@ironbee-ai/cli 0.15.0 → 0.17.0

package/dist/analytics/codex/apply-patch.js

@@ -0,0 +1,49 @@
+"use strict";
+/**
+ * Codex `apply_patch` tool — wrapper around the parser already implemented
+ * for the `clear-verdict` hook. Analytics derives code_changes metrics
+ * (files_modified / lines_added / lines_removed) by parsing apply_patch
+ * function_call arguments.
+ *
+ * Keeping a thin wrapper here so analytics never imports from the hook
+ * adapter layer directly — keeps `src/analytics/` host-agnostic.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseApplyPatchBody = void 0;
+exports.extractApplyPatchBody = extractApplyPatchBody;
+const clear_verdict_1 = require("../../clients/codex/hooks/clear-verdict");
+Object.defineProperty(exports, "parseApplyPatchBody", { enumerable: true, get: function () { return clear_verdict_1.parseApplyPatchBody; } });
+/**
+ * Extract the patch body string from an `apply_patch` function_call's
+ * `arguments` JSON. Codex's wire shape is `{"input": "<patch text>"}`
+ * (custom_tool_call form — verified live on 0.135.0).
+ *
+ * Returns null when the shape doesn't match (e.g. tool renamed, args
+ * malformed, body missing). Caller should skip code_changes derivation.
+ */
+function extractApplyPatchBody(argumentsJson) {
+    try {
+        const parsed = JSON.parse(argumentsJson);
+        if (parsed !== null && typeof parsed === "object") {
+            const obj = parsed;
+            const input = obj.input;
+            if (typeof input === "string" && input.length > 0) {
+                return input;
+            }
+            // Some Codex variants use "patch" or top-level "command"
+            const patch = obj.patch;
+            if (typeof patch === "string" && patch.length > 0) {
+                return patch;
+            }
+            const command = obj.command;
+            if (typeof command === "string" && command.length > 0) {
+                return command;
+            }
+        }
+    }
+    catch {
+        // fall through
+    }
+    return null;
+}
+//# sourceMappingURL=apply-patch.js.map

package/dist/analytics/codex/apply-patch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-patch.js","sourceRoot":"","sources":["../../../src/analytics/codex/apply-patch.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAcH,sDAuBC;AAnCD,2EAA8F;AAErF,oGAFA,mCAAmB,OAEA;AAE5B;;;;;;;GAOG;AACH,SAAgB,qBAAqB,CAAC,aAAqB;IACvD,IAAI,CAAC;QACD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,GAAG,GAA4B,MAAiC,CAAC;YACvE,MAAM,KAAK,GAAY,GAAG,CAAC,KAAK,CAAC;YACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChD,OAAO,KAAK,CAAC;YACjB,CAAC;YACD,yDAAyD;YACzD,MAAM,KAAK,GAAY,GAAG,CAAC,KAAK,CAAC;YACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChD,OAAO,KAAK,CAAC;YACjB,CAAC;YACD,MAAM,OAAO,GAAY,GAAG,CAAC,OAAO,CAAC;YACrC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpD,OAAO,OAAO,CAAC;YACnB,CAAC;QACL,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACL,eAAe;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC"}

package/dist/analytics/codex/classifier.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Codex turn classifier — maps the dominant `function_call.name`s in a turn
+ * to one of IronBee's analytics categories. Mirrors the Claude classifier
+ * pattern but Codex tool names differ:
+ *   - Claude:  Bash, Read, Write, Edit, Grep, Glob, Task, WebFetch, ...
+ *   - Codex:   exec_command (Bash equivalent), apply_patch, update_plan,
+ *              mcp__*-devtools__* (verification), other MCP tools
+ *
+ * Returns the same category vocabulary the Claude side uses so dashboards
+ * stay uniform: "coding" / "verification" / "shell" / "planning" /
+ * "research" / "filesystem" / "other".
+ */
+export type CodexTurnCategory = "coding" | "verification" | "shell" | "planning" | "research" | "filesystem" | "other";
+/**
+ * Classify a single tool name. `null` returns "other" — caller may decide
+ * a turn-level category from per-tool counts.
+ */
+export declare function classifyCodexToolName(name: string | null | undefined): CodexTurnCategory;
+/**
+ * Determine the dominant category for a turn given counts per tool. Returns
+ * the category with the highest tool-call count; ties broken by the
+ * priority order embedded in the switch fallthrough (verification beats
+ * coding beats planning beats shell beats research beats filesystem).
+ *
+ * Returns "other" when no tools were called.
+ */
+export declare function dominantCodexTurnCategory(toolCounts: Record<string, number>): CodexTurnCategory;
+//# sourceMappingURL=classifier.d.ts.map

package/dist/analytics/codex/classifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifier.d.ts","sourceRoot":"","sources":["../../../src/analytics/codex/classifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,iBAAiB,GACvB,QAAQ,GACR,cAAc,GACd,OAAO,GACP,UAAU,GACV,UAAU,GACV,YAAY,GACZ,OAAO,CAAC;AAEd;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,iBAAiB,CAiDxF;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,iBAAiB,CA+B/F"}

package/dist/analytics/codex/classifier.js

@@ -0,0 +1,111 @@
+"use strict";
+/**
+ * Codex turn classifier — maps the dominant `function_call.name`s in a turn
+ * to one of IronBee's analytics categories. Mirrors the Claude classifier
+ * pattern but Codex tool names differ:
+ *   - Claude:  Bash, Read, Write, Edit, Grep, Glob, Task, WebFetch, ...
+ *   - Codex:   exec_command (Bash equivalent), apply_patch, update_plan,
+ *              mcp__*-devtools__* (verification), other MCP tools
+ *
+ * Returns the same category vocabulary the Claude side uses so dashboards
+ * stay uniform: "coding" / "verification" / "shell" / "planning" /
+ * "research" / "filesystem" / "other".
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.classifyCodexToolName = classifyCodexToolName;
+exports.dominantCodexTurnCategory = dominantCodexTurnCategory;
+/**
+ * Classify a single tool name. `null` returns "other" — caller may decide
+ * a turn-level category from per-tool counts.
+ */
+function classifyCodexToolName(name) {
+    if (!name) {
+        return "other";
+    }
+    if (name === "apply_patch") {
+        return "coding";
+    }
+    if (name === "update_plan") {
+        return "planning";
+    }
+    if (name === "exec_command" || name === "Bash") {
+        return "shell";
+    }
+    // Codex 0.135+ `write_stdin` writes characters into an open
+    // exec_command session's stdin (REPL prompts, interactive CLI flows).
+    // Semantically a shell-IO continuation of exec_command, so bucket
+    // alongside it; without this branch every write_stdin call falls
+    // through to "other" and the turn-category histogram understates
+    // shell-driven verification on sessions that drive REPLs.
+    if (name === "write_stdin") {
+        return "shell";
+    }
+    if (name === "read_file" || name === "list_dir" || name === "glob") {
+        return "filesystem";
+    }
+    // Codex 0.135+ `view_image` reads an image file from disk for visual
+    // inspection (screenshots, diagrams). Same filesystem-read semantic
+    // as `read_file` — without this branch every view_image call lands
+    // in "other", under-attributing visual-verification turns to
+    // filesystem-explore activity.
+    if (name === "view_image") {
+        return "filesystem";
+    }
+    if (name === "web_search" || name === "web_fetch") {
+        return "research";
+    }
+    // MCP devtools tools belong to verification regardless of cycle.
+    // BOTH wire shapes: `mcp__<server>__<tool>` (hook stdin) and bare
+    // `bdt_*` / `ndt_*` / `bedt_*` (rollout JSONL — empirically the
+    // dominant case). Without bare-prefix detection, every Codex session
+    // that ran browser/node/backend MCP tools reports zero "verification"
+    // category turns even when all the agent did was verify.
+    if (/^mcp__(?:browser|node|backend)[-_]devtools__/.test(name)) {
+        return "verification";
+    }
+    if (/^(bdt|ndt|bedt)_/.test(name)) {
+        return "verification";
+    }
+    return "other";
+}
+/**
+ * Determine the dominant category for a turn given counts per tool. Returns
+ * the category with the highest tool-call count; ties broken by the
+ * priority order embedded in the switch fallthrough (verification beats
+ * coding beats planning beats shell beats research beats filesystem).
+ *
+ * Returns "other" when no tools were called.
+ */
+function dominantCodexTurnCategory(toolCounts) {
+    const tally = {
+        coding: 0,
+        verification: 0,
+        shell: 0,
+        planning: 0,
+        research: 0,
+        filesystem: 0,
+        other: 0,
+    };
+    for (const [name, count] of Object.entries(toolCounts)) {
+        tally[classifyCodexToolName(name)] += count;
+    }
+    let best = "other";
+    let bestCount = 0;
+    const priority = [
+        "verification",
+        "coding",
+        "planning",
+        "shell",
+        "research",
+        "filesystem",
+        "other",
+    ];
+    for (const cat of priority) {
+        if (tally[cat] > bestCount) {
+            best = cat;
+            bestCount = tally[cat];
+        }
+    }
+    return best;
+}
+//# sourceMappingURL=classifier.js.map

package/dist/analytics/codex/classifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifier.js","sourceRoot":"","sources":["../../../src/analytics/codex/classifier.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;AAeH,sDAiDC;AAUD,8DA+BC;AA9FD;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,IAA+B;IACjE,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,OAAO,OAAO,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QACzB,OAAO,QAAQ,CAAC;IACpB,CAAC;IACD,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QACzB,OAAO,UAAU,CAAC;IACtB,CAAC;IACD,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7C,OAAO,OAAO,CAAC;IACnB,CAAC;IACD,4DAA4D;IAC5D,sEAAsE;IACtE,kEAAkE;IAClE,iEAAiE;IACjE,iEAAiE;IACjE,0DAA0D;IAC1D,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACjE,OAAO,YAAY,CAAC;IACxB,CAAC;IACD,qEAAqE;IACrE,oEAAoE;IACpE,mEAAmE;IACnE,6DAA6D;IAC7D,+BAA+B;IAC/B,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QACxB,OAAO,YAAY,CAAC;IACxB,CAAC;IACD,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QAChD,OAAO,UAAU,CAAC;IACtB,CAAC;IACD,iEAAiE;IACjE,kEAAkE;IAClE,gEAAgE;IAChE,qEAAqE;IACrE,sEAAsE;IACtE,yDAAyD;IACzD,IAAI,8CAA8C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5D,OAAO,cAAc,CAAC;IAC1B,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,OAAO,cAAc,CAAC;IAC1B,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,yBAAyB,CAAC,UAAkC;IACxE,MAAM,KAAK,GAAsC;QAC7C,MAAM,EAAE,CAAC;QACT,YAAY,EAAE,CAAC;QACf,KAAK,EAAE,CAAC;QACR,QAAQ,EAAE,CAAC;QACX,QAAQ,EAAE,CAAC;QACX,UAAU,EAAE,CAAC;QACb,KAAK,EAAE,CAAC;KACX,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACrD,KAAK,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;IAChD,CAAC;IACD,IAAI,IAAI,GAAsB,OAAO,CAAC;IACtC,IAAI,SAAS,GAAW,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAwB;QAClC,cAAc;QACd,QAAQ;QACR,UAAU;QACV,OAAO;QACP,UAAU;QACV,YAAY;QACZ,OAAO;KACV,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,SAAS,EAAE,CAAC;YACzB,IAAI,GAAG,GAAG,CAAC;YACX,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC"}

package/dist/analytics/codex/emit.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Codex `session_analytics` Stop-hook orchestrator.
+ *
+ * Called from the detached `ironbee codex process-analytics` worker. Reads
+ * the FULL rollout at each Stop (from zero), projects it with
+ * `projectCodexDelta`, and submits ONE `session_analytics` master event
+ * (deterministic id per session → backend latest-wins). Stop-hook emission
+ * is gated by `analytics.emitOnStop` (default true) — when disabled, only
+ * the SessionEnd-equivalent (live path passes isFinal:false, so the gate
+ * relies on emitOnStop; import path always emits via the SessionEnd
+ * trigger). Worker passes `isFinal: false` per Round 8 fix (Codex has no
+ * true SessionEnd, every Stop is a checkpoint).
+ *
+ * `session_turn_analytics` is intentionally OUT OF SCOPE on Codex (see
+ * `projection.ts` module docstring).
+ * The master record's `category_breakdown` + session-level
+ * aggregates carry the same signals that turn-level emission would have.
+ *
+ * Trade-off: from-zero parse on each Stop wastes a bit of CPU vs cursor-
+ * incremental, but the rollout is typically <500KB and parse runs in
+ * the DETACHED worker so the hook is never blocked. Eliminates accumulated
+ * merge state — simpler + idempotent.
+ *
+ * Independent of Claude's `emit.ts` — Codex projection consumes the
+ * RolloutItem enum, not Claude's transcript message lines.
+ */
+import { CodexRolloutLine } from "./types";
+export interface EmitCodexSessionAnalyticsOpts {
+    projectDir: string;
+    sessionId: string;
+    rolloutPath?: string;
+    /**
+     * Pre-parsed rollout lines (worker-shared across pipelines to avoid
+     * a second file read + parse pass). When provided, the function skips
+     * its own `readFileSync` + JSON.parse. When omitted, falls back to
+     * the local from-zero `parseRollout` call.
+     */
+    preloadedLines?: CodexRolloutLine[];
+    isFinal?: boolean;
+    endReason?: string;
+    userEmail?: string;
+    usageType?: "api" | "subscription";
+    usagePlan?: string;
+}
+/** Stop-hook orchestrator. Fail-safe — silent on every failure. */
+export declare function emitCodexSessionAnalytics(opts: EmitCodexSessionAnalyticsOpts): Promise<void>;
+//# sourceMappingURL=emit.d.ts.map

package/dist/analytics/codex/emit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emit.d.ts","sourceRoot":"","sources":["../../../src/analytics/codex/emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAmBH,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAiB3C,MAAM,WAAW,6BAA6B;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACpC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,KAAK,GAAG,cAAc,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,mEAAmE;AACnE,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAwGlG"}

package/dist/analytics/codex/emit.js

@@ -0,0 +1,158 @@
+"use strict";
+/**
+ * Codex `session_analytics` Stop-hook orchestrator.
+ *
+ * Called from the detached `ironbee codex process-analytics` worker. Reads
+ * the FULL rollout at each Stop (from zero), projects it with
+ * `projectCodexDelta`, and submits ONE `session_analytics` master event
+ * (deterministic id per session → backend latest-wins). Stop-hook emission
+ * is gated by `analytics.emitOnStop` (default true) — when disabled, only
+ * the SessionEnd-equivalent (live path passes isFinal:false, so the gate
+ * relies on emitOnStop; import path always emits via the SessionEnd
+ * trigger). Worker passes `isFinal: false` per Round 8 fix (Codex has no
+ * true SessionEnd, every Stop is a checkpoint).
+ *
+ * `session_turn_analytics` is intentionally OUT OF SCOPE on Codex (see
+ * `projection.ts` module docstring).
+ * The master record's `category_breakdown` + session-level
+ * aggregates carry the same signals that turn-level emission would have.
+ *
+ * Trade-off: from-zero parse on each Stop wastes a bit of CPU vs cursor-
+ * incremental, but the rollout is typically <500KB and parse runs in
+ * the DETACHED worker so the hook is never blocked. Eliminates accumulated
+ * merge state — simpler + idempotent.
+ *
+ * Independent of Claude's `emit.ts` — Codex projection consumes the
+ * RolloutItem enum, not Claude's transcript message lines.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.emitCodexSessionAnalytics = emitCodexSessionAnalytics;
+const fs_1 = require("fs");
+const logger_1 = require("../../lib/logger");
+const actions_1 = require("../../hooks/core/actions");
+const collector_1 = require("../../lib/collector");
+const config_1 = require("../../lib/config");
+const projection_1 = require("./projection");
+const transcript_1 = require("./transcript");
+function parseRollout(path) {
+    const raw = (0, fs_1.readFileSync)(path, "utf-8");
+    const out = [];
+    for (const line of raw.split("\n")) {
+        if (line.length === 0) {
+            continue;
+        }
+        try {
+            out.push(JSON.parse(line));
+        }
+        catch {
+            // malformed line — skip
+        }
+    }
+    return out;
+}
+/** Stop-hook orchestrator. Fail-safe — silent on every failure. */
+async function emitCodexSessionAnalytics(opts) {
+    if (!(0, config_1.isAnalyticsEnabled)(opts.projectDir)) {
+        logger_1.logger.debug(`codex emit: analytics disabled`);
+        return;
+    }
+    // Claude-parity: use the same git-aware project-name resolution as
+    // Claude's emit pipeline (`hooks/core/actions.ts:resolveProjectName`).
+    // Plain `basename(projectDir)` diverges when Codex is launched from a
+    // subdir vs Claude operating on the same project from the git root —
+    // backend grouping by `project_name` then sees two distinct sessions for
+    // the same project.
+    const projectName = (0, actions_1.resolveProjectName)(opts.projectDir);
+    let lines;
+    if (opts.preloadedLines !== undefined) {
+        // Worker-provided cache — skip the file read entirely.
+        lines = opts.preloadedLines;
+    }
+    else {
+        let rolloutPath = opts.rolloutPath ?? null;
+        if (rolloutPath === null || !(0, fs_1.existsSync)(rolloutPath)) {
+            rolloutPath = (0, transcript_1.findCodexRolloutPath)(opts.sessionId);
+        }
+        if (rolloutPath === null) {
+            logger_1.logger.debug(`codex emit: rollout not found for ${opts.sessionId}`);
+            return;
+        }
+        try {
+            lines = parseRollout(rolloutPath);
+        }
+        catch (e) {
+            logger_1.logger.debug(`codex emit: rollout parse failed: ${e instanceof Error ? e.message : e}`);
+            return;
+        }
+    }
+    if (lines.length === 0) {
+        return;
+    }
+    let projection;
+    try {
+        projection = (0, projection_1.projectCodexDelta)({
+            sessionId: opts.sessionId,
+            projectName,
+            userEmail: opts.userEmail,
+            lines,
+            endReason: opts.endReason,
+            isFinal: opts.isFinal === true,
+        });
+    }
+    catch (e) {
+        logger_1.logger.debug(`codex emit: projection failed: ${e instanceof Error ? e.message : e}`);
+        return;
+    }
+    // Analytics events are typically much larger than the 4KB queue line
+    // cap (a 100-turn session can carry 20KB+ in `context_tokens_samples`
+    // and per-tool maps), so they POST direct to the collector — mirror of
+    // Claude analytics emit. Skip when no collector is configured.
+    if (!(0, config_1.isCollectorConfigured)((0, config_1.loadConfig)(opts.projectDir))) {
+        logger_1.logger.debug(`codex emit: collector not configured — skipping POST`);
+        return;
+    }
+    const batch = [];
+    // Master event — gated by emitOnStop (default true). SessionEnd always emits.
+    //
+    // Wire shape: `analytics: SessionAnalytics` is NESTED under the event
+    // (mirrors Claude side; the collector's session_analytics envelope
+    // requires this single nested body field). Earlier code flattened
+    // `...projection.delta` at the top level — the collector then saw no
+    // `analytics` field → validation reject → 400 on every Codex POST.
+    // The session-identity fields (session_id / project_name /
+    // user_email / usage_type / usage_plan) live on the top-level
+    // envelope, NOT inside `analytics`.
+    const shouldEmitMaster = opts.isFinal === true || (0, config_1.isAnalyticsEmitOnStopEnabled)(opts.projectDir);
+    if (shouldEmitMaster) {
+        // The projection includes `session_id` + `project_name` (carried
+        // through the SessionAnalytics body for downstream consumers that
+        // see only the analytics blob). The wire envelope ALSO carries
+        // them at top level — collector accepts the duplication and
+        // canonicalizes on the envelope copy. Mirrors the Claude side.
+        const analyticsBody = { ...projection.delta };
+        const masterEvent = {
+            id: (0, projection_1.deriveCodexSessionAnalyticsEventId)(opts.sessionId),
+            type: "session_analytics",
+            timestamp: Date.now(),
+            session_id: opts.sessionId,
+            project_name: projectName,
+            user_email: opts.userEmail,
+            usage_type: opts.usageType,
+            usage_plan: opts.usagePlan,
+            analytics: analyticsBody,
+        };
+        batch.push(masterEvent);
+    }
+    // session_turn_analytics is OUT OF SCOPE on Codex (see projection.ts
+    // module docstring). Only the master session_analytics event ships.
+    if (batch.length === 0) {
+        return;
+    }
+    try {
+        await (0, collector_1.sendEventsBatchToCollector)(batch, opts.sessionId, opts.projectDir);
+    }
+    catch (e) {
+        logger_1.logger.debug(`codex emit: POST batch=${batch.length} failed: ${e instanceof Error ? e.message : e}`);
+    }
+}
+//# sourceMappingURL=emit.js.map

package/dist/analytics/codex/emit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emit.js","sourceRoot":"","sources":["../../../src/analytics/codex/emit.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;;AAuDH,8DAwGC;AA7JD,2BAA8C;AAC9C,6CAA0C;AAC1C,sDAA8D;AAG9D,mDAAiE;AACjE,6CAK0B;AAC1B,6CAIsB;AAEtB,6CAAoD;AAEpD,SAAS,YAAY,CAAC,IAAY;IAC9B,MAAM,GAAG,GAAW,IAAA,iBAAY,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QAClC,IAAI,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqB,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACL,wBAAwB;QAC5B,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAoBD,mEAAmE;AAC5D,KAAK,UAAU,yBAAyB,CAAC,IAAmC;IAC/E,IAAI,CAAC,IAAA,2BAAkB,EAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACvC,eAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC/C,OAAO;IACX,CAAC;IAED,mEAAmE;IACnE,uEAAuE;IACvE,sEAAsE;IACtE,qEAAqE;IACrE,yEAAyE;IACzE,oBAAoB;IACpB,MAAM,WAAW,GAAW,IAAA,4BAAkB,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAEhE,IAAI,KAAyB,CAAC;IAC9B,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACpC,uDAAuD;QACvD,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC;IAChC,CAAC;SAAM,CAAC;QACJ,IAAI,WAAW,GAAkB,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC;QAC1D,IAAI,WAAW,KAAK,IAAI,IAAI,CAAC,IAAA,eAAU,EAAC,WAAW,CAAC,EAAE,CAAC;YACnD,WAAW,GAAG,IAAA,iCAAoB,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACvB,eAAM,CAAC,KAAK,CAAC,qCAAqC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YACpE,OAAO;QACX,CAAC;QACD,IAAI,CAAC;YACD,KAAK,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YAClB,eAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxF,OAAO;QACX,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAAA,OAAO;IAAA,CAAC;IAEjC,IAAI,UAAmC,CAAC;IACxC,IAAI,CAAC;QACD,UAAU,GAAG,IAAA,8BAAiB,EAAC;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW;YACX,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO,KAAK,IAAI;SACjC,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,eAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrF,OAAO;IACX,CAAC;IAED,qEAAqE;IACrE,sEAAsE;IACtE,uEAAuE;IACvE,+DAA+D;IAC/D,IAAI,CAAC,IAAA,8BAAqB,EAAC,IAAA,mBAAU,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACtD,eAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACrE,OAAO;IACX,CAAC;IAED,MAAM,KAAK,GAAY,EAAE,CAAC;IAE1B,8EAA8E;IAC9E,EAAE;IACF,sEAAsE;IACtE,mEAAmE;IACnE,kEAAkE;IAClE,qEAAqE;IACrE,mEAAmE;IACnE,2DAA2D;IAC3D,8DAA8D;IAC9D,oCAAoC;IACpC,MAAM,gBAAgB,GAAY,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,IAAA,qCAA4B,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzG,IAAI,gBAAgB,EAAE,CAAC;QACnB,iEAAiE;QACjE,kEAAkE;QAClE,+DAA+D;QAC/D,4DAA4D;QAC5D,+DAA+D;QAC/D,MAAM,aAAa,GAAqB,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC;QAChE,MAAM,WAAW,GAA0B;YACvC,EAAE,EAAE,IAAA,+CAAkC,EAAC,IAAI,CAAC,SAAS,CAAC;YACtD,IAAI,EAAE,mBAAmB;YACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,YAAY,EAAE,WAAW;YACzB,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,SAAS,EAAE,aAAa;SAC3B,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,WAA+B,CAAC,CAAC;IAChD,CAAC;IAED,qEAAqE;IACrE,oEAAoE;IAEpE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAAC,OAAO;IAAC,CAAC;IAEnC,IAAI,CAAC;QACD,MAAM,IAAA,sCAA0B,EAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,eAAM,CAAC,KAAK,CAAC,0BAA0B,KAAK,CAAC,MAAM,YAAY,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzG,CAAC;AACL,CAAC"}

package/dist/analytics/codex/events-emit.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Codex analytics Stop-hook orchestrator.
+ *
+ * Called once per Stop hook fire (verify-gate.ts / activity-end.ts). Reads
+ * the rollout (cursor-incremental) and emits:
+ *
+ *   - one or more `api_request` events (per new token_count)
+ *   - one or more `session_status` events (per new token_count, gated by
+ *     event-time min-interval throttle + skip-if-unchanged signature —
+ *     mirror of Claude statusline cadence, see analytics.md)
+ *
+ * `session_context` is intentionally OUT OF SCOPE on Codex — the only
+ * available source (Codex's `~/.codex/logs_2.sqlite` feedback-logger DB)
+ * is selective + retention-limited (we'd see 1 of ~94 API request bodies)
+ * AND its `input`/`output` fields are redacted by the logger, so
+ * per-turn breakdown reconstruction is impossible. Rollout JSONL carries
+ * the dynamic side (user_message / function_call / function_call_output)
+ * but has NO instructions/tools, so a hybrid pipeline would still need
+ * SQLite for the static portion — net value didn't justify the complexity
+ * + native-module dependency.
+ *
+ * All events POST directly to the collector in a single batch (mirror of
+ * Claude analytics dispatch). Cursor advances are staged in-memory and
+ * only persisted on POST success — fail keeps cursor stale so the next
+ * Stop retries (deterministic event ids make retries idempotent via
+ * backend dedup). Fail-safe — analytics failures never break the Stop hook.
+ *
+ * State persistence: rollout cursor + statusline signature live under
+ * `.ironbee/sessions/<sid>/analytics-codex/state.json` (separate from the
+ * main analytics state to avoid Anthropic-specific reset semantics
+ * leaking into Codex).
+ */
+import { CodexRolloutLine } from "./types";
+export interface EmitCodexAnalyticsOpts {
+    projectDir: string;
+    sessionId: string;
+    /** Rollout path supplied by Codex hook stdin (`transcript_path`). Falls back to discovery walk. */
+    rolloutPath?: string;
+    /**
+     * Pre-parsed rollout lines (worker-shared across pipelines to avoid
+     * a second file read + parse pass). When provided, the cursor-
+     * incremental read is bypassed and the whole array is processed
+     * (deterministic event ids dedup re-processed lines at the backend).
+     * The cursor (offset/inode/size) is still advanced to current file
+     * state for next-Stop incremental behavior in subsequent runs that
+     * DON'T supply preloadedLines.
+     */
+    preloadedLines?: CodexRolloutLine[];
+    /** Pulled from session state.json (set by SessionStart hook). */
+    userEmail?: string;
+    usageType?: "api" | "subscription";
+    usagePlan?: string;
+    projectName?: string;
+    /** Current active activity_id (for session_status correlation). Empty string when none. */
+    activityId?: string;
+}
+/**
+ * Stop-hook orchestrator. Wraps each phase in try/catch so an emission
+ * failure on one event class doesn't take down the others.
+ */
+export declare function emitCodexAnalytics(opts: EmitCodexAnalyticsOpts): Promise<void>;
+//# sourceMappingURL=events-emit.d.ts.map

package/dist/analytics/codex/events-emit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events-emit.d.ts","sourceRoot":"","sources":["../../../src/analytics/codex/events-emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AA8BH,OAAO,EACH,gBAAgB,EAInB,MAAM,SAAS,CAAC;AAkIjB,MAAM,WAAW,sBAAsB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,mGAAmG;IACnG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACpC,iEAAiE;IACjE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,KAAK,GAAG,cAAc,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2FAA2F;IAC3F,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqWpF"}