mtech-ai-local-runner 0.1.23 → 0.1.25

package/README.md

@@ -10,6 +10,29 @@ The package stores safe runner configuration locally and keeps OAuth refresh cre
 
 Public npm installation requires no npm account or publishing OTP. Setup requires Gateway OAuth login, and local Claude Code must already be authenticated (`claude auth status`).
 
+## 0.1.25: scoped reads and blocked diagnostics
+
+Codex receives explicit file-scoped ai_local read/search guidance; launch and
+Gateway reporting remain host duties. Valid blocked reports now retain bounded
+report counts and identity comparisons in events and terminal results. They
+remain blocked, and multiple reports still fail closed. Fake-data integration
+checks generated settings with the actual scoped server; native model-visible
+tool exposure still needs a separately approved actual attempt. Foreground
+installation does not run Codex or update the daemon.
+
+## 0.1.24: bounded report identity diagnostics
+
+Failed report validation records pair counts for same/different wire item IDs
+and exact text, using at most 64 transient keyed samples. Raw IDs, text, keys
+and hashes are never included in these diagnostics. Sampling does not limit
+actual task duration or messages. Multiple reports still fail; none are chosen,
+merged or deduplicated.
+
+These observations distinguish wire-output patterns, not model-generation
+identity: the inspected exec serializer assigns fresh CLI IDs. Earlier failures
+cannot be reclassified without missing identity evidence. Publication and
+foreground installation do not rerun Codex or update the daemon.
+
 ## 0.1.23: separate progress from the final report
 
 Codex receives native-message instructions: optional progress is plain text and

package/dist/src/adapters/codex/prompt-compiler.js

@@ -1,6 +1,6 @@
 import { compilePrompt as compileBrief } from "../prompt-compiler.js";
 export function compileCodexPrompt(taskPackage, label) {
-    return `${compileBrief(taskPackage, { workItemLabel: label, progressReporting: "native_messages" })}\n\nUse only the ai_local job tools for repository reads, edits and approved tests. Native filesystem, commands, web, images and delegation are unavailable or denied. A denied tool is a scope boundary, never a reason to try another path. If required work cannot proceed, return the structured blocked report.`;
+    return `${compileBrief(taskPackage, { workItemLabel: label, progressReporting: "native_messages" })}\n\nUse only the ai_local job tools for repository reads, edits and approved tests. For reading, use server ai_local's local_read({path: "docs/example.md"}) or local_search({path: "docs/example.md", query: "text"}) with checkout-relative paths. In a read-only task, use only read/search tools; the Runner enforces the approved paths and operations. A denied native cwd is intentional: it is a private control directory, not the source checkout. Native filesystem, commands, web, images and delegation are unavailable or denied. A denied tool is a scope boundary, never a reason to try another path. Do not repeat host orchestration: claim, shadow, fingerprints, binding, administrator checks, launches, Gateway usage and Job reporting belong to the Runner/host, even when described in the objective. Perform only the assigned repository work and report evidence you actually observed. Do not claim that no model call occurred. If the required tool is unavailable, emit one final structured blocked report naming the missing tool and unfinished repository work; do not request or attempt a new launch.`;
 }
 export const CODEX_REPORT_SCHEMA = {
     type: "object", additionalProperties: false, required: ["status", "report", "evidence", "pending_work"],

package/dist/src/adapters/codex/stream-parser.js

@@ -1,3 +1,4 @@
+import { createHmac, randomBytes } from "node:crypto";
 import { completionEnvelope, completionEvent } from "../completion-report.js";
 function record(value) {
     return value !== null && typeof value === "object" && !Array.isArray(value)
@@ -22,6 +23,8 @@ export class CodexStreamParser {
     report;
     messages = 0;
     candidates = 0;
+    identityKey = randomBytes(32);
+    reportSamples = [];
     parse(line) {
         if (this.stopped)
             return [];
@@ -50,8 +53,17 @@ export class CodexStreamParser {
             if (event.type === "item.completed" && item.type === "agent_message") {
                 this.messages += 1;
                 this.report = finalReport(item.text);
-                if (["completed", "blocked"].includes(this.report.eventType))
+                if (["completed", "blocked"].includes(this.report.eventType)) {
                     this.candidates += 1;
+                    // Bounded diagnostic sample only. Neither raw IDs nor text digests
+                    // leave this parser, and sampling never changes report acceptance.
+                    if (this.reportSamples.length < 64) {
+                        const digest = (domain, value) => createHmac("sha256", this.identityKey).update(domain).update(value).digest("hex");
+                        const id = typeof item.id === "string" && item.id.length > 0 && item.id.length <= 256
+                            ? digest("id:", item.id) : undefined;
+                        this.reportSamples.push({ id, text: digest("text:", String(item.text)) });
+                    }
+                }
             }
         }
         if (event.type !== "turn.completed")
@@ -63,6 +75,11 @@ export class CodexStreamParser {
             : this.candidates > 1 ? this.reportFailure("CODEX_COMPLETION_REPORT_MULTIPLE")
                 : this.report && ["completed", "blocked"].includes(this.report.eventType) ? this.report
                     : this.reportFailure("CODEX_COMPLETION_REPORT_NOT_FINAL");
+        if (terminal.eventType === "blocked")
+            terminal.payload = { ...terminal.payload, completion_report: {
+                    version: "codex-completion-report-v1", code: "CODEX_COMPLETION_REPORT_BLOCKED", agent_message_count: this.messages,
+                    valid_report_count: this.candidates, invalid_message_count: this.messages - this.candidates, identity: this.reportIdentity(),
+                } };
         const usage = record(event.usage);
         const observed = {};
         for (const field of ["input_tokens", "cached_input_tokens", "output_tokens"]) {
@@ -89,11 +106,41 @@ export class CodexStreamParser {
         return { eventType: "failed", summary: summaries[code], payload: { completion_report: {
                     version: "codex-completion-report-v1", code, agent_message_count: this.messages,
                     valid_report_count: this.candidates, invalid_message_count: this.messages - this.candidates,
+                    identity: this.reportIdentity(),
                 } } };
     }
+    reportIdentity() {
+        const counts = { same_item_same_text_pairs: 0, same_item_different_text_pairs: 0,
+            different_item_same_text_pairs: 0, different_item_different_text_pairs: 0 };
+        for (let i = 0; i < this.reportSamples.length; i++) {
+            const a = this.reportSamples[i];
+            if (!a.id)
+                continue;
+            for (let j = i + 1; j < this.reportSamples.length; j++) {
+                const b = this.reportSamples[j];
+                if (!b.id)
+                    continue;
+                if (a.id === b.id) {
+                    if (a.text === b.text)
+                        counts.same_item_same_text_pairs++;
+                    else
+                        counts.same_item_different_text_pairs++;
+                }
+                else if (a.text === b.text)
+                    counts.different_item_same_text_pairs++;
+                else
+                    counts.different_item_different_text_pairs++;
+            }
+        }
+        return { version: "codex-report-identity-v1", sampled_reports: this.reportSamples.length,
+            unsampled_reports: this.candidates - this.reportSamples.length,
+            missing_item_id_reports: this.reportSamples.filter(sample => !sample.id).length, ...counts };
+    }
     finish(event) {
         this.stopped = true;
         this.report = undefined;
+        this.reportSamples.length = 0;
+        this.identityKey.fill(0);
         return [event];
     }
 }

package/dist/src/adapters/completion-report.js

@@ -3,22 +3,44 @@ const MAX_EVIDENCE_ITEMS = 20;
 const MAX_EVIDENCE_CHARS = 500;
 const MAX_REPORT_ENVELOPE_CHARS = 16_000;
 const REPORT_FAILURE_CODES = ["CODEX_COMPLETION_REPORT_MISSING", "CODEX_COMPLETION_REPORT_INVALID", "CODEX_COMPLETION_REPORT_MULTIPLE", "CODEX_COMPLETION_REPORT_NOT_FINAL", "CODEX_TURN_INCOMPLETE"];
+const REPORT_DIAGNOSTIC_CODES = [...REPORT_FAILURE_CODES, "CODEX_COMPLETION_REPORT_BLOCKED"];
+/** Pair counts only; no item IDs, text, stable digests or arbitrary keys. */
+function reportIdentityDiagnostic(value, valid) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return undefined;
+    const d = value;
+    const keys = ["sampled_reports", "unsampled_reports", "missing_item_id_reports", "same_item_same_text_pairs",
+        "same_item_different_text_pairs", "different_item_same_text_pairs", "different_item_different_text_pairs"];
+    if (d.version !== "codex-report-identity-v1" || keys.some(key => typeof d[key] !== "number" || !Number.isSafeInteger(d[key]) || Number(d[key]) < 0))
+        return undefined;
+    const sampled = Number(d.sampled_reports), missing = Number(d.missing_item_id_reports);
+    if (sampled !== Math.min(valid, 64) || Number(d.unsampled_reports) !== valid - sampled || missing > sampled)
+        return undefined;
+    const pairs = keys.slice(3).map(key => Number(d[key]));
+    const identified = sampled - missing, expected = identified * (identified - 1) / 2;
+    if (pairs.some(count => count > expected) || pairs.reduce((sum, count) => sum + count, 0) !== expected)
+        return undefined;
+    return { version: "codex-report-identity-v1", ...Object.fromEntries(keys.map(key => [key, d[key]])) };
+}
 /** Diagnostic metadata only, never completion authority. Copy no provider text. */
 export function completionReportDiagnostic(value) {
     if (!value || typeof value !== "object" || Array.isArray(value))
         return undefined;
     const d = value, code = d.code;
     const messages = d.agent_message_count, valid = d.valid_report_count, invalid = d.invalid_message_count;
-    if (d.version !== "codex-completion-report-v1" || typeof code !== "string" || !REPORT_FAILURE_CODES.includes(code)
+    if (d.version !== "codex-completion-report-v1" || typeof code !== "string" || !REPORT_DIAGNOSTIC_CODES.includes(code)
         || typeof messages !== "number" || !Number.isSafeInteger(messages) || messages < 0
         || typeof valid !== "number" || !Number.isSafeInteger(valid) || valid < 0 || valid > messages
         || typeof invalid !== "number" || !Number.isSafeInteger(invalid) || invalid !== messages - valid
         || code === "CODEX_COMPLETION_REPORT_MISSING" && messages !== 0
         || code === "CODEX_COMPLETION_REPORT_INVALID" && (messages === 0 || valid !== 0)
         || code === "CODEX_COMPLETION_REPORT_MULTIPLE" && valid < 2
-        || code === "CODEX_COMPLETION_REPORT_NOT_FINAL" && (valid !== 1 || invalid === 0))
+        || code === "CODEX_COMPLETION_REPORT_NOT_FINAL" && (valid !== 1 || invalid === 0)
+        || code === "CODEX_COMPLETION_REPORT_BLOCKED" && valid !== 1)
         return undefined;
-    return { version: "codex-completion-report-v1", code, agent_message_count: messages, valid_report_count: valid, invalid_message_count: invalid };
+    const identity = reportIdentityDiagnostic(d.identity, valid);
+    return { version: "codex-completion-report-v1", code, agent_message_count: messages, valid_report_count: valid, invalid_message_count: invalid,
+        ...(identity ? { identity } : {}) };
 }
 export const COMPLETION_REPORT_NOTICE = "Do the assigned work yourself using the available tools; do not delegate or start background work. " +
     "Do not report completed while waiting for results, tests, or another agent. " +

package/dist/src/daemon/execution-coordinator.js

@@ -269,7 +269,9 @@ export class ExecutionCoordinator {
                 clearInterval(heartbeatTimer);
         }
         const status = terminal.eventType === "completed" ? "completed" : terminal.eventType === "cancelled" ? "cancelled" : terminal.eventType === "blocked" || terminal.eventType === "scope_conflict" ? "blocked" : "failed";
-        const reportDiagnostic = status === "failed" ? completionReportDiagnostic(terminal.payload?.completion_report) : undefined;
+        const diagnostic = status === "failed" || terminal.eventType === "blocked" ? completionReportDiagnostic(terminal.payload?.completion_report) : undefined;
+        const reportDiagnostic = diagnostic && (terminal.eventType === "blocked"
+            ? diagnostic.code === "CODEX_COMPLETION_REPORT_BLOCKED" : diagnostic.code !== "CODEX_COMPLETION_REPORT_BLOCKED") ? diagnostic : undefined;
         await this.deps.gateway.complete({ jobId: job.id, generation: job.generation, leaseToken: job.leaseToken, status, result: { binding_id: binding.bindingId, event_type: terminal.eventType, summary: terminal.summary, ...(failureDiagnostic ? { execution_failure: { ...failureDiagnostic } } : {}), ...(reportDiagnostic ? { completion_report: reportDiagnostic } : {}), ...(adapter.securityReceipt?.() ? { security_receipt: adapter.securityReceipt() } : {}) } });
         await this.deps.state.clear();
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mtech-ai-local-runner",
-  "version": "0.1.23",
+  "version": "0.1.25",
   "private": false,
   "license": "UNLICENSED",
   "bin": {