mirror of
https://github.com/pchuan98/codex.git
synced 2026-07-01 00:31:56 +08:00
8f02973d25
## Why
`selectedCapabilityRoots` is durable thread intent: “use this capability
root from environment `worker`.”
The important product assumption is:
> One environment ID always names the same logical executor and stable
contents.
`worker` does not silently change from executor A to an unrelated
executor B. The process-local connection handle for `worker` can still
be replaced while Codex is running, though, for example when
`environment/add` registers a fresh handle for the same logical
environment.
The thread should persist only the stable selection. Each model step
should pair that selection with the exact ready handle captured for that
step.
## The boundary
```text
persisted thread intent
plugin@1 -> environment "worker"
|
| capture the current step
v
model-step view
unavailable, or
plugin@1 + worker's exact captured ready handle
```
The environment ID is the stable identity and cache key. The
`Arc<Environment>` is only a process-local handle retained so consumers
of one model step use the same captured environment. It is never
persisted and it does not imply different environment contents.
## What changes
### Persist the stable selection
Selected roots are written into `SessionMeta` and restored with the
thread. Forked subagents inherit the same selections, including
bounded-history forks.
Only stable data is persisted: root ID, environment ID, and root path.
### Capture readiness together with the exact handle
The environment snapshot records:
```rust
environment_id -> Some(Arc<Environment>) // ready in this step
environment_id -> None // still starting in this step
```
This prevents readiness and execution from coming from different
registry snapshots.
For example:
```text
step snapshot: worker -> handle A, ready
environment/add: worker -> fresh handle B for the same logical environment
current step: plugin@1 still uses captured handle A
```
Without carrying handle A in the snapshot, the resolver could combine “A
was ready” with handle B and treat B as ready before it had finished
starting.
This does not change cache invalidation. Stable capability metadata
remains identified by environment ID and capability root. Replacing a
process-local handle under the same stable environment ID does not
invalidate or rediscover that metadata.
### Resolve availability per model step
- A ready captured environment produces resolved roots using its
captured handle.
- A starting, missing, or failed environment is omitted from that step.
- A selected lazy environment that is outside the turn's captured
environment set is asked to start, and a later step can observe it as
ready.
- No capability files are scanned here.
Transient transport disconnects remain the remote client's reconnect
concern. This PR models initial attachment/readiness; it does not add
live socket-connectivity state.
## Example
```text
thread selection: plugin@1 -> environment "worker"
step 1: worker is starting -> plugin@1 unavailable
step 2: worker is ready -> plugin@1 resolves through worker's captured handle
step 3: fresh local handle -> current step remains pinned; a later step captures its own view
```
Temporary unavailability does not discard the durable selection. Later
PRs can retain stable metadata caches while projecting only currently
available capabilities into model-visible World State.
## Compatibility
The app-server request shape does not change. Older rollouts without
`selected_capability_roots` deserialize to an empty list.
## Stack
1. **This PR:** persist stable selected roots and resolve them through
an exact model-step handle.
2. #29960: cache stable skill metadata and project available skills into
World State.
3. #29946: cache stable plugin declarations and manage the separate live
MCP runtime.
115 lines
4.3 KiB
Rust
115 lines
4.3 KiB
Rust
use std::collections::HashMap;
|
|
use std::fmt;
|
|
use std::sync::Arc;
|
|
|
|
use codex_protocol::capabilities::CapabilityRootLocation;
|
|
use codex_protocol::capabilities::SelectedCapabilityRoot;
|
|
|
|
use crate::Environment;
|
|
use crate::EnvironmentManager;
|
|
use crate::ExecutorFileSystem;
|
|
|
|
/// A selected capability root paired with its currently ready environment handle.
|
|
///
|
|
/// Environment IDs have stable identity and contents. This process-local value must not be
|
|
/// persisted: it only keeps the current connection handle alive while one model step uses the
|
|
/// stable environment.
|
|
#[derive(Clone)]
|
|
pub struct ResolvedSelectedCapabilityRoot {
|
|
selected_root: SelectedCapabilityRoot,
|
|
environment: Arc<Environment>,
|
|
}
|
|
|
|
impl ResolvedSelectedCapabilityRoot {
|
|
pub fn selected_root(&self) -> &SelectedCapabilityRoot {
|
|
&self.selected_root
|
|
}
|
|
|
|
pub fn environment(&self) -> &Arc<Environment> {
|
|
&self.environment
|
|
}
|
|
|
|
pub fn file_system(&self) -> Arc<dyn ExecutorFileSystem> {
|
|
self.environment.get_filesystem()
|
|
}
|
|
}
|
|
|
|
impl EnvironmentManager {
|
|
/// Resolves selected roots whose stable environments are ready for the current model step.
|
|
///
|
|
/// Environment identity comes from the selected root's stable environment ID. A ready
|
|
/// environment captured for the step carries its exact process-local handle so readiness and
|
|
/// execution cannot come from different registry snapshots. Missing, starting, or failed
|
|
/// environments are omitted. A lazy environment is started for a later step.
|
|
pub async fn resolve_selected_capability_roots(
|
|
&self,
|
|
selected_roots: &[SelectedCapabilityRoot],
|
|
captured_environments: &HashMap<String, Option<Arc<Environment>>>,
|
|
) -> Vec<ResolvedSelectedCapabilityRoot> {
|
|
let candidates = {
|
|
let environments = self
|
|
.environments
|
|
.read()
|
|
.unwrap_or_else(std::sync::PoisonError::into_inner);
|
|
selected_roots
|
|
.iter()
|
|
.filter_map(|selected_root| {
|
|
let CapabilityRootLocation::Environment { environment_id, .. } =
|
|
&selected_root.location;
|
|
let (environment, already_ready) =
|
|
match captured_environments.get(environment_id) {
|
|
Some(Some(environment)) => (Arc::clone(environment), true),
|
|
Some(None) => return None,
|
|
None => (Arc::clone(environments.get(environment_id)?), false),
|
|
};
|
|
Some((
|
|
ResolvedSelectedCapabilityRoot {
|
|
selected_root: selected_root.clone(),
|
|
environment,
|
|
},
|
|
already_ready,
|
|
))
|
|
})
|
|
.collect::<Vec<_>>()
|
|
};
|
|
|
|
let mut readiness = HashMap::new();
|
|
for (candidate, already_ready) in &candidates {
|
|
let CapabilityRootLocation::Environment { environment_id, .. } =
|
|
&candidate.selected_root().location;
|
|
if readiness.contains_key(environment_id) {
|
|
continue;
|
|
}
|
|
let environment = candidate.environment();
|
|
let ready = if *already_ready {
|
|
true
|
|
} else if environment.startup_finished() {
|
|
environment.wait_until_ready().await.is_ok()
|
|
} else {
|
|
Environment::start_connecting_for_use(environment);
|
|
false
|
|
};
|
|
readiness.insert(environment_id.clone(), ready);
|
|
}
|
|
|
|
candidates
|
|
.into_iter()
|
|
.map(|(candidate, _)| candidate)
|
|
.filter(|candidate| {
|
|
let CapabilityRootLocation::Environment { environment_id, .. } =
|
|
&candidate.selected_root().location;
|
|
readiness.get(environment_id).copied().unwrap_or(false)
|
|
})
|
|
.collect()
|
|
}
|
|
}
|
|
|
|
impl fmt::Debug for ResolvedSelectedCapabilityRoot {
|
|
fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
|
|
formatter
|
|
.debug_struct("ResolvedSelectedCapabilityRoot")
|
|
.field("selected_root", &self.selected_root)
|
|
.finish_non_exhaustive()
|
|
}
|
|
}
|