@ironbee-ai/cli 0.15.0 → 0.17.0

package/dist/import/codex/discovery.js

@@ -0,0 +1,202 @@
+"use strict";
+/**
+ * IronBee CLI — Codex Import Discovery
+ *
+ * Resolves an `ImportScope` to a list of `ImportTarget`s by walking
+ * `~/.codex/sessions/YYYY/MM/DD/rollout-<ISO>-<UUID>.jsonl`.
+ *
+ * Unlike Claude (encoded project folder under ~/.claude/projects/), Codex
+ * stores rollouts flat by date. Project association is recovered by
+ * reading the first line's `session_meta.payload.cwd`. So:
+ *   - `current-project` → scan every rollout, keep those whose first-line
+ *     cwd matches the current cwd
+ *   - `projects <paths>` → scan every rollout, keep those whose first-line
+ *     cwd matches any of the supplied paths
+ *   - `all-projects` → scan every rollout, project comes from each rollout's
+ *     own first-line cwd (one project per rollout)
+ *   - `transcript <path>` → single file, project from its session_meta line
+ *
+ * Discovery does NOT apply the time-range filter — `filter.ts` does that
+ * after a session is found.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.findCodexTranscripts = findCodexTranscripts;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const logger_1 = require("../../lib/logger");
+const actions_1 = require("../../hooks/core/actions");
+const transcript_1 = require("../../analytics/codex/transcript");
+/**
+ * Resolve the scope flag to a list of candidate transcripts. Each returned
+ * `ImportTarget` is fully populated EXCEPT that no time-range filter has
+ * been applied yet — callers run `filter.ts` over this list.
+ *
+ * Codex's flat-by-date layout means every scope (except `transcript`) does
+ * a full walk + per-file first-line read. That's O(rollouts) per import
+ * invocation — acceptable: rollouts are < 10K per machine for a typical
+ * dev box, and the first-line read peeks at ≤ 4 KB.
+ */
+function findCodexTranscripts(scope) {
+    if (scope.kind === "transcript") {
+        const t = buildSingleTranscriptTarget(scope.path);
+        return t !== null ? [t] : [];
+    }
+    if (!(0, fs_1.existsSync)((0, transcript_1.codexSessionsRoot)())) {
+        return [];
+    }
+    // Canonicalize comparison paths via realpathSync — macOS resolves
+    // `/var/folders/...` → `/private/var/folders/...` and session_meta.cwd
+    // typically holds the realpath form; without canonicalization a
+    // symlinked `--projects /tmp/proj` silently returns zero targets when
+    // Codex stored `/private/tmp/proj`. Same for cwd on `current-project`.
+    const allowProjects = scope.kind === "current-project"
+        ? new Set([tryRealpath(process.cwd())])
+        : scope.kind === "projects"
+            ? new Set(scope.paths.map((p) => tryRealpath((0, path_1.resolve)(p))))
+            : null; // all-projects: accept every cwd
+    const out = [];
+    for (const rolloutPath of (0, transcript_1.walkAllCodexRollouts)()) {
+        const t = buildTargetFromRollout(rolloutPath, allowProjects);
+        if (t !== null) {
+            out.push(t);
+        }
+    }
+    return out;
+}
+function buildSingleTranscriptTarget(path) {
+    const absPath = (0, path_1.isAbsolute)(path) ? path : (0, path_1.resolve)(path);
+    if (!(0, fs_1.existsSync)(absPath)) {
+        logger_1.logger.debug(`codex import discovery: --transcript ${absPath} doesn't exist`);
+        return null;
+    }
+    if (!absPath.endsWith(".jsonl")) {
+        logger_1.logger.debug(`codex import discovery: --transcript ${absPath} is not a .jsonl file`);
+        return null;
+    }
+    // No allow-list filter for single-transcript mode — caller explicitly
+    // asked for this file, so we accept whatever cwd the rollout has.
+    return buildTargetFromRollout(absPath, null);
+}
+function tryRealpath(p) {
+    try {
+        return (0, fs_1.realpathSync)(p);
+    }
+    catch {
+        // Path doesn't exist on this machine (deleted, never created, or
+        // typo). Fall back to the lexical form — the allow-list will
+        // simply never match, which is the desired behavior.
+        return p;
+    }
+}
+function buildTargetFromRollout(rolloutPath, allowProjects) {
+    const sessionId = (0, transcript_1.sessionIdFromRolloutPath)(rolloutPath);
+    if (sessionId === null) {
+        logger_1.logger.debug(`codex import discovery: filename shape mismatch ${rolloutPath} — skipping`);
+        return null;
+    }
+    const meta = peekSessionMeta(rolloutPath);
+    if (meta === null) {
+        logger_1.logger.debug(`codex import discovery: ${rolloutPath} has no session_meta in header — skipping`);
+        return null;
+    }
+    if (allowProjects !== null && !allowProjects.has(meta.cwd)) {
+        return null;
+    }
+    let mtimeMs;
+    let sizeBytes;
+    try {
+        const s = (0, fs_1.statSync)(rolloutPath);
+        mtimeMs = s.mtimeMs;
+        sizeBytes = s.size;
+    }
+    catch (e) {
+        logger_1.logger.debug(`codex import discovery: stat(${rolloutPath}) failed: ${e instanceof Error ? e.message : e}`);
+        return null;
+    }
+    const sessionStartMs = Date.parse(meta.timestamp);
+    if (!Number.isFinite(sessionStartMs)) {
+        logger_1.logger.debug(`codex import discovery: ${rolloutPath} session_meta has unparseable timestamp ${meta.timestamp} — skipping`);
+        return null;
+    }
+    return {
+        client: "codex",
+        sessionId,
+        transcriptPath: rolloutPath,
+        projectDir: meta.cwd,
+        // Use git-aware resolveProjectName (Claude-parity) so the import
+        // matches the live emit's project_name. Plain basename diverges when
+        // a session was launched from a subdir or when the local dir name
+        // differs from the git remote name — backend would then see "same
+        // session, two different project labels" depending on which path
+        // (live vs import) wrote last. See `analytics/codex/emit.ts`
+        // for the same fix on the live side.
+        projectName: (0, actions_1.resolveProjectName)(meta.cwd),
+        sessionStartMs,
+        mtimeMs,
+        sizeBytes,
+    };
+}
+/**
+ * Read the first ≤ 4 KB of the rollout, parse the first complete line as
+ * the session_meta entry, and pull out `cwd` + `timestamp`. Returns null
+ * when the first line isn't a session_meta or the read fails. Sized to be
+ * cheap (one syscall + small alloc) so a full-store walk stays fast.
+ */
+function peekSessionMeta(rolloutPath) {
+    const READ_CAP = 4 * 1024;
+    let fd;
+    try {
+        fd = (0, fs_1.openSync)(rolloutPath, "r");
+    }
+    catch {
+        return null;
+    }
+    let firstLine;
+    try {
+        const buf = Buffer.alloc(READ_CAP);
+        const n = (0, fs_1.readSync)(fd, buf, 0, READ_CAP, 0);
+        const head = buf.subarray(0, n).toString("utf-8");
+        const newlineIdx = head.indexOf("\n");
+        firstLine = newlineIdx === -1 ? head : head.slice(0, newlineIdx);
+    }
+    catch {
+        // Finally runs in all paths — closeSync below handles cleanup.
+        // No inner close here (it would double-close → EBADF).
+        return null;
+    }
+    finally {
+        try {
+            (0, fs_1.closeSync)(fd);
+        }
+        catch { /* ignore */ }
+    }
+    if (firstLine.length === 0) {
+        return null;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(firstLine);
+    }
+    catch {
+        return null;
+    }
+    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+        return null;
+    }
+    const obj = parsed;
+    if (obj.type !== "session_meta") {
+        return null;
+    }
+    const payload = obj.payload;
+    if (payload === null || typeof payload !== "object" || Array.isArray(payload)) {
+        return null;
+    }
+    const p = payload;
+    const cwd = p.cwd;
+    const timestamp = p.timestamp ?? obj.timestamp;
+    if (typeof cwd !== "string" || cwd.length === 0 || typeof timestamp !== "string" || timestamp.length === 0) {
+        return null;
+    }
+    return { cwd, timestamp };
+}
+//# sourceMappingURL=discovery.js.map

package/dist/import/codex/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../src/import/codex/discovery.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;AAuBH,oDA6BC;AAlDD,2BAAuF;AACvF,+BAAqD;AACrD,6CAA0C;AAC1C,sDAA8D;AAC9D,iEAI0C;AAG1C;;;;;;;;;GASG;AACH,SAAgB,oBAAoB,CAAC,KAAkB;IACnD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAwB,2BAA2B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvE,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjC,CAAC;IAED,IAAI,CAAC,IAAA,eAAU,EAAC,IAAA,8BAAiB,GAAE,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,CAAC;IACd,CAAC;IAED,kEAAkE;IAClE,uEAAuE;IACvE,gEAAgE;IAChE,sEAAsE;IACtE,uEAAuE;IACvE,MAAM,aAAa,GAAuB,KAAK,CAAC,IAAI,KAAK,iBAAiB;QACtE,CAAC,CAAC,IAAI,GAAG,CAAS,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/C,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU;YACvB,CAAC,CAAC,IAAI,GAAG,CAAS,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAS,EAAU,EAAE,CAAC,WAAW,CAAC,IAAA,cAAO,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClF,CAAC,CAAC,IAAI,CAAC,CAAC,iCAAiC;IAEjD,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,WAAW,IAAI,IAAA,iCAAoB,GAAE,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAwB,sBAAsB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAClF,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAY;IAC7C,MAAM,OAAO,GAAW,IAAA,iBAAU,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,cAAO,EAAC,IAAI,CAAC,CAAC;IAChE,IAAI,CAAC,IAAA,eAAU,EAAC,OAAO,CAAC,EAAE,CAAC;QACvB,eAAM,CAAC,KAAK,CAAC,wCAAwC,OAAO,gBAAgB,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,eAAM,CAAC,KAAK,CAAC,wCAAwC,OAAO,uBAAuB,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,sEAAsE;IACtE,kEAAkE;IAClE,OAAO,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC1B,IAAI,CAAC;QACD,OAAO,IAAA,iBAAY,EAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACL,iEAAiE;QACjE,6DAA6D;QAC7D,qDAAqD;QACrD,OAAO,CAAC,CAAC;IACb,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,WAAmB,EAAE,aAAiC;IAClF,MAAM,SAAS,GAAkB,IAAA,qCAAwB,EAAC,WAAW,CAAC,CAAC;IACvE,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACrB,eAAM,CAAC,KAAK,CAAC,mDAAmD,WAAW,aAAa,CAAC,CAAC;QAC1F,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,IAAI,GAA2B,eAAe,CAAC,WAAW,CAAC,CAAC;IAClE,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAChB,eAAM,CAAC,KAAK,CAAC,2BAA2B,WAAW,2CAA2C,CAAC,CAAC;QAChG,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,aAAa,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,OAAe,CAAC;IACpB,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACD,MAAM,CAAC,GAAgC,IAAA,aAAQ,EAAC,WAAW,CAAC,CAAC;QAC7D,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;QACpB,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC;IACvB,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,eAAM,CAAC,KAAK,CAAC,gCAAgC,WAAW,aAAa,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3G,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,cAAc,GAAW,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,eAAM,CAAC,KAAK,CAAC,2BAA2B,WAAW,2CAA2C,IAAI,CAAC,SAAS,aAAa,CAAC,CAAC;QAC3H,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO;QACH,MAAM,EAAE,OAAO;QACf,SAAS;QACT,cAAc,EAAE,WAAW;QAC3B,UAAU,EAAE,IAAI,CAAC,GAAG;QACpB,iEAAiE;QACjE,qEAAqE;QACrE,kEAAkE;QAClE,kEAAkE;QAClE,iEAAiE;QACjE,6DAA6D;QAC7D,qCAAqC;QACrC,WAAW,EAAE,IAAA,4BAAkB,EAAC,IAAI,CAAC,GAAG,CAAC;QACzC,cAAc;QACd,OAAO;QACP,SAAS;KACZ,CAAC;AACN,CAAC;AAOD;;;;;GAKG;AACH,SAAS,eAAe,CAAC,WAAmB;IACxC,MAAM,QAAQ,GAAW,CAAC,GAAG,IAAI,CAAC;IAClC,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACD,EAAE,GAAG,IAAA,aAAQ,EAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACD,MAAM,GAAG,GAAW,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAW,IAAA,aAAQ,EAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QACpD,MAAM,IAAI,GAAW,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9C,SAAS,GAAG,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACL,+DAA+D;QAC/D,uDAAuD;QACvD,OAAO,IAAI,CAAC;IAChB,CAAC;YAAS,CAAC;QACP,IAAI,CAAC;YAAC,IAAA,cAAS,EAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,GAAG,GAA4B,MAAiC,CAAC;IACvE,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,OAAO,GAAY,GAAG,CAAC,OAAO,CAAC;IACrC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,CAAC,GAA4B,OAAkC,CAAC;IACtE,MAAM,GAAG,GAAY,CAAC,CAAC,GAAG,CAAC;IAC3B,MAAM,SAAS,GAAY,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC;IACxD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzG,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC"}

package/dist/import/codex/events/file-change.d.ts

@@ -0,0 +1,42 @@
+/**
+ * IronBee CLI — Codex import file_change derivation.
+ *
+ * One `file_change` event per file entry inside each `apply_patch`
+ * function_call body. Parses the patch via the SAME `parseApplyPatchBody`
+ * that the live `clear-verdict` hook uses, so live and import agree
+ * byte-for-byte on operation + line counts.
+ *
+ * Filtered by the project's `verifyPatterns` config (a Write of `foo.test.ts`
+ * generates no event when the verify cycle excludes test files).
+ *
+ * `changeset` parity: live emits a hunks-only V4A per-file slice as the
+ * captureChangeset FALLBACK (clear-verdict.ts:284-285 — used when the
+ * PreToolUse stash is missing or the unified-diff build fails). The same
+ * `e.body` slice is available offline from `parseApplyPatchBody`. When the
+ * operator has `fileChange.captureChangeset: true` we emit it here too —
+ * without parity, re-import overwrites the live `changeset` field with
+ * `undefined` via `(session_id, id)` latest-wins dedup. We deliberately
+ * skip the unified-diff primary path: that requires the prior file content
+ * which import predates (working tree has moved on).
+ */
+import { FileChangeAction } from "../../../hooks/core/actions";
+export interface BuildCodexFileChangeOpts {
+    sessionId: string;
+    projectName: string;
+    projectDir: string;
+    /** Parent turn's activity_id. */
+    activityId: string;
+    /** `call_id` of the apply_patch call — drives event id derivation. */
+    callId: string;
+    /** ISO-8601 timestamp from the rollout line. */
+    timestamp: string;
+    /** Raw `apply_patch.arguments.input` body string. */
+    patchBody: string;
+}
+/**
+ * Parse the patch body and produce one event per file. Returns an empty
+ * array when (a) the body is unparseable, (b) every entry's path is
+ * ignored, or (c) every entry's path doesn't match any active cycle.
+ */
+export declare function buildCodexFileChanges(opts: BuildCodexFileChangeOpts): FileChangeAction[];
+//# sourceMappingURL=file-change.d.ts.map

package/dist/import/codex/events/file-change.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-change.d.ts","sourceRoot":"","sources":["../../../../src/import/codex/events/file-change.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,gBAAgB,EAAuB,MAAM,6BAA6B,CAAC;AAWpF,MAAM,WAAW,wBAAwB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,wBAAwB,GAAG,gBAAgB,EAAE,CA2DxF"}

package/dist/import/codex/events/file-change.js

@@ -0,0 +1,125 @@
+"use strict";
+/**
+ * IronBee CLI — Codex import file_change derivation.
+ *
+ * One `file_change` event per file entry inside each `apply_patch`
+ * function_call body. Parses the patch via the SAME `parseApplyPatchBody`
+ * that the live `clear-verdict` hook uses, so live and import agree
+ * byte-for-byte on operation + line counts.
+ *
+ * Filtered by the project's `verifyPatterns` config (a Write of `foo.test.ts`
+ * generates no event when the verify cycle excludes test files).
+ *
+ * `changeset` parity: live emits a hunks-only V4A per-file slice as the
+ * captureChangeset FALLBACK (clear-verdict.ts:284-285 — used when the
+ * PreToolUse stash is missing or the unified-diff build fails). The same
+ * `e.body` slice is available offline from `parseApplyPatchBody`. When the
+ * operator has `fileChange.captureChangeset: true` we emit it here too —
+ * without parity, re-import overwrites the live `changeset` field with
+ * `undefined` via `(session_id, id)` latest-wins dedup. We deliberately
+ * skip the unified-diff primary path: that requires the prior file content
+ * which import predates (working tree has moved on).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildCodexFileChanges = buildCodexFileChanges;
+const clear_verdict_1 = require("../../../clients/codex/hooks/clear-verdict");
+const config_1 = require("../../../lib/config");
+const ids_1 = require("../../ids");
+/**
+ * Parse the patch body and produce one event per file. Returns an empty
+ * array when (a) the body is unparseable, (b) every entry's path is
+ * ignored, or (c) every entry's path doesn't match any active cycle.
+ */
+function buildCodexFileChanges(opts) {
+    const config = (0, config_1.loadConfig)(opts.projectDir);
+    let entries;
+    try {
+        entries = (0, clear_verdict_1.parseApplyPatchBody)(opts.patchBody);
+    }
+    catch {
+        return [];
+    }
+    const captureChangeset = (0, config_1.getCaptureFileChangeset)(config);
+    const maxChangesetBytes = (0, config_1.getMaxChangesetBytes)(config);
+    const events = [];
+    const tsMs = Date.parse(opts.timestamp);
+    const stamp = Number.isFinite(tsMs) ? tsMs : Date.now();
+    for (let i = 0; i < entries.length; i++) {
+        const e = entries[i];
+        if (!shouldEmit(config, e.path)) {
+            continue;
+        }
+        const op = e.operation;
+        // Multi-file patches share one call_id — qualify the event id with
+        // the entry index + file path so each emits a distinct UUID.
+        const event = {
+            id: (0, ids_1.deriveFileChangeEventId)(opts.sessionId, `${opts.callId}:${i}:${e.path}`),
+            type: "file_change",
+            timestamp: stamp,
+            session_id: opts.sessionId,
+            project_name: opts.projectName,
+            activity_id: opts.activityId,
+            // Cross-event vocab parity (round 68). See clear-verdict.ts for
+            // full rationale: tool_call.tool_name ships "Edit" (round 67)
+            // and session_analytics.tools["Edit"] aggregates (round 66), so
+            // file_change must use the same alias to keep the backend
+            // tool_call ↔ file_change JOIN on tool_name working. Live ↔
+            // import parity: this matches `clear-verdict.ts:255`.
+            tool_name: "Edit",
+            file_path: e.path,
+            operation: op,
+            // Live parity (clear-verdict.ts). DELETE: BOTH null (whole file
+            // removed; prior content unrecoverable; parser's 0 isn't
+            // meaningful). CREATE: `lines_removed: 0` — new file has zero
+            // prior content, so zero lines were removed. Cross-client
+            // parity with Claude Write-create (clients/claude/hooks/
+            // clear-verdict.ts:77 + import/claude/events/file-change.ts:85).
+            // UPDATE: both real counts.
+            lines_added: op === "delete" ? null : e.linesAdded,
+            lines_removed: op === "delete" ? null : (op === "create" ? 0 : e.linesRemoved),
+        };
+        // Live parity for `changeset`: mirror the V4A fallback path
+        // (clear-verdict.ts:284-285). `e.body` is hunks-only per-file slice
+        // parsed from the rollout's apply_patch body — same source the live
+        // fallback uses. Without this, re-import dedup
+        // (`(session_id, id)` latest-wins) overwrites live's `changeset`
+        // field with `undefined` and the warehouse loses the diff.
+        if (captureChangeset && e.body.length > 0) {
+            event.changeset = truncateChangeset(e.body, maxChangesetBytes);
+        }
+        events.push(event);
+    }
+    return events;
+}
+/**
+ * Hunks-only truncation. Mirror of live's `truncateChangeset` in
+ * clear-verdict.ts (same head + footer shape) so the wire string is
+ * byte-identical when the body fits and footer-identical on overflow.
+ */
+function truncateChangeset(s, maxBytes) {
+    if (maxBytes <= 0) {
+        return s;
+    }
+    const buf = Buffer.from(s, "utf-8");
+    if (buf.length <= maxBytes) {
+        return s;
+    }
+    const omitted = buf.length - maxBytes;
+    const footer = `\n... (truncated, ${omitted} bytes omitted)\n`;
+    const footerLen = Buffer.byteLength(footer, "utf-8");
+    const headLen = Math.max(0, maxBytes - footerLen);
+    const head = buf.subarray(0, headLen).toString("utf-8");
+    return head + footer;
+}
+/**
+ * Verify-pattern gate. Mirrors what live mode emits: a file_change is on
+ * the wire only when `requiresVerification(filePath, config)` returns true
+ * — i.e. some cycle's verifyPatterns matches AND the file isn't on the
+ * cross-cycle ignore list. Pre-fix import emitted every patch entry
+ * unconditionally, which is louder than live + a privacy concern for
+ * patterns the operator explicitly excluded.
+ */
+function shouldEmit(config, filePath) {
+    return (0, config_1.requiresVerification)(filePath, config);
+}
+//# sourceMappingURL=file-change.js.map

package/dist/import/codex/events/file-change.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-change.js","sourceRoot":"","sources":["../../../../src/import/codex/events/file-change.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;AAgCH,sDA2DC;AAxFD,8EAAiG;AACjG,gDAM6B;AAC7B,mCAAoD;AAgBpD;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,IAA8B;IAChE,MAAM,MAAM,GAAkB,IAAA,mBAAU,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1D,IAAI,OAAyB,CAAC;IAC9B,IAAI,CAAC;QACD,OAAO,GAAG,IAAA,mCAAmB,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,CAAC;IACd,CAAC;IACD,MAAM,gBAAgB,GAAY,IAAA,gCAAuB,EAAC,MAAM,CAAC,CAAC;IAClE,MAAM,iBAAiB,GAAW,IAAA,6BAAoB,EAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAuB,EAAE,CAAC;IACtC,MAAM,IAAI,GAAW,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,KAAK,GAAW,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAChE,KAAK,IAAI,CAAC,GAAW,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAmB,OAAO,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,SAAS;QACb,CAAC;QACD,MAAM,EAAE,GAAwB,CAAC,CAAC,SAAgC,CAAC;QACnE,mEAAmE;QACnE,6DAA6D;QAC7D,MAAM,KAAK,GAAqB;YAC5B,EAAE,EAAE,IAAA,6BAAuB,EAAC,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5E,IAAI,EAAE,aAAa;YACnB,SAAS,EAAE,KAAK;YAChB,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,YAAY,EAAE,IAAI,CAAC,WAAW;YAC9B,WAAW,EAAE,IAAI,CAAC,UAAU;YAC5B,gEAAgE;YAChE,8DAA8D;YAC9D,gEAAgE;YAChE,0DAA0D;YAC1D,4DAA4D;YAC5D,sDAAsD;YACtD,SAAS,EAAE,MAAM;YACjB,SAAS,EAAE,CAAC,CAAC,IAAI;YACjB,SAAS,EAAE,EAAE;YACb,gEAAgE;YAChE,yDAAyD;YACzD,8DAA8D;YAC9D,0DAA0D;YAC1D,yDAAyD;YACzD,iEAAiE;YACjE,4BAA4B;YAC5B,WAAW,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU;YAClD,aAAa,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;SAC7D,CAAC;QACtB,4DAA4D;QAC5D,oEAAoE;QACpE,oEAAoE;QACpE,+CAA+C;QAC/C,iEAAiE;QACjE,2DAA2D;QAC3D,IAAI,gBAAgB,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,KAAK,CAAC,SAAS,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,CAAS,EAAE,QAAgB;IAClD,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QAChB,OAAO,CAAC,CAAC;IACb,CAAC;IACD,MAAM,GAAG,GAAW,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5C,IAAI,GAAG,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;QACzB,OAAO,CAAC,CAAC;IACb,CAAC;IACD,MAAM,OAAO,GAAW,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC;IAC9C,MAAM,MAAM,GAAW,qBAAqB,OAAO,mBAAmB,CAAC;IACvE,MAAM,SAAS,GAAW,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAW,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAW,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChE,OAAO,IAAI,GAAG,MAAM,CAAC;AACzB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,MAAqB,EAAE,QAAgB;IACvD,OAAO,IAAA,6BAAoB,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC"}

package/dist/import/codex/events/tool-call.d.ts

@@ -0,0 +1,49 @@
+/**
+ * IronBee CLI — Codex import tool_call derivation.
+ *
+ * One `tool_call` event per `function_call` ResponseItem in the rollout.
+ * Joined to its matching `function_call_output` via `call_id` to populate
+ * `tool_response_size` + error message + duration (bracketed by adjacent
+ * timestamps when present).
+ *
+ * For devtools MCP tools (mcp__{browser,node,backend}-devtools__*) we
+ * prefer `_metadata.toolCallId` (live MCP-shipped event id) → import and
+ * live collide cleanly on `(session_id, id)`. For everything else we
+ * fall back to the deterministic-from-call-id formula.
+ *
+ * `tool_input` is whitelisted via `extractCodexToolInput` — same projection
+ * the live track-action hook applies. `tool_response` is not shipped on
+ * the wire, only its byte size.
+ */
+import { ToolCallAction } from "../../../hooks/core/actions";
+/** Lightly-typed function_call shape pulled from the rollout. */
+export interface CodexRawCall {
+    /** `call_id` — host-supplied per-call identifier. */
+    callId: string;
+    /** Raw tool name (e.g. `apply_patch`, `exec_command`, `mcp__browser-devtools__bdt_navigation_go-to`). */
+    name: string;
+    /** Parsed arguments object — may contain `_metadata` for devtools tools. */
+    args: Record<string, unknown>;
+    /** ISO-8601 timestamp from the rollout line. */
+    timestamp: string;
+}
+/** Matching function_call_output for a call. `null` when unmatched (truncated rollout, interrupted). */
+export interface CodexRawCallOutput {
+    callId: string;
+    /** Raw output text (Codex emits string content). */
+    output: string;
+    /** ISO-8601 timestamp — used for duration bracketing. */
+    timestamp: string;
+    /** Heuristic: surfaced when output text begins with "Error:" / "Process exited with code <non-zero>". */
+    isError: boolean;
+}
+export interface BuildCodexToolCallOpts {
+    sessionId: string;
+    projectName: string;
+    /** Parent turn's activity_id (from `deriveActivityId`). */
+    activityId: string;
+    call: CodexRawCall;
+    output: CodexRawCallOutput | null;
+}
+export declare function buildCodexToolCall(opts: BuildCodexToolCallOpts): ToolCallAction;
+//# sourceMappingURL=tool-call.d.ts.map

package/dist/import/codex/events/tool-call.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-call.d.ts","sourceRoot":"","sources":["../../../../src/import/codex/events/tool-call.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAM7D,iEAAiE;AACjE,MAAM,WAAW,YAAY;IACzB,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,yGAAyG;IACzG,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,wGAAwG;AACxG,MAAM,WAAW,kBAAkB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,yGAAyG;IACzG,OAAO,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACrC;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,GAAG,cAAc,CAqG/E"}

package/dist/import/codex/events/tool-call.js

@@ -0,0 +1,151 @@
+"use strict";
+/**
+ * IronBee CLI — Codex import tool_call derivation.
+ *
+ * One `tool_call` event per `function_call` ResponseItem in the rollout.
+ * Joined to its matching `function_call_output` via `call_id` to populate
+ * `tool_response_size` + error message + duration (bracketed by adjacent
+ * timestamps when present).
+ *
+ * For devtools MCP tools (mcp__{browser,node,backend}-devtools__*) we
+ * prefer `_metadata.toolCallId` (live MCP-shipped event id) → import and
+ * live collide cleanly on `(session_id, id)`. For everything else we
+ * fall back to the deterministic-from-call-id formula.
+ *
+ * `tool_input` is whitelisted via `extractCodexToolInput` — same projection
+ * the live track-action hook applies. `tool_response` is not shipped on
+ * the wire, only its byte size.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildCodexToolCall = buildCodexToolCall;
+const util_1 = require("../../../clients/codex/util");
+const ids_1 = require("../../ids");
+const DEVTOOLS_MCP_SERVERS = new Set(["browser-devtools", "node-devtools", "backend-devtools"]);
+function buildCodexToolCall(opts) {
+    const { sessionId, projectName, activityId, call, output } = opts;
+    const classified = (0, util_1.classifyCodexTool)(call.name);
+    const eventId = resolveEventId(sessionId, classified, call);
+    const projectedInput = (0, util_1.extractCodexToolInput)(call.name, call.args);
+    const inputSize = byteLengthOf(call.args);
+    // Cross-client parity (Claude+Cursor emit 0 on failure — see
+    // clients/claude/hooks/track-action.ts:210 +
+    // import/claude/events/tool-call.ts:138-140). Live Codex was an outlier
+    // shipping the error blob byte count; the cross-client parity fix at
+    // clients/codex/hooks/track-action.ts now zeroes it on failure, and
+    // import must match for backend (session_id, id) dedup to not flip the
+    // value between live and import for the same logical failed call.
+    const responseSize = output !== null && !output.isError
+        ? Buffer.byteLength(output.output, "utf-8")
+        : 0;
+    // Truncate to 500 chars — live parity (clients/codex/hooks/track-action.ts
+    // detectFailure uses `t.slice(0, 500)`). Without matching truncation,
+    // re-import overwrites live's truncated `error` with a 2KB+ stderr blob
+    // → backend wire shape divergent for the same logical failure.
+    const errorMsg = output !== null && output.isError
+        ? output.output.slice(0, 500)
+        : undefined;
+    // Duration bracket: function_call timestamp → function_call_output
+    // timestamp. Codex hook stdin doesn't carry duration_ms even live
+    // (the runtime hook derives it via Pre→Post stash); for import the
+    // bracket is the only signal. Sequential within a single response
+    // batch, so the bracket is a tight approximation per call.
+    const callTs = Date.parse(call.timestamp);
+    const outTs = output !== null ? Date.parse(output.timestamp) : NaN;
+    const durationMs = Number.isFinite(callTs) && Number.isFinite(outTs) && outTs >= callTs
+        ? outTs - callTs
+        : null;
+    // Live↔import timestamp parity. Live emits at PostToolUse → `Date.now()` at
+    // end-of-tool. The rollout `function_call` line is written at START-of-tool
+    // (model dispatch); only `function_call_output` carries the end-of-tool
+    // wall clock. Real-corpus divergence between the two: mean ~300ms, P95
+    // ~1.3s, max ~2s — for the same logical tool_call live and import shipped
+    // distinct `timestamp` values, breaking backend join/time-series plotting
+    // on re-import. Prefer the output's timestamp; fall back to the call's
+    // when the call was interrupted (no output line).
+    const wireTs = Number.isFinite(outTs) ? outTs : (Number.isFinite(callTs) ? callTs : Date.now());
+    const event = {
+        id: eventId,
+        type: "tool_call",
+        timestamp: wireTs,
+        session_id: sessionId,
+        project_name: projectName,
+        activity_id: activityId,
+        tool_name: classified.tool_name,
+        tool_use_id: call.callId,
+        tool_input: projectedInput,
+        tool_input_size: inputSize,
+        tool_response_size: responseSize,
+        duration: durationMs,
+    };
+    if (classified.tool_type !== null) {
+        event.tool_type = classified.tool_type;
+    }
+    if (classified.mcp_server !== null) {
+        event.mcp_server = classified.mcp_server;
+    }
+    if (errorMsg !== undefined) {
+        event.error = errorMsg;
+    }
+    // Project verification cycle correlation fields from devtools
+    // `_metadata` (baked in by Codex `require-verification.ts` at live
+    // emit time). Live Codex `track-action.ts` reads
+    // `getActiveVerificationId(sessionDir)` + `getActiveTraceId(sessionDir)`
+    // from state.json and sets `verification_id` + `trace_id` as TOP-LEVEL
+    // event fields. Without re-projecting from `_metadata`, backend
+    // (session_id, id) latest-wins dedup erases live's correlation fields
+    // on every re-import of a Codex session that ran devtools tools
+    // during an active verification cycle. Mirror of the Claude-side
+    // round-97 fix at `import/claude/events/tool-call.ts:165-202`.
+    if (classified.tool_type === "mcp"
+        && classified.mcp_server !== null
+        && DEVTOOLS_MCP_SERVERS.has(classified.mcp_server)) {
+        const meta = call.args._metadata;
+        if (meta !== null && typeof meta === "object") {
+            const m = meta;
+            const vid = m.verificationId;
+            if (typeof vid === "string" && UUID_SHAPE.test(vid)) {
+                event.verification_id = vid;
+            }
+            // OTEL trace_id is 32-char lowercase hex (W3C trace context),
+            // NOT UUID-shaped — accept any non-empty string.
+            const tid = m.traceId;
+            if (typeof tid === "string" && tid.length > 0) {
+                event.trace_id = tid;
+            }
+        }
+    }
+    return event;
+}
+/** Backend stores event ids as UUID columns; reject corrupt / forged metadata that wouldn't validate. */
+const UUID_SHAPE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function resolveEventId(sessionId, classified, call) {
+    if (classified.tool_type === "mcp"
+        && classified.mcp_server !== null
+        && DEVTOOLS_MCP_SERVERS.has(classified.mcp_server)) {
+        const meta = call.args._metadata;
+        if (meta !== null && typeof meta === "object") {
+            const toolCallId = meta.toolCallId;
+            // Only accept UUID-shaped overrides — live `require-verification`
+            // generates them with `crypto.randomUUID()`, so any non-UUID
+            // value in a replayed rollout is corrupt / forged metadata
+            // (would otherwise violate the backend's `(session_id, id)`
+            // UUID column constraint).
+            if (typeof toolCallId === "string" && UUID_SHAPE.test(toolCallId)) {
+                return toolCallId;
+            }
+        }
+    }
+    return (0, ids_1.deriveToolCallEventIdFromToolUseId)(sessionId, call.callId);
+}
+function byteLengthOf(value) {
+    if (value === undefined || value === null) {
+        return 0;
+    }
+    try {
+        return Buffer.byteLength(JSON.stringify(value), "utf-8");
+    }
+    catch {
+        return 0;
+    }
+}
+//# sourceMappingURL=tool-call.js.map

package/dist/import/codex/events/tool-call.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-call.js","sourceRoot":"","sources":["../../../../src/import/codex/events/tool-call.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;AAwCH,gDAqGC;AA1ID,sDAA4G;AAC5G,mCAA+D;AAE/D,MAAM,oBAAoB,GAAgB,IAAI,GAAG,CAAS,CAAC,kBAAkB,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAkCrH,SAAgB,kBAAkB,CAAC,IAA4B;IAC3D,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAClE,MAAM,UAAU,GAAwB,IAAA,wBAAiB,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAErE,MAAM,OAAO,GAAW,cAAc,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,cAAc,GAAY,IAAA,4BAAqB,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAE5E,MAAM,SAAS,GAAW,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,6DAA6D;IAC7D,6CAA6C;IAC7C,wEAAwE;IACxE,qEAAqE;IACrE,oEAAoE;IACpE,uEAAuE;IACvE,kEAAkE;IAClE,MAAM,YAAY,GAAW,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO;QAC3D,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;QAC3C,CAAC,CAAC,CAAC,CAAC;IACR,2EAA2E;IAC3E,sEAAsE;IACtE,wEAAwE;IACxE,+DAA+D;IAC/D,MAAM,QAAQ,GAAuB,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO;QAClE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QAC7B,CAAC,CAAC,SAAS,CAAC;IAEhB,mEAAmE;IACnE,kEAAkE;IAClE,mEAAmE;IACnE,kEAAkE;IAClE,2DAA2D;IAC3D,MAAM,MAAM,GAAW,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,KAAK,GAAW,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3E,MAAM,UAAU,GAAkB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,MAAM;QAClG,CAAC,CAAC,KAAK,GAAG,MAAM;QAChB,CAAC,CAAC,IAAI,CAAC;IAEX,4EAA4E;IAC5E,4EAA4E;IAC5E,wEAAwE;IACxE,uEAAuE;IACvE,0EAA0E;IAC1E,0EAA0E;IAC1E,uEAAuE;IACvE,kDAAkD;IAClD,MAAM,MAAM,GAAW,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAExG,MAAM,KAAK,GAAmB;QAC1B,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE,MAAM;QACjB,UAAU,EAAE,SAAS;QACrB,YAAY,EAAE,WAAW;QACzB,WAAW,EAAE,UAAU;QACvB,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,WAAW,EAAE,IAAI,CAAC,MAAM;QACxB,UAAU,EAAE,cAAc;QAC1B,eAAe,EAAE,SAAS;QAC1B,kBAAkB,EAAE,YAAY;QAChC,QAAQ,EAAE,UAAU;KACvB,CAAC;IACF,IAAI,UAAU,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAChC,KAAK,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IAC3C,CAAC;IACD,IAAI,UAAU,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QACjC,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;IAC7C,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACzB,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC;IAC3B,CAAC;IACD,8DAA8D;IAC9D,mEAAmE;IACnE,iDAAiD;IACjD,yEAAyE;IACzE,uEAAuE;IACvE,gEAAgE;IAChE,sEAAsE;IACtE,gEAAgE;IAChE,iEAAiE;IACjE,+DAA+D;IAC/D,IACI,UAAU,CAAC,SAAS,KAAK,KAAK;WAC3B,UAAU,CAAC,UAAU,KAAK,IAAI;WAC9B,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EACpD,CAAC;QACC,MAAM,IAAI,GAAY,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QAC1C,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,CAAC,GAA4B,IAA+B,CAAC;YACnE,MAAM,GAAG,GAAY,CAAC,CAAC,cAAc,CAAC;YACtC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClD,KAAK,CAAC,eAAe,GAAG,GAAG,CAAC;YAChC,CAAC;YACD,8DAA8D;YAC9D,iDAAiD;YACjD,MAAM,GAAG,GAAY,CAAC,CAAC,OAAO,CAAC;YAC/B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5C,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC;YACzB,CAAC;QACL,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,GAAW,iEAAiE,CAAC;AAE7F,SAAS,cAAc,CAAC,SAAiB,EAAE,UAA+B,EAAE,IAAkB;IAC1F,IACI,UAAU,CAAC,SAAS,KAAK,KAAK;WAC3B,UAAU,CAAC,UAAU,KAAK,IAAI;WAC9B,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EACpD,CAAC;QACC,MAAM,IAAI,GAAY,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QAC1C,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,UAAU,GAAa,IAAiC,CAAC,UAAU,CAAC;YAC1E,kEAAkE;YAClE,6DAA6D;YAC7D,2DAA2D;YAC3D,4DAA4D;YAC5D,2BAA2B;YAC3B,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChE,OAAO,UAAU,CAAC;YACtB,CAAC;QACL,CAAC;IACL,CAAC;IACD,OAAO,IAAA,wCAAkC,EAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAChC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,CAAC,CAAC;IACb,CAAC;IACD,IAAI,CAAC;QACD,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,CAAC,CAAC;IACb,CAAC;AACL,CAAC"}

package/dist/import/codex/runner.d.ts

@@ -0,0 +1,34 @@
+/**
+ * IronBee CLI — Codex Per-Session Import Runner
+ *
+ * Orchestrates the full import of one Codex rollout JSONL:
+ *   1. Skip check (`<projectDir>/.ironbee/sessions/<id>/`).
+ *   2. Parse rollout → extract session_meta + task_started boundaries +
+ *      function_call + function_call_output + apply_patch + token_count.
+ *   3. Build events: session_start, session_end (Stop-as-checkpoint
+ *      synthetic), activity_start/end per turn, tool_call per
+ *      function_call (joined to its output via call_id), file_change per
+ *      apply_patch file entry, api_request per token_count, session_analytics.
+ *   4. POST all events via the import emitter (transient retry).
+ *   5. Write the marker.
+ *
+ * Codex-specific because rollout shape diverges from Claude (RolloutItem
+ * enum, apply_patch body parser, no per-turn step granularity). Parallel
+ * to `src/import/claude/runner.ts` — never mixed in this file.
+ *
+ * Per-session atomicity: on any unrecoverable failure mid-emit, the
+ * marker is NOT written and the session re-attempts on the next
+ * `ironbee import` run. Deterministic event ids dedup re-emits at the
+ * backend.
+ */
+import { ImportResult, ImportTarget } from "../types";
+import { CodexAgentMessagePayload, CodexTaskStartedPayload, CodexTokenCountPayload, CodexUserMessagePayload } from "../../analytics/codex/types";
+export interface CodexRunnerOpts {
+    target: ImportTarget;
+    force: boolean;
+    /** Events per collector POST; null = use target/default. */
+    batchSize?: number | null;
+}
+export declare function importCodexSession(opts: CodexRunnerOpts): Promise<ImportResult>;
+export type _UnusedRefs = CodexAgentMessagePayload | CodexTaskStartedPayload | CodexTokenCountPayload | CodexUserMessagePayload;
+//# sourceMappingURL=runner.d.ts.map

package/dist/import/codex/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../../src/import/codex/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAQH,OAAO,EAIH,YAAY,EACZ,YAAY,EACf,MAAM,UAAU,CAAC;AAiBlB,OAAO,EACH,wBAAwB,EAKxB,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EAC1B,MAAM,6BAA6B,CAAC;AAWrC,MAAM,WAAW,eAAe;IAC5B,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,OAAO,CAAC;IACf,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC,CAkOrF;AAuND,MAAM,MAAM,WAAW,GACjB,wBAAwB,GACxB,uBAAuB,GACvB,sBAAsB,GACtB,uBAAuB,CAAC"}