File size: 10,433 Bytes
afa0cbf
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
use std::sync::Arc;
use std::sync::PoisonError;

use codex_code_mode_protocol::CodeModeNestedToolCall;
use codex_code_mode_protocol::grpc as proto;
use codex_code_mode_protocol::host::MAX_FRAME_BYTES;
use codex_protocol::ToolName;
use futures::StreamExt;
use futures::stream::FuturesUnordered;
use prost::Message;
use serde_json::Value as JsonValue;
use tokio::sync::mpsc;
use tokio::sync::oneshot;
use tokio_stream::wrappers::ReceiverStream;
use tokio_util::sync::CancellationToken;
use tonic::Status;
use uuid::Uuid;

use super::GrpcStream;
use super::conversions;
use super::session::GrpcSession;
use super::session::PendingInvocation;
use super::session::ToolSubscription;
use super::validation;
use crate::OUTGOING_CHANNEL_CAPACITY;

const MAX_SUBSCRIPTIONS: usize = OUTGOING_CHANNEL_CAPACITY;

impl GrpcSession {
    pub(super) fn subscribe(
        self: &Arc<Self>,
        filters: Vec<proto::ToolName>,
    ) -> Result<GrpcStream<proto::ToolCall>, Status> {
        validation::tool_filters(&filters)?;
        let id = Uuid::new_v4();
        let (sender, receiver) = mpsc::channel(OUTGOING_CHANNEL_CAPACITY);
        let mut state = self.state.lock().unwrap_or_else(PoisonError::into_inner);
        if self.closed.is_cancelled() {
            return Err(Status::cancelled("code-mode session is closed"));
        }
        if state.subscriptions.len() >= MAX_SUBSCRIPTIONS {
            return Err(Status::resource_exhausted(
                "code-mode session has too many tool subscriptions",
            ));
        }
        state.subscriptions.push(ToolSubscription {
            id,
            filters,
            sender: sender.clone(),
        });
        drop(state);

        let session = Arc::downgrade(self);
        let closed = self.closed.clone();
        tokio::spawn(async move {
            tokio::select! {
                _ = sender.closed() => {}
                _ = closed.cancelled() => return,
            }
            if let Some(session) = session.upgrade() {
                let abandoned = {
                    let mut state = session.state.lock().unwrap_or_else(PoisonError::into_inner);
                    state
                        .subscriptions
                        .retain(|subscription| subscription.id != id);
                    state
                        .pending_invocations
                        .extract_if(|_, invocation| invocation.subscription_id == id)
                        .map(|(_, invocation)| invocation)
                        .collect::<Vec<_>>()
                };
                if !abandoned.is_empty() {
                    // A buffered call may never have reached the client. Closing
                    // the lease avoids replaying a possibly delivered invocation
                    // or leaving an unfillable execution-sequence gap.
                    session.closed.cancel();
                }
                for invocation in abandoned {
                    let _ = invocation.response.send(Err(
                        "code-mode tool subscription closed before returning tool output"
                            .to_string(),
                    ));
                }
            }
        });
        Ok(Box::pin(ReceiverStream::new(receiver)))
    }

    pub(super) async fn dispatch_tool(
        &self,
        invocation: CodeModeNestedToolCall,
        execution_id: String,
        invocation_id: Uuid,
        input_json: Option<Vec<u8>>,
        response: oneshot::Sender<Result<JsonValue, String>>,
        cancellation: &CancellationToken,
    ) -> Result<(), String> {
        let cell_id = invocation.cell_id.to_string();
        let tool_name = proto::ToolName {
            name: invocation.tool_name.name,
            namespace: invocation.tool_name.namespace,
        };
        let canonical_tool_name =
            ToolName::new(tool_name.namespace.clone(), tool_name.name.clone())
                .with_default_namespace();
        let (sequence, traceparent, subscriptions) = {
            let state = self.state.lock().unwrap_or_else(PoisonError::into_inner);
            let Some(execution) = state.cells.get(&cell_id) else {
                return Err("code-mode cell closed before dispatching its tool call".to_string());
            };
            let sequence = execution.tool_call_sequence.checked_add(1).ok_or_else(|| {
                "code-mode execution tool-call sequence was exhausted".to_string()
            })?;
            let count = state.subscriptions.len();
            let subscriptions = (0..count)
                .map(|offset| &state.subscriptions[(state.next_subscription + offset) % count])
                .filter(|subscription| {
                    subscription.filters.is_empty()
                        || subscription.filters.iter().any(|filter| {
                            ToolName::new(filter.namespace.clone(), filter.name.clone())
                                .with_default_namespace()
                                == canonical_tool_name
                        })
                })
                .map(|subscription| (subscription.id, subscription.sender.clone()))
                .collect::<Vec<_>>();
            (sequence, execution.traceparent.clone(), subscriptions)
        };
        // The saved traceparent belongs to the outer execution. Prefer the runtime's
        // per-tool span so the callback is nested under its invocation, with the
        // execution context as a fallback when no current span context is available.
        let traceparent = codex_otel::current_span_w3c_trace_context()
            .and_then(|trace| trace.traceparent)
            .or(traceparent);
        if subscriptions.is_empty() {
            return Err("no code-mode tool subscription matches the requested tool".to_string());
        }
        let mut message = proto::ToolCall {
            session_id: self.id.to_string(),
            execution_id,
            cell_id: cell_id.clone(),
            invocation_id: invocation_id.to_string(),
            runtime_tool_call_id: invocation.runtime_tool_call_id,
            tool_name: Some(tool_name.clone()),
            tool_kind: conversions::tool_kind(invocation.tool_kind),
            input_json,
            sequence,
            traceparent,
        };
        if message.encoded_len() > MAX_FRAME_BYTES {
            return Err(format!(
                "code-mode tool invocation exceeds the {MAX_FRAME_BYTES}-byte gRPC message limit"
            ));
        }

        let mut reservations =
            subscriptions
                .into_iter()
                .map(|(id, sender)| async move {
                    sender.reserve_owned().await.map(|permit| (id, permit))
                })
                .collect::<FuturesUnordered<_>>();
        loop {
            let (subscription_id, permit) = tokio::select! {
                biased;
                _ = cancellation.cancelled() => {
                    return Err("code mode delegate request cancelled".to_string());
                }
                _ = self.closed.cancelled() => {
                    return Err("code-mode session closed before dispatching its tool call".to_string());
                }
                reservation = reservations.next() => match reservation {
                    Some(Ok(reservation)) => reservation,
                    Some(Err(_)) => continue,
                    None => {
                        return Err("matching code-mode tool subscriptions are unavailable".to_string());
                    }
                },
            };

            let mut state = self.state.lock().unwrap_or_else(PoisonError::into_inner);
            let Some(subscription_index) = state.subscriptions.iter().position(|subscription| {
                subscription.id == subscription_id && !subscription.sender.is_closed()
            }) else {
                continue;
            };
            let Some(execution) = state.cells.get_mut(&cell_id) else {
                return Err("code-mode cell closed before dispatching its tool call".to_string());
            };
            let sequence = execution.tool_call_sequence.checked_add(1).ok_or_else(|| {
                "code-mode execution tool-call sequence was exhausted".to_string()
            })?;
            message.sequence = sequence;
            if message.encoded_len() > MAX_FRAME_BYTES {
                return Err(format!(
                    "code-mode tool invocation exceeds the {MAX_FRAME_BYTES}-byte gRPC message limit"
                ));
            }
            execution.tool_call_sequence = sequence;
            state.pending_invocations.insert(
                invocation_id,
                PendingInvocation {
                    subscription_id,
                    response,
                },
            );
            state.seen_invocations.remember(invocation_id);
            state.next_subscription = (subscription_index + 1) % state.subscriptions.len();
            permit.send(Ok(message));
            return Ok(());
        }
    }

    pub(super) fn complete_invocation(
        &self,
        invocation_id: Uuid,
        result: Result<JsonValue, String>,
    ) -> Result<(), Status> {
        let response = {
            let mut state = self.state.lock().unwrap_or_else(PoisonError::into_inner);
            match state.pending_invocations.remove(&invocation_id) {
                Some(invocation) => Some(invocation.response),
                None if state.seen_invocations.contains(&invocation_id) => None,
                None => {
                    return Err(Status::not_found(format!(
                        "unknown code-mode tool invocation {invocation_id}"
                    )));
                }
            }
        };
        if let Some(response) = response {
            let _ = response.send(result);
        }
        Ok(())
    }

    pub(super) fn cancel_invocation(&self, invocation_id: Uuid) {
        let pending = self
            .state
            .lock()
            .unwrap_or_else(PoisonError::into_inner)
            .pending_invocations
            .remove(&invocation_id);
        if pending.is_some() {
            let _ = self.send_event_now(
                proto::session_event::Event::ToolCallCancelled(proto::ToolCallCancelled {
                    invocation_id: invocation_id.to_string(),
                }),
                /*cell_permit*/ None,
            );
        }
    }
}