@pinta-ai/pinta-codex 1.2.0

package/.codex-plugin/plugin.json

@@ -0,0 +1,40 @@
+{
+  "name": "pinta-codex",
+  "version": "1.2.0",
+  "description": "Generic OTLP forwarder for Codex hook events",
+  "author": {
+    "name": "Pinta AI",
+    "email": "support@pinta.sh",
+    "url": "https://pinta.sh"
+  },
+  "homepage": "https://pinta.sh",
+  "repository": "https://github.com/awarecorp/pinta-codex",
+  "license": "SEE LICENSE IN ../LICENSE",
+  "keywords": [
+    "codex",
+    "opentelemetry",
+    "observability",
+    "otlp"
+  ],
+  "hooks": "./hooks.json",
+  "interface": {
+    "displayName": "Pinta Codex",
+    "shortDescription": "Forward Codex hook events to any OTLP/HTTP collector",
+    "longDescription": "Captures Codex hook events, converts them to OTLP spans, and sends them to any OTLP/HTTP traces collector. Use with Pinta Manager for managed identity attribution, or any OTel pipeline of your choice.",
+    "developerName": "Pinta AI",
+    "category": "Productivity",
+    "capabilities": [
+      "Interactive",
+      "Write"
+    ],
+    "websiteURL": "https://pinta.sh",
+    "privacyPolicyURL": "https://pinta.sh",
+    "termsOfServiceURL": "https://pinta.sh",
+    "defaultPrompt": [
+      "Review code with Pinta telemetry enabled.",
+      "Send Codex tool activity to my Pinta endpoint.",
+      "Trace this coding session for security review."
+    ],
+    "brandColor": "#0F766E"
+  }
+}

package/CHANGELOG.md

@@ -0,0 +1,50 @@
+# Changelog
+
+All notable changes to pinta-codex are documented here.
+
+## [1.2.0] - 2026-04-29 (BREAKING)
+
+### BREAKING CHANGES
+
+- **Pinta CLI dependency removed** — `pinta identity id/email` is no longer invoked. Identity attribution moves to the relay layer (Pinta Manager attaches on forward; OSS users handle in their own pipeline).
+- **`PINTA_CODEX_API_KEY` semantic changed** — was: Pinta backend API key sent as `x-api-key`. Now: optional, treated as a token wrapped into `OTEL_EXPORTER_OTLP_HEADERS=x-pinta-relay-token=<value>`. New primary key is `OTEL_EXPORTER_OTLP_HEADERS` (full headers string in `key=val,key=val` format).
+- **`PINTA_CODEX_ENDPOINT` deprecated (still accepted)** — new primary is `OTEL_EXPORTER_OTLP_ENDPOINT`. `npm run setup` auto-migrates legacy keys to OTel-spec naming (writes `~/.codex/pinta-codex.env.bak` first).
+- **PreToolUse fail-close removed** — without identity to check, the deny path no longer fires. All hooks exit 0 on success.
+- **`member.identity.*` resource attributes removed** — relay attaches identity if present.
+- **`codex.client = "codex"` vestigial resource attribute removed.**
+- **`src/enterprise/` directory removed** — `PintaIdentityResolver` deleted.
+- **`src/handlers/auth-message.ts` removed** — no auth message to print.
+- **`src/core/identity.ts` reduced to empty stub.**
+- **`tools/setup.ts` no longer prompts for or checks Pinta identity** (step 5 dropped).
+- **`tools/doctor.ts` no longer checks pinta CLI presence or identity authentication.**
+
+### Added
+
+- vitest test suite (`tests/core/otlp.test.ts`) — 5 tests covering OTLP builder + identity absence regression guards.
+- `tools/_lib.ts`: `migrateLegacyEnvKeys(p)` — auto-rename legacy `PINTA_CODEX_*` keys to OTel-spec on next setup run, with `.bak` backup.
+- `src/core/config.ts`: `hasOtlpEndpoint(config)` helper (currently unused — reserved for future signaling).
+- `src/core/config.ts`: silent disable when no endpoint configured (was: `loadConfig()` threw).
+
+### Changed
+
+- `buildOtlpPayload` signature: `{event, traceId, identity, now?}` → `{event, traceId, now?}`.
+- `Transport`: takes `PintaCodexConfig` (renamed from `PintaConfig`); reads `config.endpoint`/`config.headers` set by config resolution; silent-disable when endpoint missing.
+- `package.json` description updated.
+- `.codex-plugin/plugin.json` description + interface.shortDescription/longDescription updated for OTel collector framing.
+- `tools/mock-server.ts` reduced to a generic OTLP collector + viewer (removed Pinta-backend-specific endpoints, auth gate, identity extraction).
+- Hint messages in transport now reference `OTEL_EXPORTER_OTLP_*` env names.
+
+### Migration
+
+**Existing users with `~/.codex/pinta-codex.env`:** Just run `npm run setup` again. The migration helper detects legacy keys, writes a `.bak`, and renames in place. Then re-run `codex` — same plugin behavior, just with new env names.
+
+**Manual config users:** Update `~/.codex/pinta-codex.env`:
+
+```env
+OTEL_EXPORTER_OTLP_ENDPOINT=https://your-collector.example.com
+OTEL_EXPORTER_OTLP_HEADERS=x-pinta-relay-token=YOUR-TOKEN
+```
+
+(Or for non-Pinta collectors: `OTEL_EXPORTER_OTLP_HEADERS=Authorization=Bearer YOUR-TOKEN`.)
+
+**Identity attribution:** v1.0/1.1's `member.identity.*` resource attrs are gone. If you depended on them in your pipeline, attach them at your collector / forwarder layer. Pinta Manager users (M9d+): manager handles this automatically.

package/LICENSE

@@ -0,0 +1,136 @@
+# PolyForm Noncommercial License 1.0.0
+
+<https://polyformproject.org/licenses/noncommercial/1.0.0>
+
+## Acceptance
+
+In order to get any license under these terms, you must agree
+to them as both strict obligations and conditions to all
+your licenses.
+
+## Copyright License
+
+The licensor grants you a copyright license for the
+software to do everything you might do with the software
+that would otherwise infringe the licensor's copyright
+in it for any permitted purpose.  However, you may
+only distribute the software according to [Distribution
+License](#distribution-license) and make changes or new works
+based on the software according to [Changes and New Works
+License](#changes-and-new-works-license).
+
+## Distribution License
+
+The licensor grants you an additional copyright license to
+distribute copies of the software.  Your license to distribute
+covers distributing the software with changes and new works
+permitted by [Changes and New Works
+License](#changes-and-new-works-license).
+
+## Notices
+
+You must ensure that anyone who gets a copy of any part of
+the software from you also gets a copy of these terms or the
+URL for them above, as well as copies of any plain-text lines
+beginning with `Required Notice:` that the licensor provided
+with the software.  For example:
+
+> Required Notice: Copyright Pinta AI (https://pinta.sh)
+
+## Changes and New Works License
+
+The licensor grants you an additional copyright license to make
+changes and new works based on the software for any permitted
+purpose.
+
+## Patent License
+
+The licensor grants you a patent license for the software that
+covers patent claims the licensor can license, or becomes able
+to license, that you would infringe by using the software.
+
+## Noncommercial Purposes
+
+Any noncommercial purpose is a permitted purpose.
+
+## Personal Uses
+
+Personal use for research, experiment, and testing for
+the benefit of public knowledge, personal study, private
+entertainment, hobby projects, amateur pursuits, or religious
+observance, without any anticipated commercial application,
+is use for a permitted purpose.
+
+## Noncommercial Organizations
+
+Use by any charitable organization, educational institution,
+public research organization, public safety or health
+organization, environmental protection organization, or
+government institution is use for a permitted purpose
+regardless of the source of funding or obligations resulting
+from the funding.
+
+## Fair Use
+
+You may have "fair use" rights for the software under the
+law.  These terms do not limit them.
+
+## No Other Rights
+
+These terms do not allow you to sublicense or transfer any of
+your licenses to anyone else, or prevent the licensor from
+granting licenses to anyone else.  These terms do not imply
+any other licenses.
+
+## Patent Defense
+
+If you make any written claim that the software infringes or
+contributes to infringement of any patent, your patent license
+for the software granted under these terms ends immediately. If
+your company makes such a claim, your patent license ends
+immediately for work on behalf of your company.
+
+## Violations
+
+The first time you are notified in writing that you have
+violated any of these terms, or done anything with the software
+not covered by your licenses, your licenses can nonetheless
+continue if you come into full compliance with these terms,
+and take practical steps to correct past violations, within
+32 days of receiving notice.  Otherwise, all your licenses
+end immediately.
+
+## No Liability
+
+***As far as the law allows, the software comes as is, without
+any warranty or condition, and the licensor will not be liable
+to you for any damages arising out of these terms or the use
+or nature of the software, under any kind of legal claim.***
+
+## Definitions
+
+The **licensor** is the individual or entity offering these
+terms, and the **software** is the software the licensor makes
+available under these terms.
+
+**You** refers to the individual or entity agreeing to these
+terms.
+
+**Your company** is any legal entity, sole proprietorship,
+or other kind of organization that you work for, plus all
+organizations that have control over, are under the control
+of, or are under common control with that organization.
+**Control** means ownership of substantially all the assets of
+an entity, or the power to direct its management and policies
+by vote, contract, or otherwise.  Control can be direct or
+indirect.
+
+**Your licenses** are all the licenses granted to you for the
+software under these terms.
+
+**Use** means anything you do with the software requiring one
+of your licenses.
+
+---
+
+Required Notice: Copyright (c) 2026 Pinta AI

package/README.md

@@ -0,0 +1,214 @@
+# pinta-codex
+
+Generic OTLP forwarder for Codex hook events.
+
+> **엔드유저 설치 가이드:** [`docs/installation-guide.md`](./docs/installation-guide.md)
+> **pinta-cc와의 차이:** [`docs/codex-vs-claude-code.md`](./docs/codex-vs-claude-code.md)
+> 이 README는 개발자 관점 개요입니다.
+
+## Channels
+
+두 채널이 병행 운영됩니다. `~/.codex/hooks.json` 의 absolute-path prefix 로 구분되어 같은 머신에서 공존 가능합니다.
+
+| Channel | 사용자 | 설치 |
+|---------|-------|------|
+| **Pinta Manager** (v0.2+) | Pinta 사용자 | catalog 가 npm tarball install → manager root prefix 로 hooks.json entry 자동 등록. **manual setup 불필요.** |
+| **Git clone + npm run setup** | OSS / standalone | 아래 Quick start 참조. `~/.codex/pinta-codex.env` 에 직접 endpoint/token 작성. |
+
+## Quick start (OSS / standalone)
+
+```bash
+git clone https://github.com/awarecorp/pinta-codex.git
+cd pinta-codex
+npm install
+npm run setup      # interactive: build + env (OTLP collector URL) + config.toml + hooks.json
+codex              # hooks fire immediately
+npm run doctor     # verify everything green
+```
+
+`setup`은 idempotent — 재실행해도 안전합니다. `doctor`는 read-only.
+
+## What it captures
+
+Codex의 hook 시스템 (실험적; `~/.codex/config.toml`의 `features.codex_hooks = true` 활성화 필요) 이 현재 발화하는 5개 이벤트가 모두 핸들링됩니다.
+
+| Event | Notes |
+|-------|-------|
+| `SessionStart` | health ping + drain retry queue |
+| `UserPromptSubmit` | starts a new ULID trace per user turn |
+| `PreToolUse` | **Bash tool only** (current Codex limitation) |
+| `PostToolUse` | **Bash tool only** (current Codex limitation) |
+| `Stop` | final flush |
+
+각 invocation은 `node dist/index.js`를 spawn하고, 이벤트를 OTLP span 하나로 매핑한 뒤 `{endpoint}/traces`로 POST합니다.
+
+## Behavior
+
+- OTLP/HTTP JSON transport. 헤더는 `OTEL_EXPORTER_OTLP_HEADERS` 에서 읽음 (`key=val,key=val` 형식)
+- Top-level 이벤트 필드는 `codex.*` span attribute 로 평탄화 (Bronze; 형제 adaptor는 `cc.*`, `mcp.*`)
+- **No fail-close** — 모든 hook은 성공 시 exit 0 (전송 실패는 retry queue 로 흡수)
+- Disk-backed retry queue at `.plugin-data/failed-spans.jsonl` (cap 1000). 다음 hook 호출 시 일괄 drain
+- One trace per user turn — `UserPromptSubmit` ULID 기반
+
+## Configuration
+
+`npm run setup` 이 `~/.codex/pinta-codex.env` 에 endpoint + 헤더를 씁니다. 환경변수로 파일 값을 덮어쓸 수 있습니다.
+
+```bash
+# OTel-spec (primary)
+export OTEL_EXPORTER_OTLP_ENDPOINT="https://your-collector.example.com"
+export OTEL_EXPORTER_OTLP_HEADERS="x-pinta-relay-token=YOUR-TOKEN"
+
+# Non-Pinta collectors
+export OTEL_EXPORTER_OTLP_HEADERS="Authorization=Bearer YOUR-TOKEN"
+```
+
+`~/.codex/pinta-codex.env` 예시:
+
+```env
+OTEL_EXPORTER_OTLP_ENDPOINT=https://your-collector.example.com
+OTEL_EXPORTER_OTLP_HEADERS=x-pinta-relay-token=YOUR-TOKEN
+```
+
+**Resolution precedence (highest to lowest):**
+1. Explicit `process.env` (`OTEL_EXPORTER_OTLP_*`)
+2. `~/.codex/pinta-codex.env` (managed by `npm run setup`)
+3. Legacy `PINTA_CODEX_*` keys (auto-migrated on next `npm run setup`)
+4. Parity keys (`CLAUDE_PLUGIN_OPTION_ENDPOINT` / `CLAUDE_PLUGIN_OPTION_API_KEY`)
+
+Optional overrides:
+
+```bash
+export CODEX_PLUGIN_DATA="/abs/path/to/.plugin-data"     # override runtime data dir
+export CODEX_CLI_VERSION="$(codex --version | awk '{print $NF}')"
+export CODEX_HOME="/abs/path/to/.codex"                  # override ~/.codex during install
+```
+
+## Identity — not needed
+
+v1.2부터 Pinta CLI 의존이 제거되었습니다. Identity 부착은 relay 계층 책임입니다. Pinta Manager 가 forward 시 첨부하며, OSS 사용자는 자기 pipeline 에서 처리합니다. 플러그인 자체는 identity 없이 동작하며, 어떤 hook 도 identity 부재로 차단되지 않습니다.
+
+## Manual install (advanced)
+
+interactive setup 을 쓰지 않으려면:
+
+```bash
+npm run build
+npm run install-hooks                  # merges absolute paths into ~/.codex/hooks.json
+npm run install-hooks -- --dry-run     # preview without writing
+```
+
+`install-hooks` 는 idempotent: `~/.codex/hooks.json` 이 번들 템플릿과 이미 일치하면 `already up to date` 로 no-op. 이전 경로의 stale pinta-codex 엔트리는 자동 감지·제거 (`removed N stale pinta-codex entries`).
+
+`~/.codex/config.toml` 에 수동으로 추가:
+
+```toml
+[features]
+codex_hooks = true
+```
+
+> **Why an install script?** Codex는 아직 `.codex-plugin/plugin.json` 에서 hook 을 자동 로드하지 않습니다. `install-hooks` 가 번들 `hooks.json` 템플릿의 `${CODEX_PLUGIN_ROOT}` 를 절대경로로 교체하고 user-level 파일에 merge 합니다. Codex 가 plugin-hook auto-discovery 를 추가하면 이 단계는 사라집니다.
+
+## Uninstall
+
+```bash
+npm run uninstall-hooks
+```
+
+`dist/index.js` 를 참조하는 이 플러그인의 `~/.codex/hooks.json` 엔트리만 제거합니다. 다른 hook 은 건드리지 않습니다.
+
+완전 제거:
+
+```bash
+rm ~/.codex/pinta-codex.env
+# ~/.codex/config.toml 에서 [features] codex_hooks = true 라인 수동 삭제
+```
+
+## Local development
+
+Mock server (OTLP viewer at `http://localhost:3000`):
+
+```bash
+npm run mock-server
+```
+
+다른 터미널에서 endpoint 를 mock 으로 설정하고 Codex 시작:
+
+```bash
+OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:3000 codex
+```
+
+또는 stdin pipe 로 setup:
+
+```bash
+printf 'http://localhost:3000\n\n' | npm run setup
+```
+
+## Scripts
+
+| Script | Purpose |
+|--------|---------|
+| `npm run setup` | one-shot interactive installer (build + env + config + hooks) |
+| `npm run doctor` | read-only health check; exits 1 on failure |
+| `npm test` | vitest test suite |
+| `npm run build` | `tsc` into `dist/` |
+| `npm run dev` | `tsc --watch` |
+| `npm run install-hooks` | merge entries into `~/.codex/hooks.json` (supports `-- --dry-run`) |
+| `npm run uninstall-hooks` | remove this plugin's entries from `~/.codex/hooks.json` |
+| `npm run mock-server` | local OTLP collector for testing |
+| `npm run test:otlp` | span-flattening unit checks (legacy assert-based) |
+| `npm run test:redact` | redaction unit checks (legacy assert-based) |
+
+## BREAKING CHANGES from 1.0.x / 1.1.x
+
+상세한 마이그레이션 안내는 [`CHANGELOG.md`](./CHANGELOG.md) 를 참조하세요.
+
+요약:
+- Pinta CLI 의존 제거. `pinta login` 불필요
+- `PINTA_CODEX_ENDPOINT` / `PINTA_CODEX_API_KEY` → `OTEL_EXPORTER_OTLP_ENDPOINT` / `OTEL_EXPORTER_OTLP_HEADERS` (legacy 키는 backward-compat 으로 인식되며 다음 `npm run setup` 시 자동 마이그레이션)
+- PreToolUse fail-close 제거. 모든 hook 은 exit 0 on success
+- `member.identity.*` resource attribute 제거
+
+### 마이그레이션 액션
+
+| 채널 | 액션 |
+|------|------|
+| **Pinta Manager v0.2+** | 자동. 다음 reconcile 에 기존 hook entry 가 manager-installed 1.2.0 entry 로 교체되고 `~/.codex/pinta-codex.env` 의 PINTA_* 키는 OTEL_* 로 갱신. |
+| **Git clone (기존 사용자)** | `git pull && npm run setup` 1회 재실행. setup 이 legacy `PINTA_CODEX_*` 키를 OTel 키로 자동 마이그레이션 (.bak 백업). |
+| **재setup 안 함** | hook 자체는 1.0.x/1.1.x 코드 그대로라면 동작 유지. 단 dist/ 가 1.2.0 으로 빌드된 상태에서 PINTA_CODEX_* 만 남아있으면 backward-compat path 로 동작 (재setup 권장). |
+
+## Repo layout
+
+```text
+pinta-codex/
+├── .codex-plugin/plugin.json   # plugin manifest (forward-compatible with future auto-discovery)
+├── .agents/plugins/marketplace.json   # local marketplace pointer
+├── .github/workflows/          # CI (PR validation + dist/ rebuild on main)
+├── hooks.json                  # template using ${CODEX_PLUGIN_ROOT} — resolved by install-hooks
+├── LICENSE                     # PolyForm Noncommercial 1.0.0
+├── CHANGELOG.md                # version history + BREAKING CHANGES
+├── docs/
+│   ├── installation-guide.md   # end-user install walkthrough
+│   └── codex-vs-claude-code.md # UX differences vs pinta-cc
+├── src/
+│   ├── core/                   # OSS-reusable (config, transport, otlp, redact, retry-queue, trace, types, identity stub)
+│   ├── handlers/               # per-event handlers
+│   └── index.ts                # stdin → type guard → handler dispatch
+├── tests/
+│   └── core/                   # vitest tests (otlp.test.ts etc.)
+├── tools/
+│   ├── setup.ts                # one-shot interactive installer
+│   ├── doctor.ts               # read-only health check
+│   ├── install-hooks.ts        # merge into ~/.codex/hooks.json
+│   ├── uninstall-hooks.ts      # remove pinta-codex entries
+│   ├── mock-server.ts          # local OTLP viewer
+│   ├── test-otlp.ts            # span-flattening checks (legacy)
+│   ├── test-redact.ts          # redaction checks (legacy)
+│   └── _lib.ts                 # shared utilities (migrateLegacyEnvKeys etc.)
+├── vitest.config.ts
+└── .plugin-data/               # created at runtime (trace.json, failed-spans.jsonl)
+```
+
+## License
+
+PolyForm Noncommercial 1.0.0. See [`LICENSE`](./LICENSE).

package/dist/core/config.d.ts

@@ -0,0 +1,10 @@
+export interface PintaCodexConfig {
+    pluginRoot: string;
+    pluginData: string;
+    tracePath: string;
+    endpoint?: string;
+    headers: Record<string, string>;
+}
+export declare function loadConfig(): PintaCodexConfig;
+/** Returns true if OTel endpoint is configured (signal to silently disable telemetry). */
+export declare function hasOtlpEndpoint(config: PintaCodexConfig): boolean;

package/dist/core/config.js

@@ -0,0 +1,100 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadConfig = loadConfig;
+exports.hasOtlpEndpoint = hasOtlpEndpoint;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+function readEnvFile(p) {
+    const out = {};
+    let content;
+    try {
+        content = node_fs_1.default.readFileSync(p, "utf-8");
+    }
+    catch {
+        return out;
+    }
+    for (const raw of content.split("\n")) {
+        const line = raw.trim();
+        if (!line || line.startsWith("#"))
+            continue;
+        const idx = line.indexOf("=");
+        if (idx < 0)
+            continue;
+        const key = line.slice(0, idx).trim();
+        let value = line.slice(idx + 1).trim();
+        if ((value.startsWith('"') && value.endsWith('"')) ||
+            (value.startsWith("'") && value.endsWith("'"))) {
+            value = value.slice(1, -1);
+        }
+        if (key)
+            out[key] = value;
+    }
+    return out;
+}
+function resolveEndpoint(envFile) {
+    return process.env.OTEL_EXPORTER_OTLP_ENDPOINT
+        ?? envFile.OTEL_EXPORTER_OTLP_ENDPOINT
+        ?? process.env.PINTA_CODEX_ENDPOINT // legacy
+        ?? envFile.PINTA_CODEX_ENDPOINT // legacy
+        ?? process.env.CLAUDE_PLUGIN_OPTION_ENDPOINT // parity
+        ?? undefined;
+}
+function resolveHeaders(envFile) {
+    // Primary: OTel-spec, already in `key=val,key=val` format
+    if (process.env.OTEL_EXPORTER_OTLP_HEADERS)
+        return process.env.OTEL_EXPORTER_OTLP_HEADERS;
+    if (envFile.OTEL_EXPORTER_OTLP_HEADERS)
+        return envFile.OTEL_EXPORTER_OTLP_HEADERS;
+    // Legacy: raw token → wrap as x-pinta-relay-token header
+    if (process.env.PINTA_CODEX_API_KEY) {
+        return `x-pinta-relay-token=${process.env.PINTA_CODEX_API_KEY}`;
+    }
+    if (envFile.PINTA_CODEX_API_KEY) {
+        return `x-pinta-relay-token=${envFile.PINTA_CODEX_API_KEY}`;
+    }
+    // Parity: Claude Code-style userConfig env (raw token, same wrap)
+    if (process.env.CLAUDE_PLUGIN_OPTION_API_KEY) {
+        return `x-pinta-relay-token=${process.env.CLAUDE_PLUGIN_OPTION_API_KEY}`;
+    }
+    return undefined;
+}
+function parseHeadersString(raw) {
+    const out = {};
+    if (!raw)
+        return out;
+    for (const pair of raw.split(",")) {
+        const [k, ...rest] = pair.split("=");
+        if (k && rest.length > 0)
+            out[k.trim()] = rest.join("=").trim();
+    }
+    return out;
+}
+function loadConfig() {
+    const pluginRoot = process.env.CODEX_PLUGIN_ROOT
+        ?? process.env.CLAUDE_PLUGIN_ROOT
+        ?? process.cwd();
+    const pluginData = process.env.CODEX_PLUGIN_DATA
+        ?? process.env.CLAUDE_PLUGIN_DATA
+        ?? node_path_1.default.join(pluginRoot, ".plugin-data");
+    const codexHome = process.env.CODEX_HOME ?? node_path_1.default.join(node_os_1.default.homedir(), ".codex");
+    const envFilePath = node_path_1.default.join(codexHome, "pinta-codex.env");
+    const envFile = node_fs_1.default.existsSync(envFilePath) ? readEnvFile(envFilePath) : {};
+    const endpoint = resolveEndpoint(envFile);
+    const headersRaw = resolveHeaders(envFile);
+    return {
+        pluginRoot,
+        pluginData,
+        tracePath: node_path_1.default.join(pluginData, "trace.json"),
+        endpoint: endpoint?.replace(/\/+$/, ""),
+        headers: parseHeadersString(headersRaw ?? ""),
+    };
+}
+/** Returns true if OTel endpoint is configured (signal to silently disable telemetry). */
+function hasOtlpEndpoint(config) {
+    return Boolean(config.endpoint);
+}
+//# sourceMappingURL=config.js.map

package/dist/core/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":";;;;;AA2EA,gCAqBC;AAGD,0CAEC;AArGD,sDAAyB;AACzB,sDAAyB;AACzB,0DAA6B;AAU7B,SAAS,WAAW,CAAC,CAAS;IAC5B,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,iBAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,GAAG,CAAC;YAAE,SAAS;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,GAAG;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC5B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,OAA+B;IACtD,OAAO,OAAO,CAAC,GAAG,CAAC,2BAA2B;WACzC,OAAO,CAAC,2BAA2B;WACnC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAU,SAAS;WACnD,OAAO,CAAC,oBAAoB,CAAc,SAAS;WACnD,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS;WACnD,SAAS,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,OAA+B;IACrD,0DAA0D;IAC1D,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IAC1F,IAAI,OAAO,CAAC,0BAA0B;QAAE,OAAO,OAAO,CAAC,0BAA0B,CAAC;IAClF,yDAAyD;IACzD,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QACpC,OAAO,uBAAuB,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAChC,OAAO,uBAAuB,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAC9D,CAAC;IACD,kEAAkE;IAClE,IAAI,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,CAAC;QAC7C,OAAO,uBAAuB,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,CAAC;IAC3E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACrC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,UAAU;IACxB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB;WAC3C,OAAO,CAAC,GAAG,CAAC,kBAAkB;WAC9B,OAAO,CAAC,GAAG,EAAE,CAAC;IACnB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB;WAC3C,OAAO,CAAC,GAAG,CAAC,kBAAkB;WAC9B,mBAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC9E,MAAM,WAAW,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,iBAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE3E,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAE3C,OAAO;QACL,UAAU;QACV,UAAU;QACV,SAAS,EAAE,mBAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC;QAC9C,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACvC,OAAO,EAAE,kBAAkB,CAAC,UAAU,IAAI,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,SAAgB,eAAe,CAAC,MAAwB;IACtD,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC"}

package/dist/core/identity.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/core/identity.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=identity.js.map

package/dist/core/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/core/identity.ts"],"names":[],"mappings":""}

package/dist/core/otlp.d.ts

@@ -0,0 +1,57 @@
+import type { BaseEvent } from "./types.js";
+export interface OtlpAttribute {
+    key: string;
+    value: {
+        stringValue: string;
+    } | {
+        intValue: number;
+    } | {
+        doubleValue: number;
+    } | {
+        boolValue: boolean;
+    };
+}
+export interface OtlpSpan {
+    traceId: string;
+    spanId: string;
+    name: string;
+    kind: number;
+    startTimeUnixNano: string;
+    endTimeUnixNano: string;
+    attributes: OtlpAttribute[];
+}
+export interface ResourceSpans {
+    resource: {
+        attributes: OtlpAttribute[];
+    };
+    scopeSpans: Array<{
+        scope: {
+            name: string;
+            version: string;
+        };
+        spans: OtlpSpan[];
+    }>;
+}
+export interface OtlpPayload {
+    resourceSpans: ResourceSpans[];
+}
+/**
+ * Convert a 26-char Crockford ULID into 32 lowercase hex chars (16 bytes)
+ * suitable for an OTLP traceId. Decoding is straightforward because each
+ * Crockford char carries 5 bits and 26 chars = 130 bits; we keep the low
+ * 128 bits (the spec already pads timestamp+randomness into 128 bits).
+ */
+export declare function ulidToTraceId(ulid: string): string;
+/** Generate a fresh 16-hex-char (8-byte) span ID. */
+export declare function newSpanId(): string;
+export declare function buildOtlpPayload(args: {
+    event: BaseEvent;
+    traceId: string;
+    now?: number;
+}): OtlpPayload;
+/**
+ * Combine multiple per-hook payloads into a single OTLP payload by
+ * concatenating their resourceSpans arrays. The Pinta backend's parser
+ * iterates over resourceSpans natively.
+ */
+export declare function mergeBatch(payloads: OtlpPayload[]): OtlpPayload;