iteration-cli 0.6.0 → 0.6.1

package/dist/cli.js

@@ -11,7 +11,7 @@ import { activateSource, connectedConfig, detectedSources, expandSource, loadMac
 import { importSourceHistory } from "./history-import.js";
 import { runCollector } from "./service.js";
 import { renderDetailedStatus, renderHome, safeWorkspaceName, } from "./status-view.js";
-import { installTurnSummary, turnSummaryApprovalHint, uninstallTurnSummary, } from "./turn-summary.js";
+import { installTurnSummary, codexTurnSummaryApproval, uninstallTurnSummary, } from "./turn-summary.js";
 import { installLaunchAgent, launchAgentStatus, uninstallLaunchAgent, } from "./launch-agent.js";
 import { assertFreshCollectorDirectory, collectorSource, collectorSourceDirectory, collectorPaths, defaultCollectorDirectory, ensureStartableState, healthSnapshot, historyScanProgress, loadConfig, outboxSize, pendingEventIds, prepareSourceInitialState, saveConfig, saveState, validateCollectorEndpoint, } from "./storage.js";
 const DEFAULT_INGEST_ENDPOINT = "https://useiteration.com/api/traces/ingest";
@@ -135,7 +135,10 @@ function dataDirectory(source, values) {
 async function turnSummaryNotice(config) {
     try {
         await installTurnSummary(config);
-        return ` A one-line friction summary now appears after agent turns in your repositories.${turnSummaryApprovalHint(config)}`;
+        if ((await codexTurnSummaryApproval(config)) === "needs_approval") {
+            return "\nOne more step: in Codex, type /hooks and approve Iteration to see your friction summary after each turn.";
+        }
+        return " A one-line friction summary now appears after agent turns in your repositories.";
     }
     catch (error) {
         return ` The turn summary could not be installed: ${error instanceof Error ? error.message : "unknown error"} Run iteration start ${collectorSource(config)} to retry it.`;
@@ -360,12 +363,13 @@ async function statusSnapshot(source, values) {
     const config = await loadConfig(paths);
     if (collectorSource(config) !== source)
         throw new Error(`This collector directory belongs to ${collectorSource(config)}.`);
-    const [running, size, ids, scan, localHealth] = await Promise.all([
+    const [running, size, ids, scan, localHealth, approval] = await Promise.all([
         launchAgentStatus(source),
         outboxSize(paths),
         pendingEventIds(paths),
         historyScanProgress(collectorSourceDirectory(config), paths, source),
         healthSnapshot(paths),
+        codexTurnSummaryApproval(config),
     ]);
     const pendingEvents = size === 0 ? 0 : ids.size;
     const pendingBytes = ids.size === 0 ? 0 : size;
@@ -378,6 +382,7 @@ async function statusSnapshot(source, values) {
         pendingBytes,
         health: localHealth.health,
         healthAvailable: localHealth.kind === "available",
+        turnSummaryNeedsApproval: approval === "needs_approval",
         tracesUrl: new URL("/app/sessions", config.endpoint).toString(),
         logPath: path.join(os.homedir(), "Library", "Logs", `iteration-${source}-collector.error.log`),
     };

package/dist/status-view.d.ts

@@ -22,6 +22,7 @@ export type CliStatus = Readonly<{
     pendingBytes: number;
     health: CollectorHealth;
     healthAvailable: boolean;
+    turnSummaryNeedsApproval: boolean;
     tracesUrl: string;
     logPath: string;
 }>;

package/dist/status-view.js

@@ -1,4 +1,5 @@
 import { collectorSourceLabel, } from "iteration-trace-contracts";
+const CODEX_APPROVAL_STEP = "Friction summary is off: in Codex, type /hooks and approve Iteration.";
 function sourceName(source) {
     return collectorSourceLabel(source);
 }
@@ -197,6 +198,8 @@ export function renderHome(status, nowMs = Date.now(), source = "codex") {
         status.health.lastUploadAtMs !== null) {
         lines.push(`Last successful upload ${relativeTime(status.health.lastUploadAtMs, nowMs)}.`);
     }
+    if (status.turnSummaryNeedsApproval)
+        lines.push("", CODEX_APPROVAL_STEP);
     lines.push("", `Explore traces  ${status.tracesUrl}`);
     return lines.join("\n");
 }
@@ -239,6 +242,8 @@ export function renderDetailedStatus(status, nowMs = Date.now(), source = "codex
                     : "Local collector error";
         lines.push(`Last issue: ${label} (${relativeTime(failure.atMs, nowMs)})`, `Collector log: ${status.logPath}`);
     }
+    if (status.turnSummaryNeedsApproval)
+        lines.push(CODEX_APPROVAL_STEP);
     if (!status.running)
         lines.push(`Resume: iteration start ${source}`);
     lines.push(`Explore traces: ${status.tracesUrl}`);

package/dist/turn-summary.d.ts

@@ -18,4 +18,5 @@ export declare function refreshTurnSummaries(config: CollectorConfig, refreshedA
     directory: string;
     atMs: number;
 }>>, nowMs: number, fetcher?: typeof fetch, signal?: AbortSignal): Promise<number>;
-export declare function turnSummaryApprovalHint(config: CollectorConfig): string;
+export type TurnSummaryApproval = "approved" | "needs_approval" | "not_installed";
+export declare function codexTurnSummaryApproval(config: CollectorConfig): Promise<TurnSummaryApproval>;

package/dist/turn-summary.js

@@ -1,8 +1,9 @@
+import { createHash } from "node:crypto";
 import { promises as fs } from "node:fs";
 import path from "node:path";
 import { isLaunchDirectory, parseCollectorFrictionSummary, } from "iteration-trace-contracts";
 import * as z from "zod";
-import { collectorSource, ensurePrivateDirectory, } from "./storage.js";
+import { ensurePrivateDirectory } from "./storage.js";
 const REFRESH_INTERVAL_MS = 5 * 60 * 1000;
 const REQUEST_RETENTION_MS = 14 * 24 * 60 * 60 * 1000;
 const MAX_REFRESHES_PER_PASS = 20;
@@ -295,8 +296,67 @@ export async function refreshTurnSummaries(config, refreshedAt, nowMs, fetcher =
     }
     return refreshed;
 }
-export function turnSummaryApprovalHint(config) {
-    return collectorSource(config) === "codex"
-        ? " Approve Iteration's turn summary once with /hooks in Codex."
-        : "";
+function tomlBasicString(value) {
+    return `"${value.replaceAll("\\", "\\\\").replaceAll('"', '\\"')}"`;
+}
+// Codex runs a hook only after the developer trusts it in /hooks, and records
+// that trust as a hash of the normalized hook. Recomputing the same hash tells
+// whether Codex will run this exact entry; any other result keeps the reminder.
+function codexHookHash(command) {
+    const identity = {
+        event_name: "stop",
+        hooks: [
+            {
+                async: false,
+                command,
+                timeout: HOOK_TIMEOUT_SECONDS,
+                type: "command",
+            },
+        ],
+    };
+    return `sha256:${createHash("sha256").update(JSON.stringify(identity)).digest("hex")}`;
+}
+function codexTrustedHash(configToml, key) {
+    const lines = configToml.split(/\r?\n/);
+    const header = `[hooks.state.${tomlBasicString(key)}]`;
+    const start = lines.findIndex((line) => line.trim() === header);
+    if (start < 0)
+        return null;
+    let trustedHash = null;
+    for (const line of lines.slice(start + 1)) {
+        const trimmed = line.trim();
+        if (trimmed.startsWith("["))
+            break;
+        if (/^enabled\s*=\s*false\b/.test(trimmed))
+            return null;
+        const match = /^trusted_hash\s*=\s*"(sha256:[0-9a-f]{64})"/.exec(trimmed);
+        if (match?.[1] !== undefined)
+            trustedHash = match[1];
+    }
+    return trustedHash;
+}
+export async function codexTurnSummaryApproval(config) {
+    if ("claudeHome" in config)
+        return "approved";
+    const filename = agentHookFile(config);
+    const { file } = await readHookFile(filename);
+    const command = hookCommand(turnSummaryPaths(config.dataDirectory));
+    const stop = file.hooks?.Stop ?? [];
+    for (const [groupIndex, group] of stop.entries()) {
+        const handlerIndex = group.hooks?.findIndex((hook) => hook.command === command) ?? -1;
+        if (handlerIndex < 0)
+            continue;
+        let configToml;
+        try {
+            configToml = await fs.readFile(path.join(config.codexHome, "config.toml"), "utf8");
+        }
+        catch (error) {
+            if (error instanceof Error && "code" in error && error.code === "ENOENT")
+                return "needs_approval";
+            throw new Error("Could not read the Codex config.", { cause: error });
+        }
+        const trusted = codexTrustedHash(configToml, `${filename}:stop:${groupIndex}:${handlerIndex}`);
+        return trusted === codexHookHash(command) ? "approved" : "needs_approval";
+    }
+    return "not_installed";
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "iteration-cli",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "type": "module",
   "repository": {
     "type": "git",