@ironbee-ai/cli 0.15.0 → 0.16.0

package/dist/clients/codex/hooks/clear-verdict.js

@@ -0,0 +1,299 @@
+"use strict";
+/**
+ * Codex — PostToolUse hook adapter (matcher: `apply_patch`)
+ *
+ * Records `file_change` events for each file touched by the patch (operation
+ * classified from the patch body's `*** Add/Update/Delete File:` markers).
+ * Then clears the verdict file so the next verification cycle has a fresh
+ * slate.
+ *
+ * NOTE on line counts: Codex's `apply_patch` tool_input contains the patch
+ * itself, so we can derive `lines_added` / `lines_removed` directly from
+ * patch body parsing (counting `+` / `-` lines per file section) — no need
+ * to stash file content from PreToolUse. This is a Codex-specific advantage
+ * over Claude's Write+Edit (which only carry final content, not the diff).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.applyPatchStashKey = applyPatchStashKey;
+exports.parseApplyPatchBody = parseApplyPatchBody;
+exports.run = run;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const actions_1 = require("../../../hooks/core/actions");
+const ids_1 = require("../../../import/ids");
+const clear_verdict_1 = require("../../../hooks/core/clear-verdict");
+const file_diff_1 = require("../../../hooks/core/file-diff");
+const session_state_1 = require("../../../hooks/core/session-state");
+const tool_use_stash_1 = require("../../../hooks/core/tool-use-stash");
+const config_1 = require("../../../lib/config");
+const logger_1 = require("../../../lib/logger");
+const output_1 = require("../../../lib/output");
+const stdin_1 = require("../../../lib/stdin");
+const util_1 = require("../util");
+const STASH_KEY_SUFFIX = ".apply-patch";
+/**
+ * Returns the tool-use-stash key for the apply_patch prior-content stash.
+ * Suffixed so it doesn't collide with `track-action-pre`'s timing stash
+ * (which keys on the bare `tool_use_id`).
+ */
+function applyPatchStashKey(toolUseId) {
+    return `${toolUseId}${STASH_KEY_SUFFIX}`;
+}
+function truncateChangeset(s, maxBytes) {
+    if (maxBytes <= 0) {
+        return s;
+    }
+    const buf = Buffer.from(s, "utf-8");
+    if (buf.length <= maxBytes) {
+        return s;
+    }
+    const omitted = buf.length - maxBytes;
+    const footer = `\n... (truncated, ${omitted} bytes omitted)\n`;
+    const footerLen = Buffer.byteLength(footer, "utf-8");
+    const headLen = Math.max(0, maxBytes - footerLen);
+    const head = buf.subarray(0, headLen).toString("utf-8");
+    return head + footer;
+}
+function resolveFilePath(projectDir, entryPath) {
+    return (0, path_1.isAbsolute)(entryPath) ? entryPath : (0, path_1.join)(projectDir, entryPath);
+}
+/**
+ * Build the standard unified-diff changeset for one file using the
+ * PreToolUse stash + the post-state file content on disk. Mirrors
+ * Claude's `buildChangeset` so the wire output is identical across
+ * clients.
+ *
+ * Returns `undefined` when the diff can't be produced (binary file,
+ * post-state read failure, identical content) — caller falls back to the
+ * V4A per-file body slice in that case.
+ */
+function buildUnifiedDiffChangeset(projectDir, e, priorContent, maxBytes) {
+    const abs = resolveFilePath(projectDir, e.path);
+    let postContent;
+    try {
+        // Delete File: post-state is gone on disk — use empty string.
+        postContent = e.operation === "delete" || !(0, fs_1.existsSync)(abs) ? "" : (0, fs_1.readFileSync)(abs, "utf-8");
+    }
+    catch (err) {
+        logger_1.logger.debug(`failed to read post-state of ${abs} for changeset: ${err}`);
+        return undefined;
+    }
+    const prior = priorContent ?? "";
+    const diff = (0, file_diff_1.createUnifiedDiff)(prior, postContent, maxBytes);
+    return diff ?? undefined;
+}
+/**
+ * Parse a Codex `apply_patch` tool_input.input body into per-file entries.
+ *
+ * Body format (from Codex's apply_patch tool):
+ *   *** Begin Patch
+ *   *** Add File: path/to/new.ts
+ *   +line1
+ *   +line2
+ *   *** Update File: path/to/existing.ts
+ *   @@ ...
+ *   -old
+ *   +new
+ *   *** Delete File: path/to/old.ts
+ *   *** End Patch
+ *
+ * Returns one entry per file with operation + line-count tallies.
+ */
+function parseApplyPatchBody(body) {
+    const entries = [];
+    let current = null;
+    let currentLines = [];
+    const flushCurrent = () => {
+        if (current) {
+            current.body = currentLines.join("\n");
+            entries.push(current);
+            current = null;
+            currentLines = [];
+        }
+    };
+    const lines = body.split("\n");
+    for (const raw of lines) {
+        const line = raw;
+        const addMatch = line.match(/^\*\*\* Add File: (.+)$/);
+        const updateMatch = line.match(/^\*\*\* Update File: (.+)$/);
+        const deleteMatch = line.match(/^\*\*\* Delete File: (.+)$/);
+        const endMatch = line.match(/^\*\*\* (End Patch|Move to: .+)$/);
+        // Headers (`*** Add/Update/Delete File: X`) are PARSED but NOT included
+        // in the per-file body slice. `file_path` rides on the event already;
+        // including the header would be redundant info on the wire and would
+        // diverge from Claude/Cursor changeset shape (which is hunks-only).
+        if (addMatch) {
+            flushCurrent();
+            current = { path: addMatch[1].trim(), operation: "create", linesAdded: 0, linesRemoved: 0, body: "" };
+            currentLines = [];
+            continue;
+        }
+        if (updateMatch) {
+            flushCurrent();
+            current = { path: updateMatch[1].trim(), operation: "update", linesAdded: 0, linesRemoved: 0, body: "" };
+            currentLines = [];
+            continue;
+        }
+        if (deleteMatch) {
+            flushCurrent();
+            current = { path: deleteMatch[1].trim(), operation: "delete", linesAdded: 0, linesRemoved: 0, body: "" };
+            currentLines = [];
+            continue;
+        }
+        if (endMatch) {
+            flushCurrent();
+            continue;
+        }
+        if (current) {
+            currentLines.push(line);
+            if (current.operation !== "delete") {
+                if (line.startsWith("+") && !line.startsWith("+++")) {
+                    current.linesAdded += 1;
+                }
+                else if (line.startsWith("-") && !line.startsWith("---")) {
+                    current.linesRemoved += 1;
+                }
+            }
+        }
+    }
+    flushCurrent();
+    return entries;
+}
+async function run(projectDir) {
+    const input = (0, util_1.parseCodexHookStdin)((0, stdin_1.readStdin)());
+    const sessionId = input.session_id ?? "default";
+    const sessionDir = `${projectDir}/.ironbee/sessions/${sessionId}`;
+    const actionsFile = `${sessionDir}/actions.jsonl`;
+    const verdictFile = `${sessionDir}/verdict.json`;
+    (0, logger_1.setLogFile)(`${sessionDir}/session.log`);
+    // Codex's apply_patch hook stdin shape (live-tested on 0.135.0):
+    //   tool_input is an object: { "command": "<patch body string>" }
+    // For the custom_tool_call wire form Codex normalizes the patch into the
+    // `command` field of the hook stdin's tool_input. Fallback to `.input`
+    // (function_call shape) and raw-string (defensive) for forward-compat.
+    const ti = input.tool_input;
+    let patchBody;
+    if (typeof ti === "string") {
+        patchBody = ti;
+    }
+    else if (typeof ti === "object" && ti !== null) {
+        const rec = ti;
+        patchBody = rec.command ?? rec.input;
+    }
+    if (typeof patchBody === "string") {
+        const config = (0, config_1.loadConfig)(projectDir);
+        const captureChangeset = (0, config_1.getCaptureFileChangeset)(config);
+        const maxChangesetBytes = (0, config_1.getMaxChangesetBytes)(config);
+        const entries = parseApplyPatchBody(patchBody);
+        const activityId = (0, session_state_1.getActiveActivityId)(sessionDir);
+        const fixId = (0, session_state_1.getActiveFixId)(sessionDir);
+        // Consume the PreToolUse stash ONCE (it's a file-backed consume —
+        // second call returns null). May be absent (captureChangeset was
+        // off at PreToolUse time, hook dispatch race, missing tool_use_id);
+        // in that case we fall back to the V4A per-file body slice for
+        // every entry below.
+        const toolUseId = input.tool_use_id ?? "";
+        const stash = captureChangeset && toolUseId
+            ? (0, tool_use_stash_1.consumeToolUseData)(sessionId, applyPatchStashKey(toolUseId))
+            : null;
+        for (let i = 0; i < entries.length; i++) {
+            const e = entries[i];
+            if (!(0, config_1.requiresVerification)(e.path, config)) {
+                continue;
+            }
+            // `fix_id` is FixAwareEvent-required (`string` typing), but the
+            // collector schema treats it as a non-empty string when present —
+            // emitting `fix_id: ""` literally is rejected. So we omit the
+            // field when no fix is active (mirrors Claude live's
+            // `getActiveFixId(sessionDir)!` + `JSON.stringify` drop, and the
+            // Codex import side which already omits via `as FileChangeAction`
+            // cast). The cast here matches that pattern.
+            //
+            // Same rule for `activity_id` (round 31): ActivityAwareEvent
+            // requires it, but empty value is FK-rejected by the collector.
+            // Claude/Cursor live use `activityId!` so JSON.stringify drops
+            // when undefined; Codex was the outlier shipping literal "".
+            const event = {
+                ...(0, actions_1.baseFields)(actionsFile),
+                type: "file_change",
+                timestamp: Date.now(),
+                file_path: e.path,
+                // Cross-event vocab parity (round 68). For the SAME logical
+                // operation, Codex emits a `tool_call` (via track-action.ts)
+                // and a `file_change` (here) at the same PostToolUse moment.
+                // `tool_call.tool_name` is Claude-aliased to "Edit" (round 67
+                // via `normalizeCodexToolName` in `classifyCodexTool`), and
+                // `session_analytics.tools["Edit"]` aggregates them (round
+                // 66 via `claudeAlias` in `analytics/codex/projection.ts`).
+                // Shipping `file_change.tool_name: "apply_patch"` here would
+                // leave the backend unable to JOIN `tool_call ↔ file_change`
+                // on `(session_id, timestamp, tool_name)` for every Codex
+                // apply_patch event. Align with the Claude-alias chain so
+                // Codex matches Claude/Cursor's cross-event consistency
+                // (both clients ship the SAME literal in both events).
+                tool_name: "Edit",
+                operation: e.operation,
+                // For DELETE: BOTH unknown (whole file removed; prior content
+                // never read so we can't count lines; patch body has no `+`/`-`
+                // lines so the parser's 0/0 isn't meaningful).
+                // For CREATE: `lines_removed: 0` — by definition a new file
+                // has zero prior content, so zero lines were removed. This is
+                // a concrete known value, not "unknown". Cross-client parity:
+                // Claude Write-create ships `lines_removed: 0`
+                // (clients/claude/hooks/clear-verdict.ts:77) and import
+                // matches (import/claude/events/file-change.ts:85). Backend
+                // dashboards filtering `WHERE operation='create' AND
+                // lines_removed=0` previously saw only Claude creates;
+                // Codex creates were invisible because they shipped null.
+                // For UPDATE: both real counts.
+                lines_added: e.operation === "delete" ? null : e.linesAdded,
+                lines_removed: e.operation === "delete" ? null : (e.operation === "create" ? 0 : e.linesRemoved),
+            };
+            if (activityId) {
+                event.activity_id = activityId;
+            }
+            if (fixId) {
+                event.fix_id = fixId;
+            }
+            // Live↔import event.id parity. Same pattern as round-19 tool_call
+            // fix: import `events/file-change.ts:61` derives id via
+            // `deriveFileChangeEventId(sessionId, "${callId}:${i}:${path}")`.
+            // Without matching here, every apply_patch's file_change events
+            // duplicate in the warehouse on re-import (random UUID live vs
+            // deterministic import → backend `(session_id, id)` dedup misses).
+            if (toolUseId.length > 0) {
+                event.id = (0, ids_1.deriveFileChangeEventId)(sessionId, `${toolUseId}:${i}:${e.path}`);
+            }
+            if (captureChangeset) {
+                // Primary path: standard unified diff via the stash. Matches
+                // Claude/Cursor wire shape exactly (hunks with `@@ -A,B +C,D @@`
+                // headers, no filename header, line numbers from the actual
+                // pre/post content on disk).
+                let changeset;
+                if (stash && Object.prototype.hasOwnProperty.call(stash.prior_contents, e.path)) {
+                    changeset = buildUnifiedDiffChangeset(projectDir, e, stash.prior_contents[e.path], maxChangesetBytes);
+                }
+                // Fallback: Codex V4A per-file body slice (hunks-only, but
+                // `@@` separators have no line numbers — Codex's own format).
+                // Used when stash is missing (captureChangeset toggled mid-cycle,
+                // missing tool_use_id, etc.) or when the unified-diff build
+                // failed (binary, post-state read error).
+                if (changeset === undefined && e.body.length > 0) {
+                    changeset = truncateChangeset(e.body, maxChangesetBytes);
+                }
+                if (changeset !== undefined) {
+                    event.changeset = changeset;
+                }
+            }
+            await (0, actions_1.appendAction)(actionsFile, event);
+        }
+    }
+    const clearInput = {
+        verdictFile,
+        sessionDir,
+    };
+    (0, clear_verdict_1.runClearVerdict)(clearInput);
+    logger_1.logger.debug(`clear-verdict: cleared for ${sessionId}`);
+    (0, output_1.writeAndExit)(JSON.stringify({}), 0);
+}
+//# sourceMappingURL=clear-verdict.js.map

package/dist/clients/codex/hooks/clear-verdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clear-verdict.js","sourceRoot":"","sources":["../../../../src/clients/codex/hooks/clear-verdict.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;AAiDH,gDAEC;AAqED,kDA0DC;AAED,kBAgJC;AAlUD,2BAA8C;AAC9C,+BAAwC;AAExC,yDAA8G;AAC9G,6CAA8D;AAC9D,qEAAuF;AACvF,6DAAkE;AAClE,qEAAwF;AACxF,uEAAwE;AACxE,gDAAsH;AACtH,gDAAyD;AACzD,gDAAmD;AACnD,8CAA+C;AAC/C,kCAA8C;AA2B9C,MAAM,gBAAgB,GAAW,cAAc,CAAC;AAEhD;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,SAAiB;IAChD,OAAO,GAAG,SAAS,GAAG,gBAAgB,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAS,EAAE,QAAgB;IAClD,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QAChB,OAAO,CAAC,CAAC;IACb,CAAC;IACD,MAAM,GAAG,GAAW,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5C,IAAI,GAAG,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;QACzB,OAAO,CAAC,CAAC;IACb,CAAC;IACD,MAAM,OAAO,GAAW,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC;IAC9C,MAAM,MAAM,GAAW,qBAAqB,OAAO,mBAAmB,CAAC;IACvE,MAAM,SAAS,GAAW,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAW,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAW,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChE,OAAO,IAAI,GAAG,MAAM,CAAC;AACzB,CAAC;AAED,SAAS,eAAe,CAAC,UAAkB,EAAE,SAAiB;IAC1D,OAAO,IAAA,iBAAU,EAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAA,WAAI,EAAC,UAAU,EAAE,SAAS,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,yBAAyB,CAC9B,UAAkB,EAClB,CAAiB,EACjB,YAA2B,EAC3B,QAAgB;IAEhB,MAAM,GAAG,GAAW,eAAe,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACD,8DAA8D;QAC9D,WAAW,GAAG,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,IAAA,eAAU,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAA,iBAAY,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACjG,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,eAAM,CAAC,KAAK,CAAC,gCAAgC,GAAG,mBAAmB,GAAG,EAAE,CAAC,CAAC;QAC1E,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,KAAK,GAAW,YAAY,IAAI,EAAE,CAAC;IACzC,MAAM,IAAI,GAAkB,IAAA,6BAAiB,EAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC5E,OAAO,IAAI,IAAI,SAAS,CAAC;AAC7B,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,mBAAmB,CAAC,IAAY;IAC5C,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,IAAI,OAAO,GAA0B,IAAI,CAAC;IAC1C,IAAI,YAAY,GAAa,EAAE,CAAC;IAChC,MAAM,YAAY,GAAe,GAAS,EAAE;QACxC,IAAI,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,GAAG,EAAE,CAAC;QACtB,CAAC;IACL,CAAC,CAAC;IACF,MAAM,KAAK,GAAa,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,GAAW,GAAG,CAAC;QACzB,MAAM,QAAQ,GAA4B,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAChF,MAAM,WAAW,GAA4B,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACtF,MAAM,WAAW,GAA4B,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACtF,MAAM,QAAQ,GAA4B,IAAI,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACzF,wEAAwE;QACxE,sEAAsE;QACtE,qEAAqE;QACrE,oEAAoE;QACpE,IAAI,QAAQ,EAAE,CAAC;YACX,YAAY,EAAE,CAAC;YACf,OAAO,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YACtG,YAAY,GAAG,EAAE,CAAC;YAClB,SAAS;QACb,CAAC;QACD,IAAI,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;YACf,OAAO,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YACzG,YAAY,GAAG,EAAE,CAAC;YAClB,SAAS;QACb,CAAC;QACD,IAAI,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;YACf,OAAO,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YACzG,YAAY,GAAG,EAAE,CAAC;YAClB,SAAS;QACb,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACX,YAAY,EAAE,CAAC;YACf,SAAS;QACb,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACV,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;gBACjC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;oBAClD,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC;gBAC5B,CAAC;qBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;oBACzD,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC;gBAC9B,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;IACD,YAAY,EAAE,CAAC;IACf,OAAO,OAAO,CAAC;AACnB,CAAC;AAEM,KAAK,UAAU,GAAG,CAAC,UAAkB;IACxC,MAAM,KAAK,GAA2C,IAAA,0BAAmB,EAAC,IAAA,iBAAS,GAAE,CAAC,CAAC;IACvF,MAAM,SAAS,GAAW,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC;IACxD,MAAM,UAAU,GAAW,GAAG,UAAU,sBAAsB,SAAS,EAAE,CAAC;IAC1E,MAAM,WAAW,GAAW,GAAG,UAAU,gBAAgB,CAAC;IAC1D,MAAM,WAAW,GAAW,GAAG,UAAU,eAAe,CAAC;IACzD,IAAA,mBAAU,EAAC,GAAG,UAAU,cAAc,CAAC,CAAC;IAExC,iEAAiE;IACjE,kEAAkE;IAClE,yEAAyE;IACzE,uEAAuE;IACvE,uEAAuE;IACvE,MAAM,EAAE,GAAY,KAAK,CAAC,UAAU,CAAC;IACrC,IAAI,SAAkB,CAAC;IACvB,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QACzB,SAAS,GAAG,EAAE,CAAC;IACnB,CAAC;SAAM,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QAC/C,MAAM,GAAG,GAA4B,EAA6B,CAAC;QACnE,SAAS,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC;IACzC,CAAC;IACD,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,MAAM,GAAkC,IAAA,mBAAU,EAAC,UAAU,CAAC,CAAC;QACrE,MAAM,gBAAgB,GAAY,IAAA,gCAAuB,EAAC,MAAM,CAAC,CAAC;QAClE,MAAM,iBAAiB,GAAW,IAAA,6BAAoB,EAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAqB,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACjE,MAAM,UAAU,GAAuB,IAAA,mCAAmB,EAAC,UAAU,CAAC,CAAC;QACvE,MAAM,KAAK,GAAuB,IAAA,8BAAc,EAAC,UAAU,CAAC,CAAC;QAE7D,kEAAkE;QAClE,iEAAiE;QACjE,oEAAoE;QACpE,+DAA+D;QAC/D,qBAAqB;QACrB,MAAM,SAAS,GAAW,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;QAClD,MAAM,KAAK,GAAgC,gBAAgB,IAAI,SAAS;YACpE,CAAC,CAAC,IAAA,mCAAkB,EAAuB,SAAS,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;YACpF,CAAC,CAAC,IAAI,CAAC;QAEX,KAAK,IAAI,CAAC,GAAW,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,MAAM,CAAC,GAAmB,OAAO,CAAC,CAAC,CAAC,CAAC;YACrC,IAAI,CAAC,IAAA,6BAAoB,EAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;gBACxC,SAAS;YACb,CAAC;YACD,gEAAgE;YAChE,kEAAkE;YAClE,8DAA8D;YAC9D,qDAAqD;YACrD,iEAAiE;YACjE,kEAAkE;YAClE,6CAA6C;YAC7C,EAAE;YACF,6DAA6D;YAC7D,gEAAgE;YAChE,+DAA+D;YAC/D,6DAA6D;YAC7D,MAAM,KAAK,GAAqB;gBAC5B,GAAG,IAAA,oBAAU,EAAC,WAAW,CAAC;gBAC1B,IAAI,EAAE,aAAa;gBACnB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,SAAS,EAAE,CAAC,CAAC,IAAI;gBACjB,4DAA4D;gBAC5D,6DAA6D;gBAC7D,6DAA6D;gBAC7D,8DAA8D;gBAC9D,4DAA4D;gBAC5D,2DAA2D;gBAC3D,4DAA4D;gBAC5D,6DAA6D;gBAC7D,6DAA6D;gBAC7D,0DAA0D;gBAC1D,0DAA0D;gBAC1D,wDAAwD;gBACxD,uDAAuD;gBACvD,SAAS,EAAE,MAAM;gBACjB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,8DAA8D;gBAC9D,gEAAgE;gBAChE,+CAA+C;gBAC/C,4DAA4D;gBAC5D,8DAA8D;gBAC9D,8DAA8D;gBAC9D,+CAA+C;gBAC/C,wDAAwD;gBACxD,4DAA4D;gBAC5D,qDAAqD;gBACrD,uDAAuD;gBACvD,0DAA0D;gBAC1D,gCAAgC;gBAChC,WAAW,EAAE,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU;gBAC3D,aAAa,EAAE,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;aAC/E,CAAC;YACtB,IAAI,UAAU,EAAE,CAAC;gBACb,KAAK,CAAC,WAAW,GAAG,UAAU,CAAC;YACnC,CAAC;YACD,IAAI,KAAK,EAAE,CAAC;gBACR,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;YACzB,CAAC;YACD,kEAAkE;YAClE,wDAAwD;YACxD,kEAAkE;YAClE,gEAAgE;YAChE,+DAA+D;YAC/D,mEAAmE;YACnE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,EAAE,GAAG,IAAA,6BAAuB,EAAC,SAAS,EAAE,GAAG,SAAS,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACjF,CAAC;YACD,IAAI,gBAAgB,EAAE,CAAC;gBACnB,6DAA6D;gBAC7D,iEAAiE;gBACjE,4DAA4D;gBAC5D,6BAA6B;gBAC7B,IAAI,SAA6B,CAAC;gBAClC,IAAI,KAAK,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9E,SAAS,GAAG,yBAAyB,CACjC,UAAU,EACV,CAAC,EACD,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAC5B,iBAAiB,CACpB,CAAC;gBACN,CAAC;gBACD,2DAA2D;gBAC3D,8DAA8D;gBAC9D,kEAAkE;gBAClE,4DAA4D;gBAC5D,0CAA0C;gBAC1C,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC/C,SAAS,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;gBAC7D,CAAC;gBACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC1B,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;gBAChC,CAAC;YACL,CAAC;YACD,MAAM,IAAA,sBAAY,EAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAsB;QAClC,WAAW;QACX,UAAU;KACb,CAAC;IACF,IAAA,+BAAe,EAAC,UAAU,CAAC,CAAC;IAC5B,eAAM,CAAC,KAAK,CAAC,8BAA8B,SAAS,EAAE,CAAC,CAAC;IACxD,IAAA,qBAAY,EAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACxC,CAAC"}

package/dist/clients/codex/hooks/require-verdict.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Codex — PreToolUse hook adapter (matcher: `^apply_patch$`)
+ *
+ * Two responsibilities:
+ *   1. Block `apply_patch` if devtools tools were used in this verification
+ *      cycle without a verdict submitted (forces the agent to call
+ *      `submit-verdict` before editing again).
+ *   2. When `fileChange.captureChangeset` is enabled, stash each touched
+ *      file's PRIOR content keyed on `tool_use_id` so the matching
+ *      PostToolUse adapter (`clear-verdict`) can produce a standard
+ *      unified-diff `changeset` via `createUnifiedDiff` — same wire format
+ *      Claude/Cursor emit. Without this stash, `clear-verdict` falls back
+ *      to the V4A per-file body slice (`@@`-only, no line numbers).
+ *
+ * Returns `permissionDecision: "deny"` (with reason) to block; otherwise
+ * starts the activity as a fallback and allows the tool to proceed.
+ */
+/**
+ * Stash payload consumed by clear-verdict to produce a unified-diff
+ * changeset. Keys are the per-file paths as they appear in the patch
+ * (relative to the project root or absolute); values are the file's
+ * content at PreToolUse time, or `null` when the file didn't exist
+ * (Add File case — we still write a key so clear-verdict knows the
+ * stash was attempted for this path).
+ */
+export interface CodexApplyPatchStash {
+    prior_contents: Record<string, string | null>;
+}
+export declare function run(projectDir: string): Promise<void>;
+//# sourceMappingURL=require-verdict.d.ts.map

package/dist/clients/codex/hooks/require-verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-verdict.d.ts","sourceRoot":"","sources":["../../../../src/clients/codex/hooks/require-verdict.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAcH;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACjC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;CACjD;AAgDD,wBAAsB,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAyC3D"}

package/dist/clients/codex/hooks/require-verdict.js

@@ -0,0 +1,109 @@
+"use strict";
+/**
+ * Codex — PreToolUse hook adapter (matcher: `^apply_patch$`)
+ *
+ * Two responsibilities:
+ *   1. Block `apply_patch` if devtools tools were used in this verification
+ *      cycle without a verdict submitted (forces the agent to call
+ *      `submit-verdict` before editing again).
+ *   2. When `fileChange.captureChangeset` is enabled, stash each touched
+ *      file's PRIOR content keyed on `tool_use_id` so the matching
+ *      PostToolUse adapter (`clear-verdict`) can produce a standard
+ *      unified-diff `changeset` via `createUnifiedDiff` — same wire format
+ *      Claude/Cursor emit. Without this stash, `clear-verdict` falls back
+ *      to the V4A per-file body slice (`@@`-only, no line numbers).
+ *
+ * Returns `permissionDecision: "deny"` (with reason) to block; otherwise
+ * starts the activity as a fallback and allows the tool to proceed.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const actions_1 = require("../../../hooks/core/actions");
+const activity_1 = require("../../../hooks/core/activity");
+const tool_use_stash_1 = require("../../../hooks/core/tool-use-stash");
+const config_1 = require("../../../lib/config");
+const logger_1 = require("../../../lib/logger");
+const stdin_1 = require("../../../lib/stdin");
+const util_1 = require("../util");
+const clear_verdict_1 = require("./clear-verdict");
+function readPatchBody(input) {
+    const ti = input.tool_input;
+    if (typeof ti === "string") {
+        return ti;
+    }
+    if (typeof ti === "object" && ti !== null) {
+        const rec = ti;
+        const cmd = rec.command ?? rec.input;
+        if (typeof cmd === "string") {
+            return cmd;
+        }
+    }
+    return null;
+}
+function resolveFilePath(projectDir, entryPath) {
+    return (0, path_1.isAbsolute)(entryPath) ? entryPath : (0, path_1.join)(projectDir, entryPath);
+}
+function stashPriorContents(projectDir, sessionId, toolUseId, patchBody) {
+    const entries = (0, clear_verdict_1.parseApplyPatchBody)(patchBody);
+    const priorContents = {};
+    for (const e of entries) {
+        // Add File: no pre-state; mark as null (absent) so clear-verdict
+        // knows the stash entry was deliberate (vs missing).
+        if (e.operation === "create") {
+            priorContents[e.path] = null;
+            continue;
+        }
+        const abs = resolveFilePath(projectDir, e.path);
+        try {
+            priorContents[e.path] = (0, fs_1.existsSync)(abs) ? (0, fs_1.readFileSync)(abs, "utf-8") : null;
+        }
+        catch (err) {
+            logger_1.logger.debug(`failed to read prior content of ${abs} for changeset stash: ${err}`);
+            priorContents[e.path] = null;
+        }
+    }
+    const data = { prior_contents: priorContents };
+    (0, tool_use_stash_1.stashToolUseData)(sessionId, (0, clear_verdict_1.applyPatchStashKey)(toolUseId), data);
+}
+async function run(projectDir) {
+    const input = (0, util_1.parseCodexHookStdin)((0, stdin_1.readStdin)());
+    const sessionId = input.session_id ?? "default";
+    const sessionDir = `${projectDir}/.ironbee/sessions/${sessionId}`;
+    const actionsFile = `${sessionDir}/actions.jsonl`;
+    (0, logger_1.setLogFile)(`${sessionDir}/session.log`);
+    if ((0, actions_1.hasToolCallsSinceLastVerdict)(actionsFile)) {
+        const reason = `BLOCKED: You used devtools tools but haven't submitted a verdict yet.
+
+You MUST submit a verdict before editing more code. Use:
+  echo '{"session_id":"${sessionId}","status":"fail","checks":["..."],"issues":["..."]}' | ironbee hook submit-verdict
+
+Then proceed with the edit.`;
+        process.stdout.write(JSON.stringify({
+            hookSpecificOutput: {
+                hookEventName: "PreToolUse",
+                permissionDecision: "deny",
+                permissionDecisionReason: reason,
+            },
+        }));
+        process.exit(0);
+        return;
+    }
+    // Stash prior file contents for clear-verdict to compute a unified-diff
+    // changeset. Skipped on deny (above) — the patch won't run, no consumer.
+    const toolUseId = input.tool_use_id ?? "";
+    if (toolUseId) {
+        const cfg = (0, config_1.loadConfig)(projectDir);
+        if ((0, config_1.getCaptureFileChangeset)(cfg)) {
+            const patchBody = readPatchBody(input);
+            if (patchBody !== null) {
+                stashPriorContents(projectDir, sessionId, toolUseId, patchBody);
+            }
+        }
+    }
+    await (0, activity_1.startActivity)({ sessionDir, actionsFile, source: "pre_tool_use" });
+    logger_1.logger.debug(`require-verdict: allowed apply_patch`);
+    process.exit(0);
+}
+//# sourceMappingURL=require-verdict.js.map

package/dist/clients/codex/hooks/require-verdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-verdict.js","sourceRoot":"","sources":["../../../../src/clients/codex/hooks/require-verdict.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;AAwEH,kBAyCC;AA/GD,2BAA8C;AAC9C,+BAAwC;AAExC,yDAA2E;AAC3E,2DAA6D;AAC7D,uEAAsE;AACtE,gDAA0E;AAC1E,gDAAyD;AACzD,8CAA+C;AAC/C,kCAA8C;AAC9C,mDAA0F;AAc1F,SAAS,aAAa,CAAC,KAA6C;IAChE,MAAM,EAAE,GAAY,KAAK,CAAC,UAAU,CAAC;IACrC,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACd,CAAC;IACD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QACxC,MAAM,GAAG,GAA4B,EAA6B,CAAC;QACnE,MAAM,GAAG,GAAY,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC;QAC9C,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC;QACf,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,UAAkB,EAAE,SAAiB;IAC1D,OAAO,IAAA,iBAAU,EAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAA,WAAI,EAAC,UAAU,EAAE,SAAS,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,kBAAkB,CACvB,UAAkB,EAClB,SAAiB,EACjB,SAAiB,EACjB,SAAiB;IAEjB,MAAM,OAAO,GAAqB,IAAA,mCAAmB,EAAC,SAAS,CAAC,CAAC;IACjE,MAAM,aAAa,GAAkC,EAAE,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACtB,iEAAiE;QACjE,qDAAqD;QACrD,IAAI,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3B,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YAC7B,SAAS;QACb,CAAC;QACD,MAAM,GAAG,GAAW,eAAe,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC;YACD,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAA,eAAU,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAY,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChF,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,eAAM,CAAC,KAAK,CAAC,mCAAmC,GAAG,yBAAyB,GAAG,EAAE,CAAC,CAAC;YACnF,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACjC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAyB,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;IACrE,IAAA,iCAAgB,EAAC,SAAS,EAAE,IAAA,kCAAkB,EAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;AACrE,CAAC;AAEM,KAAK,UAAU,GAAG,CAAC,UAAkB;IACxC,MAAM,KAAK,GAA2C,IAAA,0BAAmB,EAAC,IAAA,iBAAS,GAAE,CAAC,CAAC;IACvF,MAAM,SAAS,GAAW,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC;IACxD,MAAM,UAAU,GAAW,GAAG,UAAU,sBAAsB,SAAS,EAAE,CAAC;IAC1E,MAAM,WAAW,GAAW,GAAG,UAAU,gBAAgB,CAAC;IAC1D,IAAA,mBAAU,EAAC,GAAG,UAAU,cAAc,CAAC,CAAC;IAExC,IAAI,IAAA,sCAA4B,EAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAW;;;yBAGN,SAAS;;4BAEN,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;YAChC,kBAAkB,EAAE;gBAChB,aAAa,EAAE,YAAY;gBAC3B,kBAAkB,EAAE,MAAM;gBAC1B,wBAAwB,EAAE,MAAM;aACnC;SACJ,CAAC,CAAC,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACX,CAAC;IAED,wEAAwE;IACxE,yEAAyE;IACzE,MAAM,SAAS,GAAW,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;IAClD,IAAI,SAAS,EAAE,CAAC;QACZ,MAAM,GAAG,GAAkC,IAAA,mBAAU,EAAC,UAAU,CAAC,CAAC;QAClE,IAAI,IAAA,gCAAuB,EAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAkB,aAAa,CAAC,KAAK,CAAC,CAAC;YACtD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACrB,kBAAkB,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YACpE,CAAC;QACL,CAAC;IACL,CAAC;IAED,MAAM,IAAA,wBAAa,EAAC,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IACzE,eAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/clients/codex/hooks/require-verification.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Codex — PreToolUse hook adapter (matcher: `mcp__.*-devtools__.*`)
+ *
+ * Blocks devtools tool usage when no verification cycle is active.
+ * When allowed, injects `_metadata` into tool_input via Codex's
+ * `updatedInput` + **`permissionDecision: "allow"`** (the latter is
+ * REQUIRED — without it Codex silently drops the rewrite).
+ *
+ * Returns `permissionDecision: "deny"` (exit 2-equivalent) when blocked.
+ */
+export declare function run(projectDir: string): Promise<void>;
+//# sourceMappingURL=require-verification.d.ts.map

package/dist/clients/codex/hooks/require-verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-verification.d.ts","sourceRoot":"","sources":["../../../../src/clients/codex/hooks/require-verification.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAkBH,wBAAsB,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA0H3D"}

package/dist/clients/codex/hooks/require-verification.js

@@ -0,0 +1,136 @@
+"use strict";
+/**
+ * Codex — PreToolUse hook adapter (matcher: `mcp__.*-devtools__.*`)
+ *
+ * Blocks devtools tool usage when no verification cycle is active.
+ * When allowed, injects `_metadata` into tool_input via Codex's
+ * `updatedInput` + **`permissionDecision: "allow"`** (the latter is
+ * REQUIRED — without it Codex silently drops the rewrite).
+ *
+ * Returns `permissionDecision: "deny"` (exit 2-equivalent) when blocked.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const crypto_1 = require("crypto");
+const activity_1 = require("../../../hooks/core/activity");
+const session_state_1 = require("../../../hooks/core/session-state");
+const actions_1 = require("../../../hooks/core/actions");
+const config_1 = require("../../../lib/config");
+const logger_1 = require("../../../lib/logger");
+const stdin_1 = require("../../../lib/stdin");
+const util_1 = require("../util");
+async function run(projectDir) {
+    const input = (0, util_1.parseCodexHookStdin)((0, stdin_1.readStdin)());
+    const sessionId = input.session_id ?? "default";
+    const sessionDir = `${projectDir}/.ironbee/sessions/${sessionId}`;
+    const actionsFile = `${sessionDir}/actions.jsonl`;
+    (0, logger_1.setLogFile)(`${sessionDir}/session.log`);
+    const verificationId = (0, session_state_1.getActiveVerificationId)(sessionDir);
+    if (!verificationId) {
+        const reason = `BLOCKED: You must start a verification cycle before using devtools tools.
+
+Start verification first:
+  echo '{"session_id":"${sessionId}"}' | ironbee hook verification-start
+
+Then use the verification tools for the active cycle(s) — mcp__browser-devtools__bdt_* for browser, mcp__node-devtools__ndt_* for node, mcp__backend-devtools__bedt_* for backend.`;
+        process.stdout.write(JSON.stringify({
+            hookSpecificOutput: {
+                hookEventName: "PreToolUse",
+                permissionDecision: "deny",
+                permissionDecisionReason: reason,
+            },
+        }));
+        process.exit(0);
+        return;
+    }
+    // Recording enforcement is browser-only.
+    const toolName = input.tool_name ?? "";
+    const mcpServer = (0, util_1.extractCodexMcpServer)(toolName);
+    const isBrowserDevToolsCall = mcpServer === "browser-devtools";
+    // Codex flattens `-` → `_` on hook dispatch — the raw tool_name is
+    // `mcp__browser_devtools__bdt_content_start_recording`. Canonicalize
+    // the bare tool segment before comparing against the documented
+    // hyphenated form. Without this, the recording-start tool blocks
+    // itself and the agent can never start recording (infinite loop:
+    // gate denies → agent retries → gate denies → …).
+    const bareToolName = isBrowserDevToolsCall
+        ? (0, util_1.canonicalizeCodexToolName)(toolName.split("__").pop() ?? "")
+        : "";
+    const isRecordingStartTool = bareToolName === "bdt_content_start-recording";
+    if (isBrowserDevToolsCall &&
+        (0, session_state_1.isRecordingRequired)(sessionDir) &&
+        !(0, session_state_1.isRecordingActive)(sessionDir) &&
+        !isRecordingStartTool) {
+        const reason = `BLOCKED: Recording is required but not started.
+
+1. Start recording NOW:
+     Use mcp__browser-devtools__bdt_content_start-recording
+
+2. Run the verification (navigate, screenshot, aria, console, etc.)
+
+3. **Stop recording BEFORE submitting verdict:**
+     Use mcp__browser-devtools__bdt_content_stop-recording
+   submit-verdict will reject with "recording is still active" if you skip this.`;
+        process.stdout.write(JSON.stringify({
+            hookSpecificOutput: {
+                hookEventName: "PreToolUse",
+                permissionDecision: "deny",
+                permissionDecisionReason: reason,
+            },
+        }));
+        process.exit(0);
+        return;
+    }
+    // ensure activity is open before reading its ID for metadata propagation
+    await (0, activity_1.startActivity)({ sessionDir, actionsFile, source: "pre_tool_use" });
+    const traceId = (0, session_state_1.getActiveTraceId)(sessionDir);
+    const activityId = (0, session_state_1.getActiveActivityId)(sessionDir);
+    const projectName = (0, actions_1.resolveProjectName)(projectDir);
+    const traceStateParts = [`prj:${projectName}`, `sid:${sessionId}`];
+    if (activityId) {
+        traceStateParts.push(`aid:${activityId}`);
+    }
+    traceStateParts.push(`vid:${verificationId}`);
+    const traceState = `ironbee=${traceStateParts.join(";")}`;
+    const config = (0, config_1.loadConfig)(projectDir);
+    // tool_input is Record<string,unknown> | string | undefined; for MCP devtools
+    // matcher-routed tools it's always a Record (no custom_tool_call MCPs).
+    const baseInput = (input.tool_input && typeof input.tool_input === "object")
+        ? input.tool_input
+        : {};
+    const updatedInput = { ...baseInput };
+    const metadata = {
+        projectName,
+        sessionId,
+        activityId,
+        verificationId,
+        traceId,
+        traceState,
+        toolCallId: (0, crypto_1.randomUUID)(),
+    };
+    if (input.tool_use_id) {
+        metadata.toolUseId = input.tool_use_id;
+    }
+    metadata.mcpServer = mcpServer ?? "browser-devtools";
+    const userEmail = (0, session_state_1.getUserEmail)(sessionDir);
+    if (userEmail) {
+        metadata.userEmail = userEmail;
+    }
+    if (config.collector?.url) {
+        metadata.collectorUrl = config.collector.url;
+    }
+    if (config.collector?.apiKey) {
+        metadata.collectorApiKey = config.collector.apiKey;
+    }
+    updatedInput._metadata = metadata;
+    process.stdout.write(JSON.stringify({
+        hookSpecificOutput: {
+            hookEventName: "PreToolUse",
+            permissionDecision: "allow",
+            updatedInput,
+        },
+    }));
+    logger_1.logger.debug(`require-verification: allowed ${toolName} with _metadata`);
+    process.exit(0);
+}
+//# sourceMappingURL=require-verification.js.map

package/dist/clients/codex/hooks/require-verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-verification.js","sourceRoot":"","sources":["../../../../src/clients/codex/hooks/require-verification.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;AAkBH,kBA0HC;AA1ID,mCAAoC;AACpC,2DAA6D;AAC7D,qEAO2C;AAC3C,yDAAiE;AACjE,gDAAiD;AACjD,gDAAyD;AACzD,8CAA+C;AAC/C,kCAAgG;AAEzF,KAAK,UAAU,GAAG,CAAC,UAAkB;IACxC,MAAM,KAAK,GAA2C,IAAA,0BAAmB,EAAC,IAAA,iBAAS,GAAE,CAAC,CAAC;IACvF,MAAM,SAAS,GAAW,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC;IACxD,MAAM,UAAU,GAAW,GAAG,UAAU,sBAAsB,SAAS,EAAE,CAAC;IAC1E,MAAM,WAAW,GAAW,GAAG,UAAU,gBAAgB,CAAC;IAC1D,IAAA,mBAAU,EAAC,GAAG,UAAU,cAAc,CAAC,CAAC;IAExC,MAAM,cAAc,GAAuB,IAAA,uCAAuB,EAAC,UAAU,CAAC,CAAC;IAC/E,IAAI,CAAC,cAAc,EAAE,CAAC;QAClB,MAAM,MAAM,GAAW;;;yBAGN,SAAS;;mLAEiJ,CAAC;QAC5K,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;YAChC,kBAAkB,EAAE;gBAChB,aAAa,EAAE,YAAY;gBAC3B,kBAAkB,EAAE,MAAM;gBAC1B,wBAAwB,EAAE,MAAM;aACnC;SACJ,CAAC,CAAC,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACX,CAAC;IAED,yCAAyC;IACzC,MAAM,QAAQ,GAAW,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;IAC/C,MAAM,SAAS,GAAkB,IAAA,4BAAqB,EAAC,QAAQ,CAAC,CAAC;IACjE,MAAM,qBAAqB,GAAY,SAAS,KAAK,kBAAkB,CAAC;IACxE,mEAAmE;IACnE,qEAAqE;IACrE,gEAAgE;IAChE,iEAAiE;IACjE,iEAAiE;IACjE,kDAAkD;IAClD,MAAM,YAAY,GAAW,qBAAqB;QAC9C,CAAC,CAAC,IAAA,gCAAyB,EAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAC7D,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,oBAAoB,GAAY,YAAY,KAAK,6BAA6B,CAAC;IACrF,IACI,qBAAqB;QACrB,IAAA,mCAAmB,EAAC,UAAU,CAAC;QAC/B,CAAC,IAAA,iCAAiB,EAAC,UAAU,CAAC;QAC9B,CAAC,oBAAoB,EACvB,CAAC;QACC,MAAM,MAAM,GAAW;;;;;;;;;iFASkD,CAAC;QAC1E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;YAChC,kBAAkB,EAAE;gBAChB,aAAa,EAAE,YAAY;gBAC3B,kBAAkB,EAAE,MAAM;gBAC1B,wBAAwB,EAAE,MAAM;aACnC;SACJ,CAAC,CAAC,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACX,CAAC;IAED,yEAAyE;IACzE,MAAM,IAAA,wBAAa,EAAC,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IAEzE,MAAM,OAAO,GAAuB,IAAA,gCAAgB,EAAC,UAAU,CAAC,CAAC;IACjE,MAAM,UAAU,GAAuB,IAAA,mCAAmB,EAAC,UAAU,CAAC,CAAC;IAEvE,MAAM,WAAW,GAAW,IAAA,4BAAkB,EAAC,UAAU,CAAC,CAAC;IAC3D,MAAM,eAAe,GAAa,CAAC,OAAO,WAAW,EAAE,EAAE,OAAO,SAAS,EAAE,CAAC,CAAC;IAC7E,IAAI,UAAU,EAAE,CAAC;QACb,eAAe,CAAC,IAAI,CAAC,OAAO,UAAU,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,eAAe,CAAC,IAAI,CAAC,OAAO,cAAc,EAAE,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAW,WAAW,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAClE,MAAM,MAAM,GAAkC,IAAA,mBAAU,EAAC,UAAU,CAAC,CAAC;IAErE,8EAA8E;IAC9E,wEAAwE;IACxE,MAAM,SAAS,GAA4B,CAAC,KAAK,CAAC,UAAU,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC;QACjG,CAAC,CAAC,KAAK,CAAC,UAAU;QAClB,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,YAAY,GAA4B,EAAE,GAAG,SAAS,EAAE,CAAC;IAC/D,MAAM,QAAQ,GAA4B;QACtC,WAAW;QACX,SAAS;QACT,UAAU;QACV,cAAc;QACd,OAAO;QACP,UAAU;QACV,UAAU,EAAE,IAAA,mBAAU,GAAE;KAC3B,CAAC;IACF,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACpB,QAAQ,CAAC,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC;IAC3C,CAAC;IACD,QAAQ,CAAC,SAAS,GAAG,SAAS,IAAI,kBAAkB,CAAC;IACrD,MAAM,SAAS,GAAuB,IAAA,4BAAY,EAAC,UAAU,CAAC,CAAC;IAC/D,IAAI,SAAS,EAAE,CAAC;QACZ,QAAQ,CAAC,SAAS,GAAG,SAAS,CAAC;IACnC,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC;QACxB,QAAQ,CAAC,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC;IACjD,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QAC3B,QAAQ,CAAC,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;IACvD,CAAC;IACD,YAAY,CAAC,SAAS,GAAG,QAAQ,CAAC;IAElC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;QAChC,kBAAkB,EAAE;YAChB,aAAa,EAAE,YAAY;YAC3B,kBAAkB,EAAE,OAAO;YAC3B,YAAY;SACf;KACJ,CAAC,CAAC,CAAC;IACJ,eAAM,CAAC,KAAK,CAAC,iCAAiC,QAAQ,iBAAiB,CAAC,CAAC;IACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/clients/codex/hooks/session-start.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Codex — SessionStart hook adapter
+ *
+ * Appends a `session_start` entry to actions.jsonl, populates session-state
+ * with auth info from `~/.codex/auth.json` (cleaner than Claude — explicit
+ * `auth_mode` enum vs JWT decode), then runs the standard reconcile pass to
+ * close any abandoned cycles from a prior session.
+ */
+export declare function run(projectDir: string): Promise<void>;
+//# sourceMappingURL=session-start.d.ts.map

package/dist/clients/codex/hooks/session-start.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-start.d.ts","sourceRoot":"","sources":["../../../../src/clients/codex/hooks/session-start.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAYH,wBAAsB,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA+E3D"}