//! Turn-scoped state and active turn metadata scaffolding. use std::collections::HashMap; use std::sync::Arc; use tokio::sync::Mutex; use tokio::sync::Notify; use tokio_util::sync::CancellationToken; use tokio_util::task::AbortOnDropHandle; use codex_extension_api::ExtensionData; use codex_protocol::dynamic_tools::DynamicToolResponse; use codex_protocol::protocol::TurnEnvironmentSelection; use codex_protocol::request_permissions::RequestPermissionProfile; use codex_protocol::request_permissions::RequestPermissionsResponse; use codex_protocol::request_user_input::RequestUserInputResponse; use codex_rmcp_client::ElicitationResponse; use codex_sandboxing::policy_transforms::merge_permission_profiles; use rmcp::model::RequestId; use tokio::sync::oneshot; use crate::agent::control::AgentExecutionGuard; use crate::session::TurnInputQueue; use crate::session::turn_context::TurnContext; use crate::tasks::AnySessionTask; use codex_protocol::models::AdditionalPermissionProfile; use codex_protocol::protocol::ReviewDecision; use codex_protocol::protocol::TokenUsage; /// Metadata about the currently running turn. pub(crate) struct ActiveTurn { pub(crate) task: Option, pub(crate) turn_state: Arc>, } /// Whether mailbox deliveries should still be folded into the current turn. /// /// State machine: /// - A turn starts in `CurrentTurn`, so queued child mail can join the next /// model request for that turn. /// - After user-visible terminal output is recorded, we switch to `NextTurn` /// to leave late child mail queued instead of extending an already shown /// answer. /// - If the same task later gets explicit same-turn work again (a steered user /// prompt or a tool call after an untagged preamble), we reopen `CurrentTurn` /// so that pending child mail is drained into that follow-up request. #[derive(Clone, Copy, Debug, Default, Eq, PartialEq)] pub(crate) enum MailboxDeliveryPhase { /// Incoming mailbox messages can still be consumed by the current turn. #[default] CurrentTurn, /// The current turn already emitted visible final answer text; mailbox /// messages should remain queued for a later turn. NextTurn, } impl Default for ActiveTurn { fn default() -> Self { Self { task: None, turn_state: Arc::new(Mutex::new(TurnState::default())), } } } #[derive(Clone, Copy, Debug, Eq, PartialEq)] pub(crate) enum TaskKind { Regular, Review, Compact, } pub(crate) struct RunningTask { pub(crate) done: Arc, pub(crate) kind: TaskKind, pub(crate) task: Arc, pub(crate) cancellation_token: CancellationToken, pub(crate) handle: AbortOnDropHandle<()>, pub(crate) turn_context: Arc, pub(crate) turn_extension_data: Arc, pub(crate) _agent_execution_guard: Option, // Timer recorded when the task drops to capture the full turn duration. pub(crate) _timer: Option, } /// Mutable state for a single turn. #[derive(Default)] pub(crate) struct TurnState { pending_approvals: HashMap>, pending_request_permissions: HashMap, pending_user_input: HashMap>, pending_elicitations: HashMap<(String, RequestId), oneshot::Sender>, pending_dynamic_tools: HashMap>, pub(crate) pending_input: TurnInputQueue, mailbox_delivery_phase: MailboxDeliveryPhase, granted_permissions_by_environment_id: HashMap, strict_auto_review_enabled: bool, pub(crate) tool_calls: u64, pub(crate) has_memory_citation: bool, pub(crate) token_usage_at_turn_start: TokenUsage, } pub(crate) struct PendingRequestPermissions { pub(crate) tx_response: oneshot::Sender, pub(crate) requested_permissions: RequestPermissionProfile, pub(crate) environment: TurnEnvironmentSelection, } impl TurnState { pub(crate) fn insert_pending_approval( &mut self, key: String, tx: oneshot::Sender, ) -> Option> { self.pending_approvals.insert(key, tx) } pub(crate) fn remove_pending_approval( &mut self, key: &str, ) -> Option> { self.pending_approvals.remove(key) } pub(crate) fn clear_pending_waiters(&mut self) { self.pending_approvals.clear(); self.pending_request_permissions.clear(); self.pending_user_input.clear(); self.pending_elicitations.clear(); self.pending_dynamic_tools.clear(); } pub(crate) fn insert_pending_request_permissions( &mut self, key: String, pending_request_permissions: PendingRequestPermissions, ) -> Option { self.pending_request_permissions .insert(key, pending_request_permissions) } pub(crate) fn remove_pending_request_permissions( &mut self, key: &str, ) -> Option { self.pending_request_permissions.remove(key) } pub(crate) fn insert_pending_user_input( &mut self, key: String, tx: oneshot::Sender, ) -> Option> { self.pending_user_input.insert(key, tx) } pub(crate) fn remove_pending_user_input( &mut self, key: &str, ) -> Option> { self.pending_user_input.remove(key) } pub(crate) fn insert_pending_elicitation( &mut self, server_name: String, request_id: RequestId, tx: oneshot::Sender, ) -> Option> { self.pending_elicitations .insert((server_name, request_id), tx) } pub(crate) fn remove_pending_elicitation( &mut self, server_name: &str, request_id: &RequestId, ) -> Option> { self.pending_elicitations .remove(&(server_name.to_string(), request_id.clone())) } pub(crate) fn insert_pending_dynamic_tool( &mut self, key: String, tx: oneshot::Sender, ) -> Option> { self.pending_dynamic_tools.insert(key, tx) } pub(crate) fn remove_pending_dynamic_tool( &mut self, key: &str, ) -> Option> { self.pending_dynamic_tools.remove(key) } pub(crate) fn accept_mailbox_delivery_for_current_turn(&mut self) { self.set_mailbox_delivery_phase(MailboxDeliveryPhase::CurrentTurn); } pub(crate) fn accepts_mailbox_delivery_for_current_turn(&self) -> bool { self.mailbox_delivery_phase == MailboxDeliveryPhase::CurrentTurn } pub(crate) fn set_mailbox_delivery_phase(&mut self, phase: MailboxDeliveryPhase) { self.mailbox_delivery_phase = phase; } pub(crate) fn record_granted_permissions( &mut self, environment_id: &str, permissions: AdditionalPermissionProfile, ) { let granted_permissions = merge_permission_profiles( self.granted_permissions_by_environment_id .get(environment_id), Some(&permissions), ); if let Some(granted_permissions) = granted_permissions { self.granted_permissions_by_environment_id .insert(environment_id.to_string(), granted_permissions); } } pub(crate) fn granted_permissions( &self, environment_id: &str, ) -> Option { self.granted_permissions_by_environment_id .get(environment_id) .cloned() } pub(crate) fn enable_strict_auto_review(&mut self) { self.strict_auto_review_enabled = true; } pub(crate) fn strict_auto_review_enabled(&self) -> bool { self.strict_auto_review_enabled } }