@wibeco/bridge 0.1.2 → 0.2.0

package/dist/{chunk-J2HWZMXA.js → chunk-YV3UV2XJ.js}

@@ -5,14 +5,19 @@ import {
   SystemCredentialStore,
   createHookEvent,
   detectRepository,
+  detectWorkingTreeMetrics,
+  eventTypeForHook,
   mapClaudeCodeHook,
   mapCodexHook,
   mapCursorHook,
   matchesGitHubRepository,
   normalizeGitHubRepository,
   pollDeviceToken,
-  requestDeviceAuthorization
-} from "./chunk-OTDZMJDK.js";
+  requestDeviceAuthorization,
+  startPresenceSession,
+  stopPresenceSession,
+  updatePresenceSession
+} from "./chunk-FLTLCZ6E.js";
 
 // src/cli/commands.ts
 import { access, cp, mkdir, readFile, writeFile } from "fs/promises";
@@ -184,16 +189,75 @@ async function statusCommand(cwd = process.cwd()) {
 }
 async function emitCommand(adapter, eventName, input) {
   const mapper = adapter === "cursor" ? mapCursorHook : adapter === "claude-code" ? mapClaudeCodeHook : mapCodexHook;
-  const mappedEvent = mapper(eventName, input);
+  let mappedEvent = mapper(eventName, input);
   const repo = await detectRepository(process.cwd());
+  if (repo && (mappedEvent.kind === "session.started" || mappedEvent.kind === "session.ended" || mappedEvent.kind === "presence.heartbeat" || mappedEvent.kind === "file.changed")) {
+    const workingTree = await detectWorkingTreeMetrics(repo.root);
+    if (workingTree) {
+      mappedEvent = {
+        ...mappedEvent,
+        metadata: {
+          ...mappedEvent.metadata,
+          working_tree_lines_added: workingTree.linesAdded,
+          working_tree_lines_deleted: workingTree.linesDeleted,
+          ...mappedEvent.kind === "file.changed" ? { paths: workingTree.paths } : { working_tree_paths: workingTree.paths }
+        }
+      };
+    }
+  }
+  if (mappedEvent.kind === "session.started") {
+    await startPresenceSession(adapter, mappedEvent.sessionId);
+    const metrics = await updatePresenceSession(
+      adapter,
+      mappedEvent.sessionId,
+      mappedEvent
+    );
+    mappedEvent = {
+      ...mappedEvent,
+      metadata: { ...mappedEvent.metadata, ...metrics ?? {} }
+    };
+  } else if (mappedEvent.kind === "session.ended") {
+    const metrics = await stopPresenceSession(adapter, mappedEvent.sessionId);
+    if (metrics) {
+      mappedEvent = {
+        ...mappedEvent,
+        durationMs: mappedEvent.durationMs ?? metrics.session_elapsed_ms,
+        metadata: {
+          ...mappedEvent.metadata,
+          ...metrics,
+          session_ended_at: (/* @__PURE__ */ new Date()).toISOString()
+        }
+      };
+    }
+  } else {
+    const metrics = await updatePresenceSession(
+      adapter,
+      mappedEvent.sessionId,
+      mappedEvent
+    );
+    if (mappedEvent.kind === "presence.heartbeat" && metrics) {
+      const publicMetadata = { ...mappedEvent.metadata };
+      delete publicMetadata.working_tree_paths;
+      delete publicMetadata.paths;
+      mappedEvent = {
+        ...mappedEvent,
+        metadata: { ...publicMetadata, ...metrics }
+      };
+    }
+  }
+  if (mappedEvent.kind === "session.started" || mappedEvent.kind === "session.ended") {
+    const publicMetadata = { ...mappedEvent.metadata };
+    delete publicMetadata.working_tree_paths;
+    mappedEvent = { ...mappedEvent, metadata: publicMetadata };
+  }
   const event = repo ? { ...mappedEvent, repo } : mappedEvent;
   const queue = new JsonFileOfflineQueue(queuePath());
   const credential = await loadCredential(process.cwd());
   if (!credential) {
-    await queue.enqueue([event]);
+    if (eventTypeForHook(event)) await queue.enqueue([event]);
     return {
       exitCode: 0,
-      message: `Queued ${event.kind}; this repository is not connected to Wibe.`
+      message: eventTypeForHook(event) ? `Queued ${event.kind}; this repository is not connected to Wibe.` : `Ignored operational ${event.kind} hook.`
     };
   }
   const result = await new SignedBatchClient({
@@ -478,6 +542,8 @@ async function assertExpectedRepository(cwd, expected) {
   );
 }
 async function sendVerificationHeartbeat(credential, adapter, reason) {
+  const repository = await detectRepository(process.cwd());
+  const workingTree = repository ? await detectWorkingTreeMetrics(repository.root) : void 0;
   return new SignedBatchClient({
     endpoint: `${credential.appUrl}/api/events/batch`,
     accessToken: credential.accessToken,
@@ -489,8 +555,16 @@ async function sendVerificationHeartbeat(credential, adapter, reason) {
   }).capture(
     createHookEvent({
       source: adapter,
-      kind: "unknown",
-      metadata: { verification: reason }
+      kind: "presence.heartbeat",
+      ...repository ? { repo: repository } : {},
+      metadata: {
+        verification: reason,
+        ...workingTree ? {
+          changed_files: workingTree.paths.length,
+          lines_added: workingTree.linesAdded,
+          lines_deleted: workingTree.linesDeleted
+        } : {}
+      }
     })
   );
 }

package/dist/cli.js

@@ -5,8 +5,10 @@ import {
   parseAdapter,
   setupCommand,
   statusCommand
-} from "./chunk-J2HWZMXA.js";
-import "./chunk-OTDZMJDK.js";
+} from "./chunk-YV3UV2XJ.js";
+import {
+  runPresenceHeartbeat
+} from "./chunk-FLTLCZ6E.js";
 
 // src/cli.ts
 var HELP = `wibe-bridge <command>
@@ -44,6 +46,13 @@ async function main() {
     return;
   } else if (command === "doctor") {
     result = await doctorCommand(process.cwd(), option(args, "--repository"));
+  } else if (command === "_presence-heartbeat") {
+    parseAdapter(option(args, "--adapter"));
+    const statePath = option(args, "--state");
+    const instanceId = option(args, "--instance");
+    if (!statePath || !instanceId) throw new Error("Presence state is incomplete");
+    await runPresenceHeartbeat(statePath, instanceId, emitCommand);
+    return;
   } else {
     process.stdout.write(`${HELP}
 `);

package/dist/codex-hook.js

@@ -1,12 +1,15 @@
 #!/usr/bin/env node
 import {
   emitCommand
-} from "./chunk-J2HWZMXA.js";
-import "./chunk-OTDZMJDK.js";
+} from "./chunk-YV3UV2XJ.js";
+import "./chunk-FLTLCZ6E.js";
 
 // src/codex-hook.ts
 async function main() {
   const text = process.argv[2];
+  if (text && Buffer.byteLength(text) > 1024 * 1024) {
+    throw new Error("notification payload exceeds 1 MiB limit");
+  }
   const payload = text ? JSON.parse(text) : {};
   const record = payload && typeof payload === "object" && !Array.isArray(payload) ? payload : {};
   const eventName = typeof record.type === "string" ? record.type : "turn-complete";

package/dist/index.d.ts

@@ -7,6 +7,7 @@ declare const agentSourceSchema: z.ZodEnum<{
 }>;
 type AgentSource = z.infer<typeof agentSourceSchema>;
 declare const hookEventKindSchema: z.ZodEnum<{
+    "presence.heartbeat": "presence.heartbeat";
     "session.started": "session.started";
     "session.ended": "session.ended";
     "lifecycle.before": "lifecycle.before";
@@ -35,6 +36,7 @@ declare const canonicalHookEventSchema: z.ZodObject<{
         codex: "codex";
     }>;
     kind: z.ZodEnum<{
+        "presence.heartbeat": "presence.heartbeat";
         "session.started": "session.started";
         "session.ended": "session.ended";
         "lifecycle.before": "lifecycle.before";
@@ -72,7 +74,7 @@ declare function mapClaudeCodeHook(eventName: string, input: unknown): {
     id: string;
     version: 1;
     source: "cursor" | "claude-code" | "codex";
-    kind: "session.started" | "session.ended" | "lifecycle.before" | "lifecycle.after" | "tool.started" | "tool.completed" | "file.changed" | "shell.started" | "shell.completed" | "mcp.started" | "mcp.completed" | "unknown";
+    kind: "presence.heartbeat" | "session.started" | "session.ended" | "lifecycle.before" | "lifecycle.after" | "tool.started" | "tool.completed" | "file.changed" | "shell.started" | "shell.completed" | "mcp.started" | "mcp.completed" | "unknown";
     occurredAt: string;
     metadata: Record<string, SafeValue>;
     sessionId?: string | undefined;
@@ -90,7 +92,7 @@ declare function mapCodexHook(eventName: string, input: unknown): {
     id: string;
     version: 1;
     source: "cursor" | "claude-code" | "codex";
-    kind: "session.started" | "session.ended" | "lifecycle.before" | "lifecycle.after" | "tool.started" | "tool.completed" | "file.changed" | "shell.started" | "shell.completed" | "mcp.started" | "mcp.completed" | "unknown";
+    kind: "presence.heartbeat" | "session.started" | "session.ended" | "lifecycle.before" | "lifecycle.after" | "tool.started" | "tool.completed" | "file.changed" | "shell.started" | "shell.completed" | "mcp.started" | "mcp.completed" | "unknown";
     occurredAt: string;
     metadata: Record<string, SafeValue>;
     sessionId?: string | undefined;
@@ -108,7 +110,7 @@ declare function mapCursorHook(eventName: string, input: unknown): {
     id: string;
     version: 1;
     source: "cursor" | "claude-code" | "codex";
-    kind: "session.started" | "session.ended" | "lifecycle.before" | "lifecycle.after" | "tool.started" | "tool.completed" | "file.changed" | "shell.started" | "shell.completed" | "mcp.started" | "mcp.completed" | "unknown";
+    kind: "presence.heartbeat" | "session.started" | "session.ended" | "lifecycle.before" | "lifecycle.after" | "tool.started" | "tool.completed" | "file.changed" | "shell.started" | "shell.completed" | "mcp.started" | "mcp.completed" | "unknown";
     occurredAt: string;
     metadata: Record<string, SafeValue>;
     sessionId?: string | undefined;
@@ -235,6 +237,7 @@ interface SignedBatchClientOptions {
     batchSize?: number;
     timeoutMs?: number;
 }
+declare function eventTypeForHook(event: CanonicalHookEvent): "presence.heartbeat" | "presence.started" | "presence.stopped" | "workspace.files_changed" | "workspace.test_completed" | null;
 interface FlushResult {
     sent: number;
     remaining: number;
@@ -250,6 +253,26 @@ declare class SignedBatchClient {
     flush(): Promise<FlushResult>;
 }
 
+declare const PRESENCE_HEARTBEAT_INTERVAL_MS = 45000;
+interface PresenceMetrics {
+    session_started_at: string;
+    session_elapsed_ms: number;
+    sequence: number;
+    active_seconds: number;
+    lines_added: number;
+    lines_deleted: number;
+    changed_files: number;
+    model_seconds: Record<string, number>;
+    tool_counts: Record<string, number>;
+    tests_passed: number;
+    tests_failed: number;
+}
+declare function startPresenceSession(source: AgentSource, sessionId: string | undefined, cwd?: string): Promise<PresenceMetrics>;
+declare function updatePresenceSession(source: AgentSource, sessionId: string | undefined, event: CanonicalHookEvent, cwd?: string): Promise<PresenceMetrics | undefined>;
+declare function stopPresenceSession(source: AgentSource, sessionId: string | undefined, cwd?: string): Promise<PresenceMetrics | undefined>;
+declare function runPresenceHeartbeat(statePath: string, expectedInstanceId: string, emit: (source: AgentSource, eventName: string, payload: Record<string, unknown>) => Promise<unknown>, intervalMs?: number): Promise<void>;
+declare function presenceStatePath(source: AgentSource, sessionId: string | undefined, cwd?: string): string;
+
 interface RedactionOptions {
     allowContent?: boolean;
     homeDirectory?: string;
@@ -264,9 +287,15 @@ interface RepositoryInfo {
     branch?: string;
     commit?: string;
 }
+interface WorkingTreeMetrics {
+    linesAdded: number;
+    linesDeleted: number;
+    paths: string[];
+}
 declare function detectRepository(cwd?: string): Promise<RepositoryInfo | undefined>;
+declare function detectWorkingTreeMetrics(root: string): Promise<WorkingTreeMetrics | undefined>;
 declare function sanitizeRemote(remote: string): string;
 declare function normalizeGitHubRepository(value: string): string | undefined;
 declare function matchesGitHubRepository(remote: string | undefined, expected: string): boolean;
 
-export { type AgentSource, type CanonicalHookEvent, type CredentialStore, type DeviceAuthorization, type DeviceTokenResponse, type FlushResult, type HookEventKind, JsonFileOfflineQueue, MemoryOfflineQueue, type OfflineQueue, type RedactionOptions, type RepositoryInfo, type SafeValue, SignedBatchClient, type SignedBatchClientOptions, type StoredCredential, SystemCredentialStore, agentSourceSchema, canonicalHookEventSchema, createHookEvent, detectRepository, deviceAuthorizationSchema, deviceTokenResponseSchema, hookEventKindSchema, mapClaudeCodeHook, mapCodexHook, mapCursorHook, matchesGitHubRepository, normalizeGitHubRepository, pollDeviceToken, redact, requestDeviceAuthorization, safeMetadata, safeValueSchema, sanitizeRemote };
+export { type AgentSource, type CanonicalHookEvent, type CredentialStore, type DeviceAuthorization, type DeviceTokenResponse, type FlushResult, type HookEventKind, JsonFileOfflineQueue, MemoryOfflineQueue, type OfflineQueue, PRESENCE_HEARTBEAT_INTERVAL_MS, type PresenceMetrics, type RedactionOptions, type RepositoryInfo, type SafeValue, SignedBatchClient, type SignedBatchClientOptions, type StoredCredential, SystemCredentialStore, type WorkingTreeMetrics, agentSourceSchema, canonicalHookEventSchema, createHookEvent, detectRepository, detectWorkingTreeMetrics, deviceAuthorizationSchema, deviceTokenResponseSchema, eventTypeForHook, hookEventKindSchema, mapClaudeCodeHook, mapCodexHook, mapCursorHook, matchesGitHubRepository, normalizeGitHubRepository, pollDeviceToken, presenceStatePath, redact, requestDeviceAuthorization, runPresenceHeartbeat, safeMetadata, safeValueSchema, sanitizeRemote, startPresenceSession, stopPresenceSession, updatePresenceSession };

package/dist/index.js

@@ -1,14 +1,17 @@
 import {
   JsonFileOfflineQueue,
   MemoryOfflineQueue,
+  PRESENCE_HEARTBEAT_INTERVAL_MS,
   SignedBatchClient,
   SystemCredentialStore,
   agentSourceSchema,
   canonicalHookEventSchema,
   createHookEvent,
   detectRepository,
+  detectWorkingTreeMetrics,
   deviceAuthorizationSchema,
   deviceTokenResponseSchema,
+  eventTypeForHook,
   hookEventKindSchema,
   mapClaudeCodeHook,
   mapCodexHook,
@@ -16,23 +19,31 @@ import {
   matchesGitHubRepository,
   normalizeGitHubRepository,
   pollDeviceToken,
+  presenceStatePath,
   redact,
   requestDeviceAuthorization,
+  runPresenceHeartbeat,
   safeMetadata,
   safeValueSchema,
-  sanitizeRemote
-} from "./chunk-OTDZMJDK.js";
+  sanitizeRemote,
+  startPresenceSession,
+  stopPresenceSession,
+  updatePresenceSession
+} from "./chunk-FLTLCZ6E.js";
 export {
   JsonFileOfflineQueue,
   MemoryOfflineQueue,
+  PRESENCE_HEARTBEAT_INTERVAL_MS,
   SignedBatchClient,
   SystemCredentialStore,
   agentSourceSchema,
   canonicalHookEventSchema,
   createHookEvent,
   detectRepository,
+  detectWorkingTreeMetrics,
   deviceAuthorizationSchema,
   deviceTokenResponseSchema,
+  eventTypeForHook,
   hookEventKindSchema,
   mapClaudeCodeHook,
   mapCodexHook,
@@ -40,9 +51,14 @@ export {
   matchesGitHubRepository,
   normalizeGitHubRepository,
   pollDeviceToken,
+  presenceStatePath,
   redact,
   requestDeviceAuthorization,
+  runPresenceHeartbeat,
   safeMetadata,
   safeValueSchema,
-  sanitizeRemote
+  sanitizeRemote,
+  startPresenceSession,
+  stopPresenceSession,
+  updatePresenceSession
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wibeco/bridge",
-  "version": "0.1.2",
+  "version": "0.2.0",
   "description": "Privacy-first live activity bridge for Cursor, Claude Code, and Codex.",
   "repository": {
     "type": "git",
@@ -14,7 +14,8 @@
   "type": "module",
   "bin": {
     "wibe": "dist/cli.js",
-    "wibe-bridge": "dist/cli.js"
+    "wibe-bridge": "dist/cli.js",
+    "wibe-codex-hook": "dist/codex-hook.js"
   },
   "exports": {
     ".": "./dist/index.js"

package/templates/claude-code/README.md

@@ -4,6 +4,8 @@ These files are inert examples. Review and merge `settings.json.example` into th
 Claude Code settings file. It uses command hooks because the local bridge must normalize and redact
 the payload before network delivery. Do not point an HTTP hook directly at a collector: Claude hook
 payloads can include prompts, tool inputs/results, and other raw content.
+`SessionStart` owns a metadata-only heartbeat every 45 seconds until `SessionEnd`; `Stop` and tool
+hooks remain operational signals and are not published as presence.
 
 Run `wibe setup` to authorize a revocable, project-scoped device token. Interactive credentials are
 stored in the operating-system keychain; hooks do not require repository secrets. The bridge

package/templates/codex/README.md

@@ -12,3 +12,6 @@ keychain. Hooks do not require repository signing secrets.
 The MCP block connects Codex to Wibe's remote `/api/mcp` endpoint. Codex completes OAuth separately
 from the bridge device token. Set `WIBE_APP_URL` to the same Wibe origin used during setup. Codex
 notification coverage can be narrower than Cursor or Claude Code lifecycle hooks.
+Codex appends one JSON notification argument to `wibe-codex-hook`; the bridge extracts only opaque
+`thread-id`/`turn-id` and approved model metadata. Where session hooks are available, they own a
+metadata-only 45-second heartbeat that ends cleanly with `SessionEnd`.

package/templates/codex/config.toml.example

@@ -1,6 +1,6 @@
 # Codex passes one JSON notification argument to this command. The adapter only keeps allow-listed
 # operational metadata and never forwards the full argument.
-notify = ["npx", "-y", "@wibeco/bridge@latest", "emit", "--adapter", "codex", "--event", "notify"]
+notify = ["npx", "-y", "--package", "@wibeco/bridge@latest", "wibe-codex-hook"]
 
 [mcp_servers.wibe]
 url = "${WIBE_APP_URL}/api/mcp"

package/templates/codex/hooks.json.example

@@ -10,6 +10,16 @@
         ]
       }
     ],
+    "SessionEnd": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "npx -y @wibeco/bridge@latest emit --adapter codex --event session-end"
+          }
+        ]
+      }
+    ],
     "UserPromptSubmit": [
       {
         "hooks": [

package/templates/cursor/README.md

@@ -5,6 +5,8 @@ already exist; otherwise merge `hooks.json.example` into `.cursor/hooks.json` yo
 run `npx -y @wibeco/bridge@latest emit`, which normalizes, redacts, queues, and delivers activity.
 The emit command always returns a valid empty JSON object to Cursor and fails open, so telemetry
 delivery can never block an agent tool call.
+Session hooks own a metadata-only heartbeat every 45 seconds and stop it at session end. Routine
+prompt, tool, shell, and MCP lifecycle hooks are never reclassified as presence.
 
 Run `wibe setup` to authorize a revocable, project-scoped device token. Interactive credentials are
 stored in the operating-system keychain; hooks do not require repository secrets. The mapper drops