livedesk 0.1.207 → 0.1.208

package/hub/src/agents/agent-manager.js

@@ -68,7 +68,9 @@ export function createAgentManager({
       restrictedEnvironment: false,
       livedeskMcpOnly: false,
       selectedDeviceScopeEnforced: false,
-      failClosed: true
+      failClosed: true,
+      verified: false,
+      state: 'unavailable'
     };
     return {
       ...exposedSettings,

package/hub/src/agents/codex-agent-runtime.js

@@ -247,19 +247,35 @@ export function createCodexAgentRuntime({
   const runs = new Map();
   let activeCount = 0;
   let codexModulePromise;
+  let securityVerificationState = 'configured';
   const workspace = path.resolve(dataDir, 'agent-workspace');
   const codexHome = path.resolve(dataDir, 'codex-home');
 
   function securityStatus() {
+    const configured = codexHome !== path.resolve(os.homedir(), '.codex')
+      && typeof createMcpSession === 'function'
+      && Boolean(mcpServerPath);
     return {
       isolatedCodexHome: codexHome !== path.resolve(os.homedir(), '.codex'),
       restrictedEnvironment: true,
       livedeskMcpOnly: typeof createMcpSession === 'function' && Boolean(mcpServerPath),
       selectedDeviceScopeEnforced: typeof createMcpSession === 'function',
-      failClosed: true
+      failClosed: true,
+      verified: configured && securityVerificationState === 'verified',
+      state: configured ? securityVerificationState : 'unavailable'
     };
   }
 
+  async function prepareCodexHome() {
+    try {
+      await ensureCodexHome(codexHome);
+      securityVerificationState = 'verified';
+    } catch (error) {
+      securityVerificationState = 'unavailable';
+      throw error;
+    }
+  }
+
   function assertSecurityConfiguration() {
     const status = securityStatus();
     if (!status.isolatedCodexHome || !status.restrictedEnvironment || !status.livedeskMcpOnly || !status.selectedDeviceScopeEnforced) {
@@ -320,7 +336,7 @@ export function createCodexAgentRuntime({
     let authenticated = 'unknown';
     let detail = '';
     try {
-      await ensureCodexHome(codexHome);
+      await prepareCodexHome();
       const result = await runCli(pathToCli, ['login', 'status'], 5000, safeCodexEnv(codexHome));
       detail = safeText(result.stdout || result.stderr, 300);
       authenticated = /logged in|authenticated|chatgpt/i.test(`${result.stdout}\n${result.stderr}`)
@@ -341,7 +357,7 @@ export function createCodexAgentRuntime({
     if (status.authenticated !== 'signed-in') throw new AgentProviderError('codex-auth-required', 'Sign in with the Codex CLI first.', { status: 401 });
     const settings = await settingsStore.get();
     await mkdir(workspace, { recursive: true });
-    await ensureCodexHome(codexHome);
+    await prepareCodexHome();
     const codex = await createCodexClient({ env: safeCodexEnv(codexHome), config: baseCodexConfig() });
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), Math.min(30000, settings.codexTaskTimeoutMs));
@@ -425,14 +441,14 @@ export function createCodexAgentRuntime({
       const status = await getStatus();
       if (!status.installed) throw new AgentProviderError('codex-sdk-not-installed', 'Codex SDK is not installed.', { status: 503 });
       if (status.authenticated !== 'signed-in') throw new AgentProviderError('codex-auth-required', 'Sign in with the Codex CLI first.', { status: 401 });
-      session = createMcpSession({ runId: run.runId, signal: run.abortController.signal, allowedDeviceIds: input.deviceIds });
+      session = createMcpSession({ runId: run.runId, signal: run.abortController.signal, allowedDeviceIds: input.deviceIds, maxToolCalls: settings.codexMaxToolCalls });
       run.mcpToken = session.token;
       if (run.abortController.signal.aborted) {
         session.cancel();
         if (run.abortReason === 'timeout') throw codexAbortError('codex-run-timeout', 'The Codex task exceeded its timeout.');
         throw Object.assign(new Error('The Codex task was cancelled.'), { name: 'AbortError' });
       }
-      await ensureCodexHome(codexHome);
+      await prepareCodexHome();
       const codex = await createCodexClient({ env: safeCodexEnv(codexHome), config: codexConfig({ mcpServerPath, mcpUrl: session.url, token: session.token, workspace }) });
       const threadOptions = codexThreadOptions(settings, workspace);
       const thread = input.resumeThreadId && settings.codexResumeSessions

package/hub/src/server.js

@@ -215,6 +215,8 @@ const agentMcpRunBatches = new Map();
 const agentMcpRunCleanupTimers = new Map();
 const AGENT_MCP_RUN_TTL_MS = 60 * 60 * 1000;
 const MAX_AGENT_MCP_RUN_RECORDS = 500;
+const DEFAULT_AGENT_MCP_TOOL_CALL_LIMIT = 20;
+const MAX_AGENT_MCP_TOOL_CALL_LIMIT = 100;
 
 function connectedAgentDeviceIds() {
   const devices = remoteHub.listDevices({ includeDataUrl: false });
@@ -247,7 +249,13 @@ function scheduleAgentMcpRunCleanup(runId) {
   agentMcpRunCleanupTimers.set(runId, timer);
 }
 
-function createAgentMcpSession({ runId, signal, allowedDeviceIds: allowedDeviceIdsInput = [] }) {
+function normalizeAgentMcpToolCallLimit(value) {
+  const limit = Number(value);
+  if (!Number.isFinite(limit)) return DEFAULT_AGENT_MCP_TOOL_CALL_LIMIT;
+  return Math.min(MAX_AGENT_MCP_TOOL_CALL_LIMIT, Math.max(1, Math.floor(limit)));
+}
+
+function createAgentMcpSession({ runId, signal, allowedDeviceIds: allowedDeviceIdsInput = [], maxToolCalls }) {
   const token = crypto.randomBytes(32).toString('hex');
   const allowedDeviceIds = createAgentDeviceScope(allowedDeviceIdsInput);
   const initialResolution = resolveAgentTargetIds({ allowedDeviceIds, connectedDeviceIds: connectedAgentDeviceIds() });
@@ -260,6 +268,9 @@ function createAgentMcpSession({ runId, signal, allowedDeviceIds: allowedDeviceI
     runId: String(runId || ''),
     signal,
     allowedDeviceIds,
+    toolCallCount: 0,
+    maxToolCalls: normalizeAgentMcpToolCallLimit(maxToolCalls),
+    toolLimitReached: false,
     cancelled: false,
     cancel() {
       if (this.cancelled) return;
@@ -300,6 +311,13 @@ function validateAgentMcpArguments(name, args) {
 
 async function dispatchAgentMcpTool(session, name, args = {}) {
   if (session.cancelled || session.signal?.aborted) return { ok: false, error: 'cancelled-by-user' };
+  // This check runs synchronously before the first await, so concurrent Node
+  // requests cannot pass the same remaining budget and queue extra Client work.
+  if (session.toolCallCount >= session.maxToolCalls) {
+    session.toolLimitReached = true;
+    return { ok: false, error: 'codex-tool-limit-reached' };
+  }
+  session.toolCallCount += 1;
   const validationError = validateAgentMcpArguments(name, args);
   if (validationError) return { ok: false, error: validationError };
   if (name === 'livedesk.list_devices') {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "livedesk",
-  "version": "0.1.207",
+  "version": "0.1.208",
   "description": "LiveDesk Hub and client launcher",
   "type": "module",
   "bin": {