary(this.manifest, `Run failed by control request${formatTraceSummary(snapshot)}.`);
         await this.persist();
         await this.safeAppend({
             event: 'run_failed',
@@ -185,6 +196,7 @@ export class ControlWatcher {
             payload: {
                 reason: 'control_request',
                 request_id: snapshot.latest_action?.request_id ?? null,
+                intent_id: snapshot.latest_action?.intent_id ?? null,
                 control_seq: snapshot.control_seq ?? null,
                 requested_by: snapshot.latest_action?.requested_by ?? null,
                 requested_reason: snapshot.latest_action?.reason ?? null
@@ -220,3 +232,59 @@ async function readControlFile(pathname) {
 function delay(ms) {
     return new Promise((resolve) => setTimeout(resolve, ms));
 }
+function formatTraceSummary(snapshot) {
+    const intentId = encodeTraceId(snapshot.latest_action?.intent_id);
+    const requestId = encodeTraceId(snapshot.latest_action?.request_id);
+    const parts = [];
+    if (intentId) {
+        parts.push(`intent_id=${intentId}`);
+    }
+    if (requestId) {
+        parts.push(`request_id=${requestId}`);
+    }
+    if (parts.length === 0) {
+        return '';
+    }
+    return ` (${parts.join(', ')})`;
+}
+function encodeTraceId(value) {
+    if (typeof value !== 'string') {
+        return '';
+    }
+    const trimmed = value.trim();
+    if (!trimmed) {
+        return '';
+    }
+    const bounded = truncateToCodePoints(sanitizeUnpairedSurrogates(trimmed), 160);
+    return encodeURIComponent(bounded);
+}
+function sanitizeUnpairedSurrogates(value) {
+    let sanitized = '';
+    for (let index = 0; index < value.length; index += 1) {
+        const codeUnit = value.charCodeAt(index);
+        if (codeUnit >= 0xd800 && codeUnit <= 0xdbff) {
+            const nextCodeUnit = value.charCodeAt(index + 1);
+            if (nextCodeUnit >= 0xdc00 && nextCodeUnit <= 0xdfff) {
+                sanitized += value[index] + value[index + 1];
+                index += 1;
+            }
+            else {
+                sanitized += '\uFFFD';
+            }
+            continue;
+        }
+        if (codeUnit >= 0xdc00 && codeUnit <= 0xdfff) {
+            sanitized += '\uFFFD';
+            continue;
+        }
+        sanitized += value[index];
+    }
+    return sanitized;
+}
+function truncateToCodePoints(value, maxCodePoints) {
+    const chars = Array.from(value);
+    if (chars.length <= maxCodePoints) {
+        return value;
+    }
+    return chars.slice(0, maxCodePoints).join('');
+}

package/dist/orchestrator/src/cli/control/delegationRegisterController.js

@@ -0,0 +1,35 @@
+export async function handleDelegationRegisterRequest(context) {
+    const method = context.req.method ?? 'GET';
+    const pathname = new URL(context.req.url ?? '/', 'http://localhost').pathname;
+    if (pathname !== '/delegation/register' || method !== 'POST') {
+        return false;
+    }
+    const body = await context.readRequestBody();
+    const token = readStringValue(body, 'token');
+    const parentRunId = readStringValue(body, 'parent_run_id', 'parentRunId');
+    const childRunId = readStringValue(body, 'child_run_id', 'childRunId');
+    if (!token || !parentRunId || !childRunId) {
+        writeDelegationRegisterResponse(context.res, 400, { error: 'missing_delegation_fields' });
+        return true;
+    }
+    const record = context.delegationTokens.register(token, parentRunId, childRunId);
+    await context.persistDelegationTokens();
+    writeDelegationRegisterResponse(context.res, 200, {
+        status: 'registered',
+        token_id: record.token_id
+    });
+    return true;
+}
+function writeDelegationRegisterResponse(res, status, body) {
+    res.writeHead(status, { 'Content-Type': 'application/json' });
+    res.end(JSON.stringify(body));
+}
+function readStringValue(record, ...keys) {
+    for (const key of keys) {
+        const value = record[key];
+        if (typeof value === 'string' && value.trim().length > 0) {
+            return value.trim();
+        }
+    }
+    return undefined;
+}

package/dist/orchestrator/src/cli/control/dynamicToolBridgePolicy.js

@@ -0,0 +1,139 @@
+const ALL_DYNAMIC_TOOL_BRIDGE_ACTIONS = new Set([
+    'status',
+    'pause',
+    'resume',
+    'cancel'
+]);
+const DEFAULT_ALLOWED_SOURCE_IDS = new Set(['appserver_dynamic_tool']);
+const SOURCE_ID_KEYS = ['id', 'source_id', 'sourceId', 'bridge_source', 'bridgeSource'];
+const FLAT_SOURCE_KEYS = ['bridge_source', 'bridgeSource', 'source_id', 'sourceId'];
+export function evaluateDynamicToolBridgeRequest(input) {
+    const policy = resolveDynamicToolBridgePolicy(input.featureToggles ?? null);
+    if (!policy.enabled) {
+        return { ok: false, error: 'dynamic_tool_bridge_disabled', policy };
+    }
+    if (policy.killSwitch) {
+        return { ok: false, error: 'dynamic_tool_bridge_kill_switched', policy };
+    }
+    const source = resolveDynamicToolBridgeSource(input.args);
+    if (source.kind === 'missing') {
+        return { ok: false, error: 'dynamic_tool_bridge_source_missing', policy };
+    }
+    if (source.kind === 'invalid') {
+        return { ok: false, error: 'dynamic_tool_bridge_source_invalid', policy };
+    }
+    if (!policy.allowedSourceIds.has(source.sourceId)) {
+        return { ok: false, error: 'dynamic_tool_bridge_source_not_allowed', policy };
+    }
+    if (!policy.allowedActions.has(input.action)) {
+        return { ok: false, error: 'dynamic_tool_bridge_action_not_allowed', policy };
+    }
+    return { ok: true, policy, sourceId: source.sourceId };
+}
+export function resolveDynamicToolBridgePolicy(featureToggles) {
+    const toggles = featureToggles ?? {};
+    const direct = readRecordValue(toggles, 'dynamic_tool_bridge');
+    const coordinator = readRecordValue(toggles, 'coordinator');
+    const nested = coordinator ? readRecordValue(coordinator, 'dynamic_tool_bridge') : undefined;
+    const policy = nested ?? direct ?? {};
+    const allowedActions = normalizeAllowedActions(readStringArrayValue(policy, 'allowed_actions', 'allowedActions', 'action_allowlist', 'actionAllowlist'));
+    const allowedSources = normalizeAllowedSources(readStringArrayValue(policy, 'allowed_sources', 'allowedSources', 'source_allowlist', 'sourceAllowlist'));
+    return {
+        configured: Boolean(nested || direct),
+        enabled: readBooleanValue(policy, 'enabled') ?? false,
+        killSwitch: readBooleanValue(policy, 'kill_switch', 'killSwitch') ?? false,
+        allowedActions,
+        allowedSourceIds: allowedSources
+    };
+}
+export function resolveDynamicToolBridgeSource(args) {
+    const hasSourceObject = Object.prototype.hasOwnProperty.call(args, 'source');
+    const rawSource = args.source;
+    if (hasSourceObject && (!rawSource || typeof rawSource !== 'object' || Array.isArray(rawSource))) {
+        return { kind: 'invalid' };
+    }
+    const sourceObject = hasSourceObject ? rawSource : null;
+    const sourceIdFromObject = sourceObject ? readStringValue(sourceObject, ...SOURCE_ID_KEYS) : undefined;
+    const sourceIdFromFlat = readStringValue(args, ...FLAT_SOURCE_KEYS);
+    const sourceId = sourceIdFromObject ?? sourceIdFromFlat;
+    if (sourceId) {
+        return { kind: 'ready', sourceId: sourceId.toLowerCase() };
+    }
+    const hasRecognizedObjectKey = sourceObject !== null && SOURCE_ID_KEYS.some((key) => Object.prototype.hasOwnProperty.call(sourceObject, key));
+    const hasRecognizedFlatKey = FLAT_SOURCE_KEYS.some((key) => Object.prototype.hasOwnProperty.call(args, key));
+    if (hasSourceObject || hasRecognizedObjectKey || hasRecognizedFlatKey) {
+        return { kind: 'invalid' };
+    }
+    return { kind: 'missing' };
+}
+function normalizeAllowedActions(values) {
+    if (!values) {
+        return new Set(ALL_DYNAMIC_TOOL_BRIDGE_ACTIONS);
+    }
+    const allowed = new Set();
+    for (const value of values) {
+        const normalized = value.trim().toLowerCase();
+        if (normalized === 'status' || normalized === 'pause' || normalized === 'resume' || normalized === 'cancel') {
+            allowed.add(normalized);
+        }
+    }
+    return allowed;
+}
+function normalizeAllowedSources(values) {
+    if (!values) {
+        return new Set(DEFAULT_ALLOWED_SOURCE_IDS);
+    }
+    const allowed = new Set();
+    for (const value of values) {
+        const normalized = value.trim().toLowerCase();
+        if (normalized.length > 0) {
+            allowed.add(normalized);
+        }
+    }
+    return allowed;
+}
+function readStringValue(record, ...keys) {
+    for (const key of keys) {
+        const value = record[key];
+        if (typeof value === 'string' && value.trim().length > 0) {
+            return value.trim();
+        }
+    }
+    return undefined;
+}
+function readBooleanValue(record, ...keys) {
+    for (const key of keys) {
+        const value = record[key];
+        if (typeof value === 'boolean') {
+            return value;
+        }
+    }
+    return undefined;
+}
+function readRecordValue(record, key) {
+    const value = record[key];
+    if (value && typeof value === 'object' && !Array.isArray(value)) {
+        return value;
+    }
+    return undefined;
+}
+function readStringArrayValue(record, ...keys) {
+    for (const key of keys) {
+        const value = record[key];
+        if (!Array.isArray(value)) {
+            continue;
+        }
+        const parsed = [];
+        for (const item of value) {
+            if (typeof item !== 'string') {
+                continue;
+            }
+            const trimmed = item.trim();
+            if (trimmed.length > 0) {
+                parsed.push(trimmed);
+            }
+        }
+        return parsed;
+    }
+    return undefined;
+}

package/dist/orchestrator/src/cli/control/eventsSseController.js

@@ -0,0 +1,12 @@
+export function handleEventsSseRequest(context) {
+    context.res.writeHead(200, {
+        'Content-Type': 'text/event-stream',
+        'Cache-Control': 'no-cache',
+        Connection: 'keep-alive'
+    });
+    context.res.write(`: ok\n\n`);
+    context.clients.add(context.res);
+    context.req.on('close', () => {
+        context.clients.delete(context.res);
+    });
+}