@ironbee-ai/cli 0.15.0 → 0.17.0

package/dist/clients/codex/hooks/track-action.js

@@ -0,0 +1,350 @@
+"use strict";
+/**
+ * Codex — PostToolUse hook adapter (matcher: `.*`)
+ *
+ * Two routes per tool:
+ *   - **devtools MCP tools** (mcp__{browser,node,backend}-devtools__*): record
+ *     a `tool_call` entry in actions.jsonl (verify-gate dep), update recording
+ *     state for browser-devtools. NOT queue-submitted — devtools MCP server
+ *     self-ships its own tool_call events to the collector.
+ *   - **All other tools**: submit a `send_event` job to the queue with a
+ *     whitelisted `tool_input` projection.
+ *
+ * Codex-specific: derive `duration` from the timing stash written by
+ * `track-action-pre.ts` (Codex hook stdin does not carry duration_ms).
+ *
+ * Codex has NO PostToolUseFailure event — failures fold into PostToolUse
+ * with the error embedded in `tool_response`. We detect failure
+ * heuristically (looking for `isError: true` on MCP responses); the
+ * `failure_type` / `is_interrupt` fields stay null (Codex provides no
+ * structured failure schema).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const actions_1 = require("../../../hooks/core/actions");
+const ids_1 = require("../../../import/ids");
+const session_state_1 = require("../../../hooks/core/session-state");
+const tool_use_stash_1 = require("../../../hooks/core/tool-use-stash");
+const config_1 = require("../../../lib/config");
+const logger_1 = require("../../../lib/logger");
+const output_1 = require("../../../lib/output");
+const stdin_1 = require("../../../lib/stdin");
+const queue_1 = require("../../../queue");
+const util_1 = require("../util");
+const RECORDING_START_BARE = "bdt_content_start-recording";
+const RECORDING_STOP_BARE = "bdt_content_stop-recording";
+function safeStringifyBytes(value) {
+    if (value === undefined || value === null) {
+        return 0;
+    }
+    // String values (apply_patch + exec_command's custom_tool_call_output
+    // wire shape) — return the RAW UTF-8 byte count, not the JSON-encoded
+    // size. Import (`import/codex/runner.ts:318`) uses Buffer.byteLength
+    // directly on the string. Without this branch, live ships
+    // `tool_response_size = utf8(JSON.stringify("foo")) = utf8('"foo"') = 5`
+    // while import ships `utf8("foo") = 3` — 5-15% systematic inflation
+    // on every Codex tool_call with string tool_response, broken cross-
+    // pipeline parity for size aggregates.
+    if (typeof value === "string") {
+        try {
+            return Buffer.byteLength(value, "utf8");
+        }
+        catch {
+            return 0;
+        }
+    }
+    try {
+        return Buffer.byteLength(JSON.stringify(value), "utf8");
+    }
+    catch {
+        return 0;
+    }
+}
+function detectFailure(toolResponse) {
+    if (toolResponse === undefined || toolResponse === null) {
+        return { isError: false, errorText: undefined };
+    }
+    if (typeof toolResponse === "object" && toolResponse !== null) {
+        const rec = toolResponse;
+        if (rec.isError === true || rec.is_error === true) {
+            const msg = rec.error ?? rec.message ?? rec.errorMessage;
+            return { isError: true, errorText: typeof msg === "string" ? msg : JSON.stringify(rec).slice(0, 500) };
+        }
+    }
+    // String tool_response (apply_patch + exec_command custom_tool_call_output
+    // shape). Same regex set as import's `looksLikeError` (`runner.ts:340-358`)
+    // + projection's `classifyOutputError`. Without this branch, every failed
+    // apply_patch / exec_command live emits `tool_call.error: undefined`
+    // despite real failure text. Cross-pipeline parity: import correctly
+    // detects these → live must too.
+    if (typeof toolResponse === "string") {
+        const t = toolResponse;
+        if (/(?:^|\n)Process exited with code [1-9]/.test(t)
+            || /^Exit code:\s*[1-9]/m.test(t)
+            || /apply_patch verification failed/i.test(t)
+            || /failed to find expected lines/i.test(t)
+            || /^\s*Error\b/.test(t)
+            || /(?:^|\n)\[Request interrupted by user\]/.test(t)
+            // Three patterns the analytics-side classifier counts under
+            // `errors.tool_error_categories.{file_changed,file_too_large,file_not_found}`
+            // but live + import previously missed — `session_analytics.errors.tool_errors_total`
+            // incremented while the per-call `tool_call.error` shipped
+            // undefined. Backend joins `Σ tool_call where error IS NOT NULL`
+            // vs the session aggregate then diverged on every session with
+            // a `cat missing.txt` / stale-read / oversized-read.
+            || /modified since (?:last )?read|stale read/i.test(t)
+            || /file (?:is )?too large|exceeds/i.test(t)
+            || /file not found|No such file or directory|does not exist/i.test(t)) {
+            return { isError: true, errorText: t.slice(0, 500) };
+        }
+    }
+    return { isError: false, errorText: undefined };
+}
+/**
+ * Read `_metadata.toolCallId` from a tool_input (PreToolUse injection by
+ * require-verification.ts). Used as the deterministic event.id so live + MCP
+ * server-shipped + import all collide cleanly on `(session_id, id)`.
+ * Validates UUID-shape so a corrupt / forged rollout can't poison the wire id.
+ */
+function extractMetadataToolCallId(toolInput) {
+    if (toolInput === null || typeof toolInput !== "object") {
+        return undefined;
+    }
+    const meta = toolInput._metadata;
+    if (meta === null || typeof meta !== "object") {
+        return undefined;
+    }
+    const cid = meta.toolCallId;
+    if (typeof cid !== "string") {
+        return undefined;
+    }
+    // UUID v4 shape check — same validation `import/codex/events/tool-call.ts`
+    // applies. Defensive against malformed rollouts.
+    if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(cid)) {
+        return undefined;
+    }
+    return cid;
+}
+function deriveDurationMs(sessionId, toolUseId) {
+    const stashed = (0, tool_use_stash_1.consumeToolUseData)(sessionId, toolUseId);
+    if (!stashed?.start_ns) {
+        return null;
+    }
+    try {
+        const delta = process.hrtime.bigint() - BigInt(stashed.start_ns);
+        return Number(delta / 1000000n);
+    }
+    catch (e) {
+        logger_1.logger.debug(`failed to derive duration from stash: ${e}`);
+        return null;
+    }
+}
+async function run(projectDir) {
+    const input = (0, util_1.parseCodexHookStdin)((0, stdin_1.readStdin)());
+    const sessionId = input.session_id ?? "default";
+    const sessionDir = `${projectDir}/.ironbee/sessions/${sessionId}`;
+    const actionsFile = `${sessionDir}/actions.jsonl`;
+    (0, logger_1.setLogFile)(`${sessionDir}/session.log`);
+    const rawToolName = input.tool_name ?? "";
+    const toolUseId = input.tool_use_id ?? "";
+    // tool_input is Record | string | undefined — preserve as-is for size
+    // calculation; downstream whitelist (extractCodexToolInput) handles both.
+    const toolInput = input.tool_input;
+    // Strip `_metadata` from tool_input before recording — mirrors Claude
+    // (clients/claude/hooks/track-action.ts) and Cursor
+    // (clients/cursor/hooks/track-action.ts) live behavior, and matches the
+    // canonical contract documented in `docs/claude-md/events.md`:
+    //   "_metadata is stripped from tool_input before writing to actions.jsonl"
+    // Without this, the Codex devtools branch ships the internal correlation
+    // block on the wire — `traceState`, `traceId`, `userEmail`, `toolCallId`,
+    // AND `collectorApiKey` (a secret) — embedded in `tool_input` for every
+    // devtools tool_call event. Size calculations still use the raw `toolInput`
+    // so the projected vs raw input/response sizing stays unchanged.
+    const toolInputAsRecord = toolInput && typeof toolInput === "object"
+        ? { ...toolInput, _metadata: undefined }
+        : undefined;
+    const toolResponse = input.tool_response;
+    const mcpServer = (0, util_1.extractCodexMcpServer)(rawToolName);
+    const isDevToolsTool = mcpServer === "browser-devtools" ||
+        mcpServer === "node-devtools" ||
+        mcpServer === "backend-devtools";
+    const durationMs = deriveDurationMs(sessionId, toolUseId);
+    const failure = detectFailure(toolResponse);
+    const classified = (0, util_1.classifyCodexTool)(rawToolName);
+    // ─── DevTools branch — record in actions.jsonl, update recording state ───
+    if (isDevToolsTool) {
+        const bareName = classified.tool_name;
+        if (bareName === RECORDING_START_BARE) {
+            (0, session_state_1.setRecordingActive)(sessionDir, true);
+        }
+        else if (bareName === RECORDING_STOP_BARE) {
+            (0, session_state_1.setRecordingActive)(sessionDir, false);
+        }
+        const activityId = (0, session_state_1.getActiveActivityId)(sessionDir);
+        // `activity_id` is ActivityAwareEvent-required (`string` typing), but the
+        // collector schema treats it as a non-empty UUID when present — emitting
+        // `activity_id: ""` would either FK-fail or be schema-rejected (same
+        // contract as round-27's fix_id treatment in clear-verdict.ts). Live
+        // Claude/Cursor use `activityId!` so JSON.stringify drops the key when
+        // undefined; Codex was the outlier shipping literal "". Cast and
+        // conditionally set so the wire field is OMITTED rather than empty.
+        const event = {
+            ...(0, actions_1.baseFields)(actionsFile),
+            type: "tool_call",
+            timestamp: Date.now(),
+            tool_type: classified.tool_type,
+            tool_name: classified.tool_name,
+            mcp_server: classified.mcp_server ?? mcpServer,
+            tool_input: toolInputAsRecord,
+            // Measure POST-`_metadata`-strip — Codex rollout records the
+            // model's raw function_call.arguments WITHOUT IronBee's
+            // injected `_metadata` block, so import correctly measures the
+            // smaller post-strip byte count. Live previously measured the
+            // hook-stdin `toolInput` BEFORE strip, inflating
+            // `tool_input_size` by ~700 bytes per devtools tool_call vs
+            // import — backend `(session_id, id)` LWW dedup then flipped
+            // the field between the inflated live value and the correct
+            // import value on every re-import. Empirically verified on
+            // the real-corpus (121 Codex devtools function_calls scanned:
+            // zero carry `_metadata` in the rollout).
+            tool_input_size: safeStringifyBytes(toolInputAsRecord),
+            // Cross-client parity (Claude+Cursor zero `tool_response_size` on
+            // failure — see clients/claude/hooks/track-action.ts:210 +
+            // import/claude/events/tool-call.ts:138-140). The documented
+            // contract: "live treats `tool_response` as omitted on failure
+            // and reports `tool_response_size: 0`". Codex was the outlier
+            // shipping the error blob byte count (hundreds of bytes per
+            // failed call) — backend cross-client `AVG(tool_response_size)`
+            // partitioned by failure status was off for Codex.
+            tool_response_size: failure.isError ? 0 : safeStringifyBytes(toolResponse),
+            duration: durationMs,
+        };
+        if (activityId) {
+            event.activity_id = activityId;
+        }
+        // Live↔import event.id parity. Per CLAUDE.md events.md spec: "live
+        // and import events collide cleanly on (session_id, id)". For
+        // devtools tools, prefer `_metadata.toolCallId` (the UUID baked
+        // into tool_input by require-verification — the same id the MCP
+        // server uses on its own emitted tool_call events). Falls back to
+        // deterministic-from-tool_use_id derivation so re-import dedups
+        // without duplicating rows. Without this override, every devtools
+        // tool_call in the warehouse duplicates per re-import.
+        const metadataToolCallId = extractMetadataToolCallId(toolInput);
+        if (metadataToolCallId !== undefined) {
+            event.id = metadataToolCallId;
+        }
+        else if (toolUseId.length > 0) {
+            event.id = (0, ids_1.deriveToolCallEventIdFromToolUseId)(sessionId, toolUseId);
+        }
+        // Claude-parity: tool_use_id is the host-provided join key the
+        // devtools MCP server uses on its own emitted tool_call events.
+        // Without it, the collector cannot correlate Codex devtools
+        // tool_call records (this event) with the MCP-side events. Live-
+        // verified in Claude track-action.ts:204; import sets it too at
+        // import/codex/events/tool-call.ts:87.
+        if (toolUseId) {
+            event.tool_use_id = toolUseId;
+        }
+        const verificationId = (0, session_state_1.getActiveVerificationId)(sessionDir);
+        if (verificationId) {
+            event.verification_id = verificationId;
+        }
+        const traceId = (0, session_state_1.getActiveTraceId)(sessionDir);
+        if (traceId) {
+            event.trace_id = traceId;
+        }
+        if (failure.isError) {
+            event.error = failure.errorText;
+        }
+        await (0, actions_1.appendAction)(actionsFile, event);
+        (0, output_1.writeAndExit)(JSON.stringify({}), 0);
+        return;
+    }
+    // ─── Non-devtools branch — queue submit for send_event ───
+    if (!(0, config_1.isJobQueueEnabled)(projectDir)) {
+        (0, output_1.writeAndExit)(JSON.stringify({}), 0);
+        return;
+    }
+    const activityId = (0, session_state_1.getActiveActivityId)(sessionDir);
+    const projectedInput = (0, util_1.extractCodexToolInput)(rawToolName, toolInput);
+    const toolInputSize = safeStringifyBytes(toolInput);
+    // Cross-client parity — see devtools branch above for full rationale.
+    const toolResponseSize = failure.isError ? 0 : safeStringifyBytes(toolResponse);
+    // Same `activity_id` rule as the devtools branch above — omit field
+    // when no activity is open instead of shipping literal "".
+    const event = {
+        ...(0, actions_1.baseFields)(actionsFile),
+        type: "tool_call",
+        timestamp: Date.now(),
+        tool_type: classified.tool_type,
+        tool_name: classified.tool_name || (0, util_1.normalizeCodexToolName)(rawToolName),
+        mcp_server: classified.mcp_server,
+        tool_input: projectedInput,
+        tool_input_size: toolInputSize,
+        tool_response_size: toolResponseSize,
+        duration: durationMs,
+    };
+    if (activityId) {
+        event.activity_id = activityId;
+    }
+    // Non-devtools branch: same live↔import event.id parity. No
+    // `_metadata.toolCallId` for non-devtools (require-verification only
+    // injects it for `mcp__*-devtools__*`), so use the deterministic
+    // tool_use_id formula. Without this, every apply_patch / exec_command
+    // duplicates in the warehouse on re-import.
+    if (toolUseId.length > 0) {
+        event.id = (0, ids_1.deriveToolCallEventIdFromToolUseId)(sessionId, toolUseId);
+    }
+    // Non-devtools branch also missing tool_use_id — same collector-join
+    // semantic. Both branches set when the hook provides it.
+    if (toolUseId) {
+        event.tool_use_id = toolUseId;
+    }
+    // Verification correlation parity with the devtools branch (and with
+    // Claude's track-action — see `clients/claude/hooks/track-action.ts:211`
+    // where `verification_id` / `trace_id` ride the SAME `entry` envelope
+    // through BOTH the devtools `appendAction` path AND the non-devtools
+    // queue `submitEvent` path). Codex previously set these only on the
+    // devtools branch, so a Codex session whose agent ran `apply_patch` /
+    // `exec_command` / `read_file` etc. during an active verification
+    // cycle shipped `tool_call` events with `verification_id` /
+    // `trace_id` MISSING, while the IDENTICAL Claude session shipped them
+    // populated. Backend cross-tool correlation (which native tools ran
+    // during this cycle?) broke cross-client.
+    const verificationId = (0, session_state_1.getActiveVerificationId)(sessionDir);
+    if (verificationId) {
+        event.verification_id = verificationId;
+    }
+    const traceId = (0, session_state_1.getActiveTraceId)(sessionDir);
+    if (traceId) {
+        event.trace_id = traceId;
+    }
+    if (failure.isError) {
+        event.error = failure.errorText;
+    }
+    try {
+        (0, queue_1.submit)(projectDir, sessionId, queue_1.SEND_EVENT_TYPE, event);
+    }
+    catch (e) {
+        if (e instanceof queue_1.JobTooLargeError) {
+            // Wire form already strips `tool_response` upstream (only
+            // `tool_response_size` rides on the event), so overflow here
+            // means something pathological — a giant `error` string from
+            // exec_command stderr, or an unusually large `tool_input`
+            // (projected via the whitelist but still oversized for some
+            // long file path / pattern). Re-submitting with an
+            // `tool_response_omitted: true` flag (the old retry) was a
+            // no-op: nothing got smaller, the same `JobTooLargeError`
+            // fired again, and the flag never made it onto the wire. Drop
+            // cleanly here — same semantics as Claude/Cursor's
+            // `submitEvent` paths in clients/{claude,cursor}/hooks/track-action.ts.
+            logger_1.logger.debug(`track-action: wire event too large for tool_call ${rawToolName}; dropping`);
+        }
+        else {
+            logger_1.logger.debug(`queue submit failed for tool_call ${rawToolName}: ${e}`);
+        }
+    }
+    (0, output_1.writeAndExit)(JSON.stringify({}), 0);
+}
+//# sourceMappingURL=track-action.js.map

package/dist/clients/codex/hooks/track-action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"track-action.js","sourceRoot":"","sources":["../../../../src/clients/codex/hooks/track-action.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;AAuIH,kBAqNC;AA1VD,yDAAuF;AACvF,6CAAyE;AACzE,qEAK2C;AAC3C,uEAAwE;AACxE,gDAAwD;AACxD,gDAAyD;AACzD,gDAAmD;AACnD,8CAA+C;AAC/C,0CAA2E;AAC3E,kCAMiB;AAGjB,MAAM,oBAAoB,GAAW,6BAA6B,CAAC;AACnE,MAAM,mBAAmB,GAAW,4BAA4B,CAAC;AAEjE,SAAS,kBAAkB,CAAC,KAAc;IACtC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,CAAC,CAAC;IACb,CAAC;IACD,sEAAsE;IACtE,sEAAsE;IACtE,qEAAqE;IACrE,0DAA0D;IAC1D,yEAAyE;IACzE,oEAAoE;IACpE,oEAAoE;IACpE,uCAAuC;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC;YACD,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,CAAC,CAAC;QACb,CAAC;IACL,CAAC;IACD,IAAI,CAAC;QACD,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,CAAC,CAAC;IACb,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,YAAqB;IACxC,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QACtD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC5D,MAAM,GAAG,GAA4B,YAAuC,CAAC;QAC7E,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAChD,MAAM,GAAG,GAAY,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,YAAY,CAAC;YAClE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAC3G,CAAC;IACL,CAAC;IACD,2EAA2E;IAC3E,4EAA4E;IAC5E,0EAA0E;IAC1E,qEAAqE;IACrE,qEAAqE;IACrE,iCAAiC;IACjC,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,CAAC,GAAW,YAAY,CAAC;QAC/B,IAAI,wCAAwC,CAAC,IAAI,CAAC,CAAC,CAAC;eAC7C,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;eAC9B,kCAAkC,CAAC,IAAI,CAAC,CAAC,CAAC;eAC1C,gCAAgC,CAAC,IAAI,CAAC,CAAC,CAAC;eACxC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;eACrB,yCAAyC,CAAC,IAAI,CAAC,CAAC,CAAC;YACpD,4DAA4D;YAC5D,8EAA8E;YAC9E,qFAAqF;YACrF,2DAA2D;YAC3D,iEAAiE;YACjE,+DAA+D;YAC/D,qDAAqD;eAClD,2CAA2C,CAAC,IAAI,CAAC,CAAC,CAAC;eACnD,iCAAiC,CAAC,IAAI,CAAC,CAAC,CAAC;eACzC,0DAA0D,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QACzD,CAAC;IACL,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,SAAS,yBAAyB,CAAC,SAAkB;IACjD,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,IAAI,GAAa,SAAqC,CAAC,SAAS,CAAC;IACvE,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,GAAG,GAAa,IAAgC,CAAC,UAAU,CAAC;IAClE,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,2EAA2E;IAC3E,iDAAiD;IACjD,IAAI,CAAC,iEAAiE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/E,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB,EAAE,SAAiB;IAC1D,MAAM,OAAO,GAA4B,IAAA,mCAAkB,EAAmB,SAAS,EAAE,SAAS,CAAC,CAAC;IACpG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,CAAC;QACD,MAAM,KAAK,GAAW,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzE,OAAO,MAAM,CAAC,KAAK,GAAG,QAAU,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,eAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,EAAE,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,GAAG,CAAC,UAAkB;IACxC,MAAM,KAAK,GAA2C,IAAA,0BAAmB,EAAC,IAAA,iBAAS,GAAE,CAAC,CAAC;IACvF,MAAM,SAAS,GAAW,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC;IACxD,MAAM,UAAU,GAAW,GAAG,UAAU,sBAAsB,SAAS,EAAE,CAAC;IAC1E,MAAM,WAAW,GAAW,GAAG,UAAU,gBAAgB,CAAC;IAC1D,IAAA,mBAAU,EAAC,GAAG,UAAU,cAAc,CAAC,CAAC;IAExC,MAAM,WAAW,GAAW,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;IAClD,MAAM,SAAS,GAAW,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;IAClD,sEAAsE;IACtE,0EAA0E;IAC1E,MAAM,SAAS,GAAiD,KAAK,CAAC,UAAU,CAAC;IACjF,sEAAsE;IACtE,oDAAoD;IACpD,wEAAwE;IACxE,+DAA+D;IAC/D,4EAA4E;IAC5E,yEAAyE;IACzE,0EAA0E;IAC1E,wEAAwE;IACxE,4EAA4E;IAC5E,iEAAiE;IACjE,MAAM,iBAAiB,GACnB,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;QACtC,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE;QACxC,CAAC,CAAC,SAAS,CAAC;IACpB,MAAM,YAAY,GAAY,KAAK,CAAC,aAAa,CAAC;IAClD,MAAM,SAAS,GAAkB,IAAA,4BAAqB,EAAC,WAAW,CAAC,CAAC;IACpE,MAAM,cAAc,GAChB,SAAS,KAAK,kBAAkB;QAChC,SAAS,KAAK,eAAe;QAC7B,SAAS,KAAK,kBAAkB,CAAC;IAErC,MAAM,UAAU,GAAkB,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACzE,MAAM,OAAO,GAAwD,aAAa,CAAC,YAAY,CAAC,CAAC;IAEjG,MAAM,UAAU,GAAyC,IAAA,wBAAiB,EAAC,WAAW,CAAC,CAAC;IAExF,4EAA4E;IAC5E,IAAI,cAAc,EAAE,CAAC;QACjB,MAAM,QAAQ,GAAW,UAAU,CAAC,SAAS,CAAC;QAC9C,IAAI,QAAQ,KAAK,oBAAoB,EAAE,CAAC;YACpC,IAAA,kCAAkB,EAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACzC,CAAC;aAAM,IAAI,QAAQ,KAAK,mBAAmB,EAAE,CAAC;YAC1C,IAAA,kCAAkB,EAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,UAAU,GAAuB,IAAA,mCAAmB,EAAC,UAAU,CAAC,CAAC;QACvE,0EAA0E;QAC1E,yEAAyE;QACzE,qEAAqE;QACrE,qEAAqE;QACrE,uEAAuE;QACvE,iEAAiE;QACjE,oEAAoE;QACpE,MAAM,KAAK,GAAmB;YAC1B,GAAG,IAAA,oBAAU,EAAC,WAAW,CAAC;YAC1B,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,UAAU,EAAE,UAAU,CAAC,UAAU,IAAI,SAAS;YAC9C,UAAU,EAAE,iBAAiB;YAC7B,6DAA6D;YAC7D,wDAAwD;YACxD,+DAA+D;YAC/D,8DAA8D;YAC9D,iDAAiD;YACjD,4DAA4D;YAC5D,6DAA6D;YAC7D,4DAA4D;YAC5D,2DAA2D;YAC3D,8DAA8D;YAC9D,0CAA0C;YAC1C,eAAe,EAAE,kBAAkB,CAAC,iBAAiB,CAAC;YACtD,kEAAkE;YAClE,2DAA2D;YAC3D,6DAA6D;YAC7D,+DAA+D;YAC/D,8DAA8D;YAC9D,4DAA4D;YAC5D,gEAAgE;YAChE,mDAAmD;YACnD,kBAAkB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,YAAY,CAAC;YAC1E,QAAQ,EAAE,UAAU;SACL,CAAC;QACpB,IAAI,UAAU,EAAE,CAAC;YACb,KAAK,CAAC,WAAW,GAAG,UAAU,CAAC;QACnC,CAAC;QACD,mEAAmE;QACnE,8DAA8D;QAC9D,gEAAgE;QAChE,gEAAgE;QAChE,kEAAkE;QAClE,gEAAgE;QAChE,kEAAkE;QAClE,uDAAuD;QACvD,MAAM,kBAAkB,GAAuB,yBAAyB,CAAC,SAAS,CAAC,CAAC;QACpF,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACnC,KAAK,CAAC,EAAE,GAAG,kBAAkB,CAAC;QAClC,CAAC;aAAM,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,KAAK,CAAC,EAAE,GAAG,IAAA,wCAAkC,EAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACxE,CAAC;QACD,+DAA+D;QAC/D,gEAAgE;QAChE,4DAA4D;QAC5D,iEAAiE;QACjE,gEAAgE;QAChE,uCAAuC;QACvC,IAAI,SAAS,EAAE,CAAC;YACZ,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC;QAClC,CAAC;QACD,MAAM,cAAc,GAAuB,IAAA,uCAAuB,EAAC,UAAU,CAAC,CAAC;QAC/E,IAAI,cAAc,EAAE,CAAC;YACjB,KAAK,CAAC,eAAe,GAAG,cAAc,CAAC;QAC3C,CAAC;QACD,MAAM,OAAO,GAAuB,IAAA,gCAAgB,EAAC,UAAU,CAAC,CAAC;QACjE,IAAI,OAAO,EAAE,CAAC;YACV,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC;QAC7B,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAClB,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,CAAC;QACD,MAAM,IAAA,sBAAY,EAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACvC,IAAA,qBAAY,EAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC,OAAO;IACX,CAAC;IAED,4DAA4D;IAC5D,IAAI,CAAC,IAAA,0BAAiB,EAAC,UAAU,CAAC,EAAE,CAAC;QACjC,IAAA,qBAAY,EAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC,OAAO;IACX,CAAC;IAED,MAAM,UAAU,GAAuB,IAAA,mCAAmB,EAAC,UAAU,CAAC,CAAC;IACvE,MAAM,cAAc,GAAwC,IAAA,4BAAqB,EAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC1G,MAAM,aAAa,GAAW,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC5D,sEAAsE;IACtE,MAAM,gBAAgB,GAAW,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAExF,oEAAoE;IACpE,2DAA2D;IAC3D,MAAM,KAAK,GAAmB;QAC1B,GAAG,IAAA,oBAAU,EAAC,WAAW,CAAC;QAC1B,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,SAAS,EAAE,UAAU,CAAC,SAAS,IAAI,IAAA,6BAAsB,EAAC,WAAW,CAAC;QACtE,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,UAAU,EAAE,cAAc;QAC1B,eAAe,EAAE,aAAa;QAC9B,kBAAkB,EAAE,gBAAgB;QACpC,QAAQ,EAAE,UAAU;KACL,CAAC;IACpB,IAAI,UAAU,EAAE,CAAC;QACb,KAAK,CAAC,WAAW,GAAG,UAAU,CAAC;IACnC,CAAC;IACD,4DAA4D;IAC5D,qEAAqE;IACrE,iEAAiE;IACjE,sEAAsE;IACtE,4CAA4C;IAC5C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,EAAE,GAAG,IAAA,wCAAkC,EAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACxE,CAAC;IACD,qEAAqE;IACrE,yDAAyD;IACzD,IAAI,SAAS,EAAE,CAAC;QACZ,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC;IAClC,CAAC;IACD,qEAAqE;IACrE,yEAAyE;IACzE,sEAAsE;IACtE,qEAAqE;IACrE,oEAAoE;IACpE,sEAAsE;IACtE,kEAAkE;IAClE,4DAA4D;IAC5D,sEAAsE;IACtE,oEAAoE;IACpE,0CAA0C;IAC1C,MAAM,cAAc,GAAuB,IAAA,uCAAuB,EAAC,UAAU,CAAC,CAAC;IAC/E,IAAI,cAAc,EAAE,CAAC;QACjB,KAAK,CAAC,eAAe,GAAG,cAAc,CAAC;IAC3C,CAAC;IACD,MAAM,OAAO,GAAuB,IAAA,gCAAgB,EAAC,UAAU,CAAC,CAAC;IACjE,IAAI,OAAO,EAAE,CAAC;QACV,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC7B,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,CAAC;IACD,IAAI,CAAC;QACD,IAAA,cAAM,EAAC,UAAU,EAAE,SAAS,EAAE,uBAAe,EAAE,KAAK,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,IAAI,CAAC,YAAY,wBAAgB,EAAE,CAAC;YAChC,0DAA0D;YAC1D,6DAA6D;YAC7D,6DAA6D;YAC7D,0DAA0D;YAC1D,4DAA4D;YAC5D,mDAAmD;YACnD,2DAA2D;YAC3D,0DAA0D;YAC1D,8DAA8D;YAC9D,mDAAmD;YACnD,wEAAwE;YACxE,eAAM,CAAC,KAAK,CAAC,oDAAoD,WAAW,YAAY,CAAC,CAAC;QAC9F,CAAC;aAAM,CAAC;YACJ,eAAM,CAAC,KAAK,CAAC,qCAAqC,WAAW,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3E,CAAC;IACL,CAAC;IACD,IAAA,qBAAY,EAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACxC,CAAC"}

package/dist/clients/codex/hooks/verify-gate.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Codex — Stop hook adapter (verification-enabled mode)
+ *
+ * Runs the verify-gate; on block, returns `decision: "block"` + `reason`
+ * (Codex turns the reason into a continuation prompt → mechanically forces
+ * the agent back into the loop, same semantic as Claude's exit-2-with-stderr
+ * and Cursor's followup_message).
+ *
+ * ALSO writes a tentative `session_end` event ("Stop-as-checkpoint" pattern)
+ * with a deterministic id derived from session_id. Codex has no `SessionEnd`
+ * hook (`/quit` fires zero hooks), so every Stop is a potential session-end
+ * candidate; backend `(session_id, id)` dedup keeps only the latest snapshot.
+ */
+export declare function run(projectDir: string): Promise<void>;
+//# sourceMappingURL=verify-gate.d.ts.map

package/dist/clients/codex/hooks/verify-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-gate.d.ts","sourceRoot":"","sources":["../../../../src/clients/codex/hooks/verify-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAoBH,wBAAsB,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAmF3D"}

package/dist/clients/codex/hooks/verify-gate.js

@@ -0,0 +1,105 @@
+"use strict";
+/**
+ * Codex — Stop hook adapter (verification-enabled mode)
+ *
+ * Runs the verify-gate; on block, returns `decision: "block"` + `reason`
+ * (Codex turns the reason into a continuation prompt → mechanically forces
+ * the agent back into the loop, same semantic as Claude's exit-2-with-stderr
+ * and Cursor's followup_message).
+ *
+ * ALSO writes a tentative `session_end` event ("Stop-as-checkpoint" pattern)
+ * with a deterministic id derived from session_id. Codex has no `SessionEnd`
+ * hook (`/quit` fires zero hooks), so every Stop is a potential session-end
+ * candidate; backend `(session_id, id)` dedup keeps only the latest snapshot.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const actions_1 = require("../../../hooks/core/actions");
+const activity_1 = require("../../../hooks/core/activity");
+const verify_gate_1 = require("../../../hooks/core/verify-gate");
+const config_1 = require("../../../lib/config");
+const logger_1 = require("../../../lib/logger");
+const output_1 = require("../../../lib/output");
+const stdin_1 = require("../../../lib/stdin");
+const queue_1 = require("../../../queue");
+const spawn_1 = require("../../../analytics/codex/spawn");
+const session_state_1 = require("../../../hooks/core/session-state");
+const util_1 = require("../util");
+async function run(projectDir) {
+    const input = (0, util_1.parseCodexHookStdin)((0, stdin_1.readStdin)());
+    const sessionId = input.session_id ?? "default";
+    (0, logger_1.setLogFile)(`${projectDir}/.ironbee/sessions/${sessionId}/session.log`);
+    const sessionDir = `${projectDir}/.ironbee/sessions/${sessionId}`;
+    const actionsFile = `${sessionDir}/actions.jsonl`;
+    const config = (0, config_1.loadConfig)(projectDir);
+    const result = await (0, verify_gate_1.runVerifyGate)({
+        sessionId,
+        sessionDir,
+        actionsFile,
+        verdictFile: `${sessionDir}/verdict.json`,
+        maxRetries: (0, config_1.getMaxRetries)(config),
+        config,
+        projectDir,
+    });
+    // Snapshot activity_id BEFORE endActivity clears it. The detached
+    // analytics worker below uses this for `session_status.activity_id`
+    // correlation — without the pre-capture, `readState` after endActivity
+    // reads `activeActivityId: undefined` and the wire field ships as
+    // empty string. Hits 100% of Codex sessions with verification enabled.
+    const preStopActivityId = (0, session_state_1.readState)(sessionDir)?.activeActivityId ?? "";
+    if (result.action === "allow") {
+        await (0, activity_1.endActivity)({ sessionDir, actionsFile });
+    }
+    // Stop-as-checkpoint: write tentative session_end with deterministic id.
+    // Backend dedup `(session_id, id)` keeps the latest snapshot.
+    const now = Date.now();
+    const checkpoint = {
+        ...(0, actions_1.baseFields)(actionsFile),
+        id: (0, actions_1.deterministicSessionEndId)(sessionId),
+        type: "session_end",
+        timestamp: now,
+        session_id: sessionId,
+        duration: (0, actions_1.findDurationSinceLastAction)(actionsFile, "session_start", now),
+        reason: "checkpoint",
+    };
+    await (0, actions_1.appendAction)(actionsFile, checkpoint);
+    // Codex analytics: api_request + session_status + session_analytics —
+    // all emitted by the detached worker (mirror of Claude's
+    // spawnDetachedAnalyticsWorker pattern) so the Stop hook returns in
+    // ~ms. session_turn_analytics + session_context are intentionally out
+    // of scope on Codex. The worker reads new rollout bytes incrementally
+    // via state.json cursors. Failures inside the worker land in
+    // session.log; the Stop hook is never blocked.
+    try {
+        const state = (0, session_state_1.readState)(sessionDir);
+        (0, spawn_1.spawnDetachedCodexAnalyticsWorker)({
+            projectDir,
+            sessionId,
+            rolloutPath: input.transcript_path,
+            userEmail: state?.userEmail ?? undefined,
+            usageType: state?.usageType ?? undefined,
+            usagePlan: state?.usagePlan ?? undefined,
+            activityId: preStopActivityId,
+        });
+    }
+    catch (e) {
+        logger_1.logger.debug(`codex analytics spawn failed: ${e instanceof Error ? e.message : e}`);
+    }
+    (0, queue_1.flushInBackground)(projectDir, sessionId);
+    // Per-Stop straggler retry — re-attempt any snapshots left behind by a
+    // prior TransientError. Especially important for Codex: there's no native
+    // SessionEnd hook (`/quit` fires zero hooks per #22858), so without this
+    // transient-error snapshots accumulate forever and only manual
+    // `ironbee queue drain` recovers them.
+    (0, queue_1.flushStragglersInBackground)(projectDir, sessionId);
+    logger_1.logger.debug(`verify-gate: ${result.action}`);
+    if (result.action === "block") {
+        (0, output_1.writeAndExit)(JSON.stringify({
+            decision: "block",
+            reason: result.message ?? "Verification required.",
+        }), 0);
+        return;
+    }
+    (0, output_1.writeAndExit)(JSON.stringify({}), 0);
+}
+//# sourceMappingURL=verify-gate.js.map

package/dist/clients/codex/hooks/verify-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-gate.js","sourceRoot":"","sources":["../../../../src/clients/codex/hooks/verify-gate.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;AAoBH,kBAmFC;AArGD,yDAMqC;AACrC,2DAA2D;AAC3D,iEAAkF;AAClF,gDAA+E;AAC/E,gDAAyD;AACzD,gDAAmD;AACnD,8CAA+C;AAC/C,0CAAgF;AAChF,0DAAmF;AACnF,qEAA8D;AAC9D,kCAA8C;AAEvC,KAAK,UAAU,GAAG,CAAC,UAAkB;IACxC,MAAM,KAAK,GAA2C,IAAA,0BAAmB,EAAC,IAAA,iBAAS,GAAE,CAAC,CAAC;IACvF,MAAM,SAAS,GAAW,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC;IACxD,IAAA,mBAAU,EAAC,GAAG,UAAU,sBAAsB,SAAS,cAAc,CAAC,CAAC;IAEvE,MAAM,UAAU,GAAW,GAAG,UAAU,sBAAsB,SAAS,EAAE,CAAC;IAC1E,MAAM,WAAW,GAAW,GAAG,UAAU,gBAAgB,CAAC;IAC1D,MAAM,MAAM,GAAkB,IAAA,mBAAU,EAAC,UAAU,CAAC,CAAC;IAErD,MAAM,MAAM,GAAqB,MAAM,IAAA,2BAAa,EAAC;QACjD,SAAS;QACT,UAAU;QACV,WAAW;QACX,WAAW,EAAE,GAAG,UAAU,eAAe;QACzC,UAAU,EAAE,IAAA,sBAAa,EAAC,MAAM,CAAC;QACjC,MAAM;QACN,UAAU;KACb,CAAC,CAAC;IAEH,kEAAkE;IAClE,oEAAoE;IACpE,uEAAuE;IACvE,kEAAkE;IAClE,uEAAuE;IACvE,MAAM,iBAAiB,GAAW,IAAA,yBAAS,EAAC,UAAU,CAAC,EAAE,gBAAgB,IAAI,EAAE,CAAC;IAEhF,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAA,sBAAW,EAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,yEAAyE;IACzE,8DAA8D;IAC9D,MAAM,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAqB;QACjC,GAAG,IAAA,oBAAU,EAAC,WAAW,CAAC;QAC1B,EAAE,EAAE,IAAA,mCAAyB,EAAC,SAAS,CAAC;QACxC,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,GAAG;QACd,UAAU,EAAE,SAAS;QACrB,QAAQ,EAAE,IAAA,qCAA2B,EAAC,WAAW,EAAE,eAAe,EAAE,GAAG,CAAC;QACxE,MAAM,EAAE,YAAY;KACvB,CAAC;IACF,MAAM,IAAA,sBAAY,EAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAE5C,sEAAsE;IACtE,yDAAyD;IACzD,oEAAoE;IACpE,sEAAsE;IACtE,sEAAsE;IACtE,6DAA6D;IAC7D,+CAA+C;IAC/C,IAAI,CAAC;QACD,MAAM,KAAK,GAAiC,IAAA,yBAAS,EAAC,UAAU,CAAC,CAAC;QAClE,IAAA,yCAAiC,EAAC;YAC9B,UAAU;YACV,SAAS;YACT,WAAW,EAAE,KAAK,CAAC,eAAe;YAClC,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,SAAS;YACxC,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,SAAS;YACxC,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,SAAS;YACxC,UAAU,EAAE,iBAAiB;SAChC,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,eAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,IAAA,yBAAiB,EAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACzC,uEAAuE;IACvE,0EAA0E;IAC1E,yEAAyE;IACzE,+DAA+D;IAC/D,uCAAuC;IACvC,IAAA,mCAA2B,EAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACnD,eAAM,CAAC,KAAK,CAAC,gBAAgB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAE9C,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC5B,IAAA,qBAAY,EAAC,IAAI,CAAC,SAAS,CAAC;YACxB,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,MAAM,CAAC,OAAO,IAAI,wBAAwB;SACrD,CAAC,EAAE,CAAC,CAAC,CAAC;QACP,OAAO;IACX,CAAC;IACD,IAAA,qBAAY,EAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACxC,CAAC"}

package/dist/clients/codex/index.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Codex CLI client adapter.
+ *
+ * Targets interactive Codex TUI (the developer-workstation surface).
+ * `codex exec` non-interactive mode is OUT OF SCOPE — hooks don't fire there
+ * per regression #24211.
+ *
+ * Install writes USER-LEVEL artifacts (`~/.codex/hooks.json`,
+ * `~/.codex/config.toml`) to bypass Codex's project-trust gate, plus
+ * PROJECT-LEVEL guidance (`AGENTS.md` block, `.agents/skills/<name>/SKILL.md`).
+ * Uninstall is symmetric — strips IronBee blocks, preserves user content.
+ */
+import { IClient } from "../base";
+import { IronBeeConfig } from "../../lib/config";
+export declare class CodexClient implements IClient {
+    readonly name: string;
+    detect(projectDir: string): boolean;
+    resolveProjectDir(): string;
+    install(projectDir: string, config?: IronBeeConfig): void;
+    uninstall(projectDir: string): void;
+    private cleanupArtifacts;
+    runVerifyGate(projectDir: string): Promise<void>;
+    runActivityEnd(projectDir: string): Promise<void>;
+    runSessionStart(projectDir: string): Promise<void>;
+    runActivityStart(projectDir: string): Promise<void>;
+    runRequireVerification(projectDir: string, opts?: {
+        soft?: boolean;
+    }): Promise<void>;
+    runRequireVerdict(projectDir: string, opts?: {
+        soft?: boolean;
+    }): Promise<void>;
+    runClearVerdict(projectDir: string): Promise<void>;
+    runTrackAction(projectDir: string): Promise<void>;
+    runTrackActionMonitor(projectDir: string): Promise<void>;
+    runTrackActionPre(projectDir: string): Promise<void>;
+    runSessionEnd(_projectDir: string): Promise<void>;
+    private mergeHooksConfig;
+    private removeIronBeeHooks;
+    private maybeDeleteEmptyHooks;
+    private mergeConfigToml;
+    private removeIronBeeMcpServers;
+    private writeAgentsMdBlock;
+    /**
+     * Write the project-level skill files. `includeSkill` controls the
+     * auto-invoked `ironbee-verification` skill (enforce only — it's the
+     * always-on "you must verify" mandate). The `$ironbee-verify` command skill
+     * is always written (it's the manual trigger, wanted in enforce + assist).
+     */
+    private writeSkills;
+    private removeDir;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/clients/codex/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/clients/codex/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAKlC,OAAO,EAGH,aAAa,EAQhB,MAAM,kBAAkB,CAAC;AA8E1B,qBAAa,WAAY,YAAW,OAAO;IACvC,SAAgB,IAAI,EAAE,MAAM,CAAW;IAEhC,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAMnC,iBAAiB,IAAI,MAAM;IAI3B,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,IAAI;IAoEzD,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAK1C,OAAO,CAAC,gBAAgB;IAiCX,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAGhD,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAGjD,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAGlD,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAGnD,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAGpF,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAG/E,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAGlD,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAGjD,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAGxD,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAGpD,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS9D,OAAO,CAAC,gBAAgB;IA0FxB,OAAO,CAAC,kBAAkB;IAyB1B,OAAO,CAAC,qBAAqB;IAc7B,OAAO,CAAC,eAAe;IAsCvB,OAAO,CAAC,uBAAuB;IAW/B,OAAO,CAAC,kBAAkB;IAuC1B;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAyBnB,OAAO,CAAC,SAAS;CASpB"}