mirror of
https://github.com/openai/codex.git
synced 2026-10-19 17:28:46 +00:00
## Why The TUI automatically canceled MCP user verification requests, preventing users from completing verification and approving them. ## What changed - Show verification prompts for active and inactive threads, with actions to verify and approve or cancel. - Run approved verification through the local app-server's `userVerification/verify` RPC and return the proof to the original request. Cancel on failure and show a warning in the requesting thread; remote workspaces remain unsupported. - Deduplicate prompts, preserve foreground streaming when another thread requests verification, and surface queued prompts when returning from a side conversation. - Cancel verification when its thread is discarded and ignore stale results after cancellation. ## Testing Add RPC, routing, and snapshot tests covering successful verification, unsupported binaries and remote workspaces, cancellation and late proofs, prompt replay, side conversation switching, and foreground stream preservation. GitOrigin-RevId: 2ae12f47c443e17de25f4ec033f6078ac28b1e03
139 lines
4.3 KiB
Rust
139 lines
4.3 KiB
Rust
//! Convenience sender for app events and common outbound TUI commands.
|
|
//!
|
|
//! This wraps the raw channel so call sites can submit typed `AppCommand`s
|
|
//! without duplicating event construction or session logging behavior.
|
|
|
|
use std::path::PathBuf;
|
|
|
|
use crate::app_command::AppCommand;
|
|
use crate::app_command::UserVerificationResponse;
|
|
use codex_app_server_protocol::CommandExecutionApprovalDecision;
|
|
use codex_app_server_protocol::FileChangeApprovalDecision;
|
|
use codex_app_server_protocol::McpServerElicitationAction;
|
|
use codex_app_server_protocol::RequestId as AppServerRequestId;
|
|
use codex_app_server_protocol::ReviewTarget;
|
|
use codex_app_server_protocol::ToolRequestUserInputResponse;
|
|
use codex_protocol::ThreadId;
|
|
use codex_protocol::request_permissions::RequestPermissionsResponse;
|
|
use tokio::sync::mpsc::UnboundedSender;
|
|
|
|
use crate::app_event::AppEvent;
|
|
use crate::session_log;
|
|
|
|
#[derive(Clone, Debug)]
|
|
pub(crate) struct AppEventSender {
|
|
pub app_event_tx: UnboundedSender<AppEvent>,
|
|
}
|
|
|
|
impl AppEventSender {
|
|
pub(crate) fn new(app_event_tx: UnboundedSender<AppEvent>) -> Self {
|
|
Self { app_event_tx }
|
|
}
|
|
|
|
/// Send an event to the app event channel. If it fails, we swallow the
|
|
/// error and log it.
|
|
pub(crate) fn send(&self, event: AppEvent) {
|
|
// Record inbound events for high-fidelity session replay.
|
|
// Avoid double-logging Ops; those are logged at the point of submission.
|
|
if !matches!(event, AppEvent::CodexOp(_)) {
|
|
session_log::log_inbound_app_event(&event);
|
|
}
|
|
if let Err(e) = self.app_event_tx.send(event) {
|
|
tracing::error!("failed to send event: {e}");
|
|
}
|
|
}
|
|
|
|
pub(crate) fn interrupt(&self) {
|
|
self.send(AppEvent::CodexOp(AppCommand::interrupt()));
|
|
}
|
|
|
|
pub(crate) fn compact(&self) {
|
|
self.send(AppEvent::CodexOp(AppCommand::compact()));
|
|
}
|
|
|
|
pub(crate) fn set_thread_name(&self, name: String) {
|
|
self.send(AppEvent::CodexOp(AppCommand::set_thread_name(name)));
|
|
}
|
|
|
|
pub(crate) fn review(&self, target: ReviewTarget) {
|
|
self.send(AppEvent::CodexOp(AppCommand::review(target)));
|
|
}
|
|
|
|
pub(crate) fn list_skills(&self, cwds: Vec<PathBuf>, force_reload: bool) {
|
|
self.send(AppEvent::CodexOp(AppCommand::list_skills(
|
|
cwds,
|
|
force_reload,
|
|
)));
|
|
}
|
|
|
|
pub(crate) fn user_input_answer(&self, id: String, response: ToolRequestUserInputResponse) {
|
|
self.send(AppEvent::CodexOp(AppCommand::user_input_answer(
|
|
id, response,
|
|
)));
|
|
}
|
|
|
|
pub(crate) fn exec_approval(
|
|
&self,
|
|
thread_id: ThreadId,
|
|
id: String,
|
|
decision: CommandExecutionApprovalDecision,
|
|
) {
|
|
self.send(AppEvent::SubmitThreadOp {
|
|
thread_id,
|
|
op: AppCommand::exec_approval(id, /*turn_id*/ None, decision),
|
|
});
|
|
}
|
|
|
|
pub(crate) fn request_permissions_response(
|
|
&self,
|
|
thread_id: ThreadId,
|
|
id: String,
|
|
response: RequestPermissionsResponse,
|
|
) {
|
|
self.send(AppEvent::SubmitThreadOp {
|
|
thread_id,
|
|
op: AppCommand::request_permissions_response(id, response),
|
|
});
|
|
}
|
|
|
|
pub(crate) fn patch_approval(
|
|
&self,
|
|
thread_id: ThreadId,
|
|
id: String,
|
|
decision: FileChangeApprovalDecision,
|
|
) {
|
|
self.send(AppEvent::SubmitThreadOp {
|
|
thread_id,
|
|
op: AppCommand::patch_approval(id, decision),
|
|
});
|
|
}
|
|
|
|
pub(crate) fn resolve_elicitation(
|
|
&self,
|
|
thread_id: ThreadId,
|
|
server_name: String,
|
|
request_id: AppServerRequestId,
|
|
decision: McpServerElicitationAction,
|
|
content: Option<serde_json::Value>,
|
|
meta: Option<serde_json::Value>,
|
|
) {
|
|
self.send(AppEvent::SubmitThreadOp {
|
|
thread_id,
|
|
op: AppCommand::resolve_elicitation(server_name, request_id, decision, content, meta),
|
|
});
|
|
}
|
|
|
|
pub(crate) fn resolve_user_verification(
|
|
&self,
|
|
thread_id: ThreadId,
|
|
server_name: String,
|
|
request_id: AppServerRequestId,
|
|
response: UserVerificationResponse,
|
|
) {
|
|
self.send(AppEvent::SubmitThreadOp {
|
|
thread_id,
|
|
op: AppCommand::resolve_user_verification(server_name, request_id, response),
|
|
});
|
|
}
|
|
}
|