Module app_server_protocol 

Codex App Server’s stable thread/turn adapter.

The transport in super::app_server owns framing and request lifecycle. This module owns the first protocol-semantic layer: typed request shapes, thread identity, turn identity, and notification reconciliation. It is intentionally not registered as a production block controller yet.

Structs

CodexAppServerSession

ItemSnapshot

PendingServerRequest

SessionSnapshot

SessionState 🔒

TextUserInput 🔒

ThreadForkOptions

ThreadListOptions

ThreadResumeParams 🔒

ThreadStartOptions

TurnStartParams 🔒

Enums

AccountLoginOptions

Login choices accepted by the pinned App Server schema. API keys are kept in this typed request only and are never included in protocol events/logs.

CodexAppServerEvent

CodexAppServerProtocolError

ServerRequestKind

SessionPhase

ThreadListCwdFilter

A thread/list cwd filter: either a single path or a set of paths, per the pinned schema’s ThreadListCwdFilter (string | string[]).

Constants

MAX_PENDING_SERVER_REQUESTS 🔒

MAX_RAW_EVENTS 🔒

Functions

ensure_active_scopes 🔒

See ensure_active_thread_scope — fails closed when no turn is active.

ensure_active_thread_scope 🔒

Unlike ensure_thread_scope, fails closed when no thread is active — a server request claiming a threadId must be scoped to a real, active thread, not merely “no conflicting thread claimed yet” the way an incoming notification establishing state is allowed to be.

ensure_active_turn_scope 🔒

See ensure_active_thread_scope — fails closed when no turn is active. Split out from ensure_active_scopes so a turn can be validated on its own when a request carries a turnId without a threadId (ReAgent P1, PR #3212 4th review).

ensure_scopes 🔒

ensure_thread_scope 🔒

extract_in_progress_turn_id 🔒

The id of whichever turn in thread.turns (a ThreadResumeResponse field, populated on thread/resume) has status: "inProgress", if any. TurnStatus’s only other values (completed/interrupted/failed) are all terminal, so at most one entry can ever match. Malformed/missing shapes intentionally fall through to None rather than erroring — this is best-effort derivation of pre-existing state, not a required field.

extract_thread_id 🔒

string_field 🔒