`gjݷRdZddlmZddlZddlZddlZddlZddlmZm Z ddl m Z m Z m Z ddlmZddlmZddlmZmZdd lmZej.eZd Zd d d d dZeGddZdZddZdZddZ eGddZ!GddZ"d dZ#d dZ$d!dZ%d"dZ&d#dZ'y)$uISession adapter for codex app-server runtime. Owns one Codex thread per Hermes session. Drives `turn/start`, consumes streaming notifications via CodexEventProjector, handles server-initiated approval requests (apply_patch, exec command), translates cancellation, and returns a clean turn result that AIAgent.run_conversation() can splice into its `messages` list. Lifecycle: session = CodexAppServerSession(cwd="/home/x/proj") session.ensure_started() # spawns + handshake + thread/start result = session.run_turn(user_input="hello") # blocks until turn/completed # result.final_text → assistant text returned to caller # result.projected_messages → list of {role, content, ...} for messages list # result.tool_iterations → how many tool-shaped items completed (skill nudge counter) # result.interrupted → True if Ctrl+C / interrupt_requested fired mid-turn session.close() # tears down subprocess Threading model: the adapter is single-threaded from the caller's perspective. The underlying CodexAppServerClient owns its own reader threads but exposes blocking-with-timeout queues that this adapter polls in a loop, so the run_turn call is synchronous and behaves like AIAgent's existing chat_completions loop. ) annotationsN) dataclassfield)AnyCallableOptional)_format_responses_error)redact_sensitive_text)CodexAppServerClientCodexAppServerError)CodexEventProjector workspace-writezread-only-with-approvalz full-access)autozapproval-required unrestrictedyoloceZdZUdZdZded<eeZded<dZ d ed <d Z d ed <dZ ded<dZ ded<dZ ded<dZded<dZded<dZded<d Zd ed<d Zd ed<y) TurnResultuHResult of one user→assistant→tool turn through the codex app-server.str final_text)default_factoryz list[dict]projected_messagesrinttool_iterationsFbool interruptedN Optional[str]errorturn_id thread_idzOptional[dict[str, Any]]token_usage_lasttoken_usage_totalz Optional[int]model_context_window compacted should_retire)__name__ __module__ __qualname____doc__r__annotations__rlistrrrrr r!r"r#r$r%r&\/root/.hermes/venv/lib/python3.12/site-packages/agent/transports/codex_app_server_session.pyrr@sRJ%*4%@ @OSKE=!G]!#I}#15.526/6*.-.It M4r.r)zzcpt|tr|St|trg}|D]}t|tr"|jr|j |5t|t s||j t|b|j d}|dvrF|j dxs|j dxsd}|s|j t||dvs|j ddjd |Dj}|xsd S|dSt|S) aQCollapse Hermes/OpenAI rich content into app-server text input. The current `turn/start` path sends text items only. TUI image attachment can hand us OpenAI-style content parts, so keep the text/path hints and replace opaque image payloads with a small marker instead of putting a Python list into the `text` field. type>text input_textr2contentr>image image_url input_imagez[image attached]z c3&K|] }|s| ywNr-.0ps r/ z*_coerce_turn_input_text..{s1q11zWhat do you see in this image?) isinstancerr,stripappenddictgetjoin) user_inputpartsitem item_typer2s r/_coerce_turn_input_textrI_s*c"*d# 1D$$::<LL&dD)#LLT+(I22xx'D488I+>D"LLT+CC /0 1 {{1e11779777#28Z8r.) invalid_grantz invalid grantz refresh token refresh_tokenz token refresh token_refreshztoken has expired expired_tokenz expired tokenznot authenticatedunauthenticated unauthorizedz401 unauthorizedzre-authenticatereauthenticatez please log inz please loginz auth profilezno auth profileoauthczdjd|Dj}|sytD] }||vs yy)uReturn a user-friendly re-auth hint if any of the provided strings look like a codex OAuth/token-refresh failure; otherwise None. Used for both `turn/start` JSON-RPC errors and post-mortem stderr inspection when the subprocess exits unexpectedly. Conservative on purpose — we only redirect users to `codex login` when the signal is strong, so unrelated runtime failures still surface verbatim.  c3&K|] }|s| ywr9r-r:s r/r=z*_classify_oauth_failure..s.aA.r>NuCodex authentication failed — your ChatGPT/Codex login looks expired or invalid. Run `codex login` to refresh, then retry. (Fall back to default runtime with `/codex-runtime auto` if the issue persists.))rDlower_OAUTH_REFRESH_FAILURE_HINTS)rFhaystackneedles r/_classify_oauth_failurerYsNxx.5..446H . X @  r.c.eZdZUdZdZded<dZded<y)_ServerRequestRoutingaDefault policies for codex-side approval requests when no interactive callback is wired in. These are only used by tests + cron / non-interactive contexts; the live CLI path passes an approval_callback that defers to tools.approval.prompt_dangerous_approval().Frauto_approve_execauto_approve_apply_patchN)r'r(r)r*r\r+r]r-r.r/r[r[s3 $t#%*d*r.r[c eZdZdZddddddddd ddZddZddZddZdd Zdd Z de d  d d Z d ddd d!dZ d dd d"dZ d#dZd$dZd%dZd%dZd&dZd'dZy)(CodexAppServerSessionuzOne Codex thread per Hermes session, lifetime owned by AIAgent. Not thread-safe — one caller drives it at a time, matching how AIAgent's run_conversation() loop is structured today. The codex client itself can handle interleaved reads/writes via its own threads, but the adapter's state (projector, thread_id, turn counter) is owned by the caller thread. Ncodex)cwd codex_bin codex_homepermission_profileapproval_callbackon_eventrequest_routingclient_factoryc|xstj|_||_||_|xs4t j tjj ddd|_||_ ||_ |xs t|_ |xst|_d|_d|_t#j$|_i|_d|_y)NHERMES_TERMINAL_SECURITY_MODErrF)osgetcwd_cwd _codex_bin _codex_home#_HERMES_TO_CODEX_PERMISSION_PROFILErCenviron_permission_profile_approval_callback _on_eventr[_routingr _client_factory_client _thread_id threadingEvent_interrupt_event_pending_file_changes_closed) selfrarbrcrdrerfrgrhs r/__init__zCodexAppServerSession.__init__s&299; #%  "E"I"I >G!#  #4!'B+@+B -E1E7; )- ) 1 68" r.c|j |jS|j,|j|j|j|_|jj ddt d|ji}|jjd|d }|jd xsi}|jd xs7|jd xs$|jd xs|jd }|s(tddt|jd||_tjd|jdd|j|j|jS)uSpawn the subprocess, do the initialize handshake, and start a thread. Returns the codex thread id. Idempotent — repeated calls return the same thread id.N)rbrchermesz Hermes Agent) client_name client_titleclient_versionraz thread/starttimeoutthreadid sessionIdthreadIdiz8codex thread/start returned no thread id (payload keys: )codemessagez8codex app-server thread started: id=%s profile=%s cwd=%s)rxrwrvrnro initialize_get_hermes_versionrmrequestrCr sortedkeysloggerinforr)r~paramsresult thread_objr!s r/ensure_startedz$CodexAppServerSession.ensure_startedsg ?? &?? " << ////d6F6F0DL  '.0  (#(!3%%nfb%I ZZ)/R NN4  &~~k* &zz+& &zz*%  %&&,V[[]&;%.fsBTT4;;=BsT)forcez codex stderr (last z lines): )rrw stderr_tailrrDr@r len) r~prefixrrexc_strbasetailjoinedredacteds r/_format_error_with_stderrz/CodexAppServerSession._format_error_with_stderrGs*"RiCO#c()0&G9%f << K <<++J7DKBTBB||~K(t<,SYKz(LL K sB B&%B&g@g?gV@) turn_timeoutnotification_poll_timeoutpost_tool_quiet_timeoutct} |j|j |jJ|j|_ |jjt}t|} |jjd|jd|dgdd } | j'dxsij'd|_t+j,|z} d} d}t+j,| kr| s|jj/r$|j1|j(d|_n|jj5s`d j|jj!d} t#| } | | |_n|j dd|_d|_n4|Qt+j,|z |kDr7|j1|j(d|_d|dd|_d|_n|jj7d }|Yt9dD]5}|jj;d }|n|j< |j=|tE||tG|||jI||jK|}|jLr%|jNjQ|jL|jRr)|xjTdz c_*t+j,}|jV|jV|_+tY|jVsd} d|_|j xsd|_8|j[|d}|jj;| }||j'dd}|j< |j=|tE||tG|||jI||jK|}|jLr%|jNjQ|jL|jRr*|xjTdz c_*t+j,}n|jLs |jVd}|jVD|jV|_+tY|jVrd} d|_|j xsd|_|d k(rd} |j'd!xsij'dxsij'd"}|r|d#vr|j'd!xsij'dxsij'd$}|rvt]|t_|}d j|jj!d } t#|| } | | |_d|_n|j d%|||_t+j,| kr| s| s;|j2s/|jVr#|j t@jad&d} | s[|j2sO|j1|j(d|_|j s|j d'|d(|_d|_|S#ttf$r*}|j d||_d|_|cYd}~Sd}~wwxYw#t$rt}d j|jj!d } t#|j$| } | | |_d|_n|j d ||_|cYd}~Sd}~wt$rc}d j|jj!d } t#| } | xs|j d ||_d|_|cYd}~Sd}~wwxYw#t>$rt@jCddYYwxYw#t>$rt@jCddY%wxYw))aSend a user message and block until turn/completed, while forwarding server-initiated approval requests and projecting items into Hermes' messages shape. post_tool_quiet_timeout: if codex emits a tool completion and then goes quiet for this many seconds without emitting another item or `turn/completed`, fast-fail and mark the session for retirement. Mirrors openclaw beta.8's post-tool completion watchdog (#81697) so a wedged codex doesn't burn the full turn deadline. codex app-server startup failedTNz turn/startr2)r1r2)rinput rr(zturn/start failedzturn/start timed outturnrF</codex app-server subprocess exited unexpectedlyrzcodex went silent for z.0fz3s after a tool result; retiring app-server session.rron_event callback raisedexc_infocodex reported turn_abortedmethodrturn/completedrstatus> completedrrzturn ended status=zcodex app-server turn reached deadline after a completed assistant message but before turn/completed; accepting the assistant text as the terminal responsezturn timed out after s)1rrr TimeoutErrorrrr&rwrxr!r{clearr rIrrDrrYrrCr time monotonicis_set_issue_interruptris_alivetake_server_requestrangetake_notificationrtrrdebug_apply_token_usage_notification_apply_compaction_notification_track_pending_file_changeprojectmessagesrextendis_tool_iterationrr_has_turn_aborted_marker_handle_server_requestr rwarning)r~rErrrrr projectoruser_input_textts stderr_blobhintdeadline turn_completelast_tool_completion_atsreq_pendingprojnoter projection turn_statuserr_objerr_msgs r/run_turnzCodexAppServerSession.run_turnns~.     !||'DOO,GGG?? ##%') 1*=" %% $'-GH &BF&&..B33D9>>#l2 48nn)-$$++-%%fnn5%)" <<((*"ii (@(@(DE .{;##'FL#'#A#AI#%$B$FL(,$ (3^^%(??-.%%fnn5%)",.s3434 (,$<<33A3>D q#A"ll<D"c'l"9'3{CS"T'+ii LL44R8'  7w L++/FL37F0+/+I+I"4[M BG,FLKnn)-T&&!! $ NN>  !MV%7%7  ! !&.. 1!%F <<#==+L>;  $(F  E$\2 9913FL $(F M 6# ))DLL$<$=_>)rrc t} |j|j |jJ|j|_ |jjt} |jjdd|jidt%j&|z}d } t%j&|kr| s|jj)r$|j+|j,d|_nZ|jj1s`dj|jjd }t!|}|||_n|j dd|_d|_n|jj3d} | |j5| |jj7|} | $| j9dd} |j: |j;| tC|| tE|| |jG| |jI| } | jJr%|jLjO| jJ| jPr|xjRdz c_)| jTD| jT|_*tW| jTrd} d|_|j xsd|_| dk(rN| j9dxsij9dxsi}|j9dxs |j,|_n| dk(rd} | j9dxsij9dxsi}|j9dxs |j,|_|j9d}|dk(rd|_|j xsd|_n|r|d k7r|j9d!}tY|t[|}dj|jjd }t!||}|||_d|_n|j d"|||_t%j&|kr| s| s[|j.sO|j+|j,d|_|j s|j d#|d$|_d|_|S#ttf$r*}|j d||_d|_|cYd}~Sd}~wwxYw#t$rt}dj|jjd }t!|j"|}|||_d|_n|j d ||_|cYd}~Sd}~wt$rc}dj|jjd }t!|}|xs|j d ||_d|_|cYd}~Sd}~wwxYw#t<$rt>jAddYwxYw)%anTrigger Codex-native history compaction for the current thread. `thread/compact/start` returns immediately; the actual compaction progress streams through the same turn/item notifications as a normal turn. We wait for the matching `turn/completed` so callers can treat a successful return as a completed compaction boundary. rTNzthread/compact/startrrrrrzthread/compact/start failedzthread/compact/start timed outFrrrrrrrrrrrz turn/startedrrrrrrzcompact turn interruptedrrzcompact turn ended status=zcompact turn timed out after r).rrr rrrr&rwrxr!r{rr rrDrrYrrrrrr rrrrrrCrtrrrrrrrrrrrrrrr r)r~rrrrrrrrrrrrrturn_objrrrs r/compact_threadz$CodexAppServerSession.compact_threadsq     !||'DOO,GGG?? ##%')   LL &T__- ! 2>>#l2 nn)-$$++-%%fnn5%)"<<((*"ii (@(@(DE .{;##'FL#'#A#AI#%$B$FL(,$<<33A3>D++D1<<1112D|XXh+F~~)LNN4( ,FD 9 *64 8  + +D 1"**40J""))001D1DE++&&!+&$$0$.$9$9!+J,A,AB$(M)-F& E(EL' HHX.4"99&AGR!)d!3!Ev~~++ $  HHX.4"99&AGR!)d!3!Ev~~&ll84 -/)-F&#)<<#M3MFL [K%?&ll73G5gs;?OPG"&))DLL,D,DR,H"IK27KHD''+ /3,'+'E'E8 F#( Wnn)-`V%7%7  ! !&.. 1!%F <<#==3L>C  $(F  E$\2 9913FL$(F M  $# ))DLL$<$ LL7 = = 7 NN5 6 7s+A BA--!BBc|jy|jdd}|jd}|jdxsi}|dk(r0|j|}|jj|d|iy|dk(r0|j |}|jj|d|iy|d k(r|jj|dd iy|d k(r\|jd xsd}|d k(r!|jj|ddddy|jj|d dddyt j d||jj|dd|y)uiTranslate a codex server request (approval) into Hermes' approval flow, then send the response. Method names verified live against codex 0.130.0 (Apr 2026): item/commandExecution/requestApproval — exec approvals item/fileChange/requestApproval — apply_patch approvals item/permissions/requestApproval — permissions changes (we decline; user controls permission profile in ~/.codex/config.toml). Nrrrrz%item/commandExecution/requestApprovaldecisionzitem/fileChange/requestApprovalz item/permissions/requestApprovaldeclinezmcpServer/elicitation/request serverNamez hermes-toolsaccept)actionr4_metaz Unknown codex server request: %sizUnsupported method: r)rwrC_decide_exec_approvalrespond_decide_apply_patch_approvalrr respond_error)r~reqrridrr server_names r/rz,CodexAppServerSession._handle_server_request1sf <<  2&ggdm"(b < <11&9H LL z8&< = 8 888@H LL z8&< = 9 9 LL z9&= > 6 6!**\28bKn, $$'D4H  $$(TDI NN=v F LL & &&,@*I ' r.c|jjry|jdxsd}|jdxs|jxsd}|jd}d|}|r|d|z }|j |j ||d }t |Sy #t $rtjd Yy wxYw) Nrcommandrraz reasonzCodex requests exec in u — Fallow_permanentz(approval_callback raised on exec requestr) rur\rCrmrs"_approval_choice_to_codex_decisionrr exception)r~rr rar  descriptionchoices r/rz+CodexAppServerSession._decide_exec_approvalks == * ***Y'-2jj;499; H%/u5  U6(+ +K  " " . !00[%1:&AA !  !KL  !s=BB>=B>c(|jjry|j|jd}|jd}|jdxsd}|j |}g}|r|j ||r|j ||r|j d||rdj |nd}|rd |n|rd |nd } |j||d } t| Sy#t$rtjd YywxYw)Nrr  grantRootitemIdrzgrants write to z; zCodex requests to apply a patchz apply_patch: apply_patchFrz'approval_callback raised on apply_patchr) rur]rsrC_lookup_pending_file_changerArDrrrr) r~rr  grant_rootitem_idchange_summarydescription_partsr command_labelrs r/rz2CodexAppServerSession._decide_apply_patch_approvals8 == 1 1  " " . ZZ)FK0Jjj*0bG!==gFN " !((0!((8!((+;J<)HI% +,6  5C-/017}VH-"  !00!$)1 :&AA !  !JK  !sC00DDc||jdd}|jdxsi}|jdxsi}|jddk7ry|jdxsd}|sy|d k(r+|jd xsg}|sd |j|<yi}g}|D]|} t| ts| jd xsijdxsd } |j| ddz|| <| jdxsd} | sl|j | ~dj dt |jD} dj |dd} t|dkDr| dt|dz dz } | r| d| n| |j|<y|dk(r|jj|dyy)uMaintain self._pending_file_changes from item/started + item/completed notifications. Lets the apply_patch approval prompt show what's actually changing — codex's approval params don't carry the data.rrrrGr1 fileChangeNr item/startedchangesz1 change pendingkindupdaterrpathz, c30K|]\}}|d|yw)rSNr-)r;kns r/r=zCCodexAppServerSession._track_pending_file_change..sLda!AaSzLsz, +z moreritem/completed) rCr|r?rBrArDritemsrpop)r~rrrrGrr!kindspathschr"r<countspreviews r/rz0CodexAppServerSession._track_pending_file_changes(B'(#)rzz&!'R 88F | + ((4.&B  ^ #hhy)/RG6H**73$&E!E $!"d+v,"11&9EX#iia014d FF6N(bLLO $YYLfU[[]6KLLFiibq *G5zA~SUa 066*16("WI&v  & &w /' '  & & * *7D 9(r.cH|sy|jj|}|sy|S)aLook up an in-progress fileChange item by id and summarize its changes for the approval prompt. Returns None when we don't have the item cached (e.g. approval arrived before item/started, or fileChange item content not tracked yet).N)r|rC)r~rcacheds r/rz1CodexAppServerSession._lookup_pending_file_changes+ ++//8 r.)rarrbrrcrrdrrezOptional[Callable[..., str]]rfz Optional[Callable[[dict], None]]rgzOptional[_ServerRequestRouting]rhz-Optional[Callable[..., CodexAppServerClient]]returnNoner3r)r3r4)r3z'CodexAppServerSession')rrr3r4)r)rrrrrrr3r) rErrfloatrr6rr6r3r)rr6rr6r3r)r rr3r4)rrBr3r4)rrBr3r)rrBr3r4)rrr3r)r'r(r)r*rrrrrr_STDERR_TAIL_LINESrrrrrrrrrr-r.r/r_r_su" $(,0:>59;?HL## # " # * #8#3#9#F# #N:x  $#M - #M#M#M  #M #MV$+/)- \\ \ $) \ "' \ \B $+/ RR$) R  Rl 78t.'R#:J r.r_ct|tr|jddk7ry|jdxsi}|jdxsi}t|tsy|jd}|jd}t|trt||_t|trt||_|jd}t|t r|d kDr||_yyy) zCapture Codex app-server token usage updates for caller accounting. Codex does not put token usage on turn/completed. It emits a separate thread/tokenUsage/updated notification containing cumulative totals and the latest turn breakdown. rzthread/tokenUsage/updatedNr tokenUsagelasttotalmodelContextWindowr)r?rBrCr"r#rr$)rrr token_usager:r;windows r/rrs dD !TXXh%7;V%V XXh  %2F**\*0bK k4 ( ??6 "D OOG $E$"&t*%#'; __1 2F&#6A:&,#$.r.cbt|tsy|jdxsd}|jdxsi}t|tsy|dk(rPd|_|jdxs |j|_|jdxs |j |_y|d vry|jd xsi}t|tr|jd d k7ryd|_|jdxs |j|_|jdxs |j |_y) aCapture Codex-native context compaction boundaries. Recent app-server builds expose compaction as a ContextCompaction item. Older builds also emit the deprecated thread/compacted notification. Both mean the underlying Codex thread history has been compacted. Nrrrzthread/compactedTrr>r r)rGr1contextCompaction)r?rBrCr%r!r )rrrrrGs r/rrs dD ! XXh  %2F XXh  %2F fd # ##!::j1EV5E5EH-? 77 ::f  #D dD !TXXf%59L%LFzz*-A1A1AFZZ);V^^FNr.c|dvry|dvryy)aaMap Hermes approval choices onto codex's CommandExecutionApprovalDecision / FileChangeApprovalDecision wire values. Hermes returns 'once', 'session', 'always', or 'deny'. Codex expects 'accept', 'acceptForSession', 'decline', or 'cancel' (verified against codex-rs/app-server-protocol/src/protocol/v2/item.rs on codex 0.130.0). >oncer>alwayssessionacceptForSessionrr-)rs r/rrs &&! r.c,|sytD]}||vsyy)aReturn True if `text` contains any of the raw markers codex uses to signal a turn was aborted without emitting `turn/completed`. Codex emits `` (and sometimes ``) as raw text inside agentMessage items when an interrupt or upstream error tears the turn down before the normal completion path fires. Mirrors openclaw beta.8's terminal-marker fix so we don't burn the full turn deadline waiting for a turn/completed that never comes. FT)_TURN_ABORTED_MARKERS)r2markers r/rr%s( ' T> r.c> ddlm}|dS#t$rYywxYw)z=Best-effort Hermes version string for codex's userAgent line.rversionz hermes-agentz0.0.0)importlib.metadatarKrrJs r/rr7s'.~&& s  )rErr3r)rFrr3r)rrrrBr3r4)rrr3r)r2rr3rr5)(r* __future__rloggingrkryr dataclassesrrtypingrrragent.codex_responses_adapterr agent.redactr !agent.transports.codex_app_serverr r &agent.transports.codex_event_projectorr getLoggerr'rr7rprrGrIrVrYr[r_rrrrrr-r.r/rVs0#  (**A.G   8 $ 2!  '#     6>9N 0. ++ +Z Z z-0<@  $r.