weave-codex 0.1.0

package/LICENSES/MIT.txt

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright 2026 CoreWeave, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,144 @@
+# weave-codex
+
+W&B Weave observability for the **OpenAI Codex CLI**. It reconstructs `gen_ai`
+OpenTelemetry spans for every Codex turn — model calls, token usage, tool calls,
+reasoning — and ships them to [Weave](https://wandb.ai/site/weave), entirely off
+Codex's critical path. The agent that's modeled after this is W&B's
+[`weave-claude-code`](https://github.com/wandb/weave-claude-code); this is the
+Codex equivalent.
+
+## How it works
+
+Codex emits OTEL today, but not a clean `gen_ai` span tree. Rather than parse
+that, `weave-codex` reconstructs spans from Codex's own **rollout session files**
+(`~/.codex/sessions/**/rollout-*.jsonl`), which contain everything: per-turn
+model, the full message/tool stream, and per-model-call token usage.
+
+```
+Codex turn ends
+  └─ Stop hook (fire-and-forget shell shim, ~ms, returns immediately)
+       └─ detached worker (off Codex's critical path)
+            ├─ read new rollout lines since a per-session cursor
+            ├─ reconstruct the turn → spans:
+            │     invoke_agent codex          (the turn)
+            │     ├─ chat <model>             (one per model call: usage, output)
+            │     └─ execute_tool <name>      (one per tool: args, result)
+            └─ export via OTLP → trace.wandb.ai/agents/otel/v1/traces
+```
+
+- **Non-blocking by construction.** The Stop hook only spawns a detached process
+  and exits `0` (printing nothing), so Codex never waits on the network.
+- **One trace per turn.** Turns are stitched into a conversation server-side via
+  `gen_ai.conversation.id` (the Codex session id) on every span.
+- **Accurate timelines.** Span start/end times are backdated from the rollout
+  timestamps, so durations reflect what actually happened.
+
+## Requirements
+
+- Node.js ≥ 20
+- OpenAI Codex CLI with the hooks system (recent versions)
+- A W&B account (`WANDB_API_KEY`) and a Weave project
+
+## Quick start
+
+```bash
+npm install -g weave-codex
+
+# Credentials (precedence: env > settings.json > netrc)
+wandb login                       # or: export WANDB_API_KEY=...
+export WEAVE_PROJECT="entity/project"
+
+weave-codex install               # merges a Stop hook into ~/.codex/hooks.json
+```
+
+**One-time trust step:** Codex marks newly-added hooks as _untrusted_ and will
+not run them until you approve. On your next `codex` launch, approve the
+`weave-codex` hook when prompted (or set `bypass_hook_trust = true` in
+`~/.codex/config.toml`). Run `weave-codex status` to confirm everything resolves.
+
+That's it — run Codex normally. Each completed turn appears in Weave within ~a
+second.
+
+## Configuration
+
+| Setting         | Env var                       | `settings.json` key | Default                        |
+| --------------- | ----------------------------- | ------------------- | ------------------------------ |
+| W&B API key     | `WANDB_API_KEY`               | `wandb_api_key`     | from `wandb login` (netrc)     |
+| Weave project   | `WEAVE_PROJECT`               | `weave_project`     | — (required, `entity/project`) |
+| Base URL        | `WANDB_BASE_URL`              | `wandb_base_url`    | `https://trace.wandb.ai`       |
+| Capture content | `WEAVE_CODEX_CAPTURE_CONTENT` | `capture_content`   | `true`                         |
+| Debug logging   | `WEAVE_CODEX_DEBUG`           | `debug`             | off (errors always log)        |
+
+State lives in `~/.weave-codex/` (settings, the hook shim, per-session cursors,
+and `logs/collector.log`). Set `WANDB_BASE_URL` for a dedicated/self-hosted W&B.
+
+## Data disclosure
+
+By default `weave-codex` captures span **content**: your prompts, the model's
+responses and reasoning, tool-call arguments, and tool results (which include
+shell commands, command output, and file contents). This data is sent to your
+W&B/Weave instance. PII scrubbing and redaction are **not** implemented.
+
+To send **structure, token usage, model, and timing only** — no prompts, code,
+or output — disable content capture:
+
+```bash
+export WEAVE_CODEX_CAPTURE_CONTENT=0
+```
+
+The structural/metric spans are always emitted regardless of this setting.
+
+## What's captured
+
+- `invoke_agent codex` — turn root; agent name/version, conversation id, model,
+  summed token usage, and (if enabled) the user prompt + final answer.
+- `chat <model>` — one per model call; `gen_ai.usage.*` (input/output/cached/
+  reasoning) tokens, finish reason, `server.address`, and the assistant output
+  (text, reasoning, tool-call parts).
+- `execute_tool <name>` — one per tool (shell, `apply_patch`, web search, MCP,
+  functions); `gen_ai.tool.*` id/arguments/result; MCP calls also carry
+  `mcp.server.name`.
+
+All attributes follow the OpenTelemetry GenAI semantic conventions that Weave's
+Agents ingestion reads, so traces also render in generic OTEL backends.
+
+## Scope & limitations (v0.1)
+
+- **Modes:** interactive `codex` (TUI) and `codex exec`. The `codex mcp` /
+  `app-server` modes are not covered (they fire no hooks).
+- **Subagents:** a spawned subagent shows up as its `spawn_agent` tool call;
+  nesting the subagent's own model/tool calls is not yet implemented (Codex
+  writes those to a separate rollout file).
+- **Aborted turns:** the `Stop` hook does not fire on aborted/errored turns, so
+  those are not captured.
+- **Hook-locked orgs:** if `allow_managed_hooks_only` is set, use a `notify`
+  program as the trigger instead (see below).
+- **Backdating shim:** the span emitter currently uses a thin OpenTelemetry
+  pipeline (`src/spans/tracer.ts`) because the Weave TS SDK's GenAI helpers can't
+  yet set historical timestamps. Once the SDK gains `startedAt`/`endedAt`, the
+  emitter moves to `weave.startTurn`/`startLLM`/`startTool`.
+
+### `notify` fallback
+
+In environments where you cannot add hooks, configure Codex's fire-and-forget
+`notify` program to invoke the collector instead (turn-complete only):
+
+```toml
+# ~/.codex/config.toml
+notify = ["sh", "/Users/you/.weave-codex/stop-hook.sh"]
+```
+
+## Uninstall
+
+```bash
+weave-codex uninstall   # removes only our entries from ~/.codex/hooks.json
+```
+
+## Development
+
+```bash
+npm install
+npm run build
+npm test
+npm run lint
+```

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/cli.js

@@ -0,0 +1,149 @@
+#!/usr/bin/env node
+// SPDX-FileCopyrightText: 2026 CoreWeave, Inc.
+// SPDX-License-Identifier: MIT
+// SPDX-PackageName: weave-codex
+/**
+ * `weave-codex` CLI: install | uninstall | status.
+ *
+ * install wires a Stop-hook into ~/.codex/hooks.json that triggers the detached
+ * collector. Credentials come from env / `wandb login` (netrc) / settings.json;
+ * we never prompt for the secret (only the non-secret project).
+ */
+import { createInterface } from 'node:readline/promises';
+import { execPath, stdin, stdout } from 'node:process';
+import { fileURLToPath } from 'node:url';
+import { configError, readSettings, resolveConfig, writeSettings, } from './config.js';
+import { CODEX_HOOKS_FILE, ENV, LOG_FILE, SETTINGS_FILE, VERSION, } from './constants.js';
+import { hooksInstalled, mergeHooks, removeHooks, writeShim } from './install.js';
+// Absolute path to the compiled worker next to cli.js in dist/; baked into the
+// hook shim at install so the Stop hook can run it regardless of cwd.
+const COLLECTOR_JS = fileURLToPath(new URL('./collector.js', import.meta.url));
+async function main() {
+    const command = process.argv[2] ?? 'help';
+    switch (command) {
+        case 'install':
+            await install();
+            break;
+        case 'uninstall':
+            await uninstall();
+            break;
+        case 'status':
+            await status();
+            break;
+        case 'help':
+        case '--help':
+        case '-h':
+            printHelp();
+            break;
+        default:
+            console.error(`unknown command: ${command}\n`);
+            printHelp();
+            process.exitCode = 1;
+    }
+}
+async function install() {
+    const settings = await readSettings();
+    const project = await resolveProjectInput(settings);
+    if (project)
+        settings.weave_project = project;
+    if (settings.capture_content === undefined)
+        settings.capture_content = true;
+    if (settings.debug === undefined)
+        settings.debug = false;
+    settings.version = VERSION;
+    settings.installed_at = new Date().toISOString();
+    await writeSettings(settings);
+    const shim = await writeShim(execPath, COLLECTOR_JS);
+    const merged = await mergeHooksOrReport();
+    if (!merged) {
+        process.exitCode = 1;
+        return;
+    }
+    const config = await resolveConfig();
+    const err = configError(config);
+    console.log(`weave-codex ${VERSION} installed`);
+    console.log(`  shim:     ${shim}`);
+    console.log(`  hooks:    ${CODEX_HOOKS_FILE}`);
+    console.log(`            added: ${formatList(merged.added)} · already present: ${formatList(merged.alreadyPresent)}`);
+    console.log(`  settings: ${SETTINGS_FILE}`);
+    console.log(`  project:  ${config.projectId || '(unset)'}`);
+    console.log(`  api key:  ${config.apiKey ? 'resolved' : '(unset)'}`);
+    if (err) {
+        console.log(`\n  ⚠ ${err}`);
+        console.log(`    Set ${ENV.WANDB_API_KEY} / run \`wandb login\`, and set ${ENV.WEAVE_PROJECT}.`);
+    }
+    console.log(`\n  ⚠ Codex marks new hooks "untrusted". On the next \`codex\` launch, approve the` +
+        `\n    weave-codex hook (or set \`bypass_hook_trust = true\` in ~/.codex/config.toml).`);
+}
+async function uninstall() {
+    const removed = await removeHooks();
+    console.log(`weave-codex uninstalled`);
+    console.log(`  removed hooks: ${formatList(removed)}`);
+    console.log(`  settings left intact at ${SETTINGS_FILE} (delete manually to fully remove)`);
+}
+async function status() {
+    const config = await resolveConfig();
+    const err = configError(config);
+    const installed = await hooksInstalled();
+    console.log(`weave-codex ${VERSION}`);
+    console.log(`  hook installed:  ${installed ? 'yes' : 'no'}  (${CODEX_HOOKS_FILE})`);
+    console.log(`  project:         ${config.projectId || '(unset)'}`);
+    console.log(`  api key:         ${config.apiKey ? 'resolved' : '(unset)'}`);
+    console.log(`  base url:        ${config.baseUrl}`);
+    console.log(`  capture content: ${config.captureContent}`);
+    console.log(`  debug:           ${config.debug}`);
+    console.log(`  log file:        ${LOG_FILE}`);
+    console.log(`  status:          ${err ? `not ready — ${err}` : 'ready'}`);
+}
+function printHelp() {
+    console.log(`weave-codex ${VERSION} — W&B Weave observability for OpenAI Codex CLI
+
+Usage:
+  weave-codex install      Wire the Stop hook into ~/.codex/hooks.json
+  weave-codex uninstall    Remove the weave-codex hook entries
+  weave-codex status       Show resolved config and hook state
+
+Config (precedence: env > settings.json > netrc):
+  ${ENV.WANDB_API_KEY}        W&B API key (or run \`wandb login\`)
+  ${ENV.WEAVE_PROJECT}        Weave project as "entity/project"
+  ${ENV.WANDB_BASE_URL}       Override for dedicated/self-hosted W&B
+  ${ENV.CAPTURE_CONTENT}  Set to 0 to drop prompts/code/output from spans`);
+}
+function formatList(items) {
+    return items.length > 0 ? items.join(', ') : 'none';
+}
+async function prompt(question) {
+    const readline = createInterface({ input: stdin, output: stdout });
+    try {
+        return await readline.question(question);
+    }
+    finally {
+        readline.close();
+    }
+}
+async function resolveProjectInput(settings) {
+    const configured = process.env[ENV.WEAVE_PROJECT] ?? settings.weave_project;
+    if (configured)
+        return configured;
+    // Prompt only for the non-secret project, and only when attended.
+    if (stdin.isTTY)
+        return (await prompt('Weave project (entity/project): ')).trim();
+    return undefined;
+}
+// Merge our Stop hook, or report the failure (e.g. a corrupt hooks.json) and
+// return null so the caller aborts without overwriting anything.
+async function mergeHooksOrReport() {
+    try {
+        return await mergeHooks();
+    }
+    catch (err) {
+        console.error(`\n  ⚠ could not update ${CODEX_HOOKS_FILE}; nothing was changed:`);
+        console.error(`    ${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+}
+void main().catch(err => {
+    console.error(err instanceof Error ? err.message : String(err));
+    process.exitCode = 1;
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,+CAA+C;AAC/C,+BAA+B;AAC/B,gCAAgC;AAEhC;;;;;;GAMG;AACH,OAAO,EAAC,eAAe,EAAC,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAC,MAAM,cAAc,CAAC;AACrD,OAAO,EAAC,aAAa,EAAC,MAAM,UAAU,CAAC;AAEvC,OAAO,EACL,WAAW,EACX,YAAY,EACZ,aAAa,EACb,aAAa,GAEd,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,gBAAgB,EAChB,GAAG,EACH,QAAQ,EACR,aAAa,EACb,OAAO,GACR,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAC,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAC,MAAM,cAAc,CAAC;AAEhF,+EAA+E;AAC/E,sEAAsE;AACtE,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE/E,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAC1C,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,SAAS;YACZ,MAAM,OAAO,EAAE,CAAC;YAChB,MAAM;QACR,KAAK,WAAW;YACd,MAAM,SAAS,EAAE,CAAC;YAClB,MAAM;QACR,KAAK,QAAQ;YACX,MAAM,MAAM,EAAE,CAAC;YACf,MAAM;QACR,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI;YACP,SAAS,EAAE,CAAC;YACZ,MAAM;QACR;YACE,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,IAAI,CAAC,CAAC;YAC/C,SAAS,EAAE,CAAC;YACZ,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO;IACpB,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IAEtC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,OAAO;QAAE,QAAQ,CAAC,aAAa,GAAG,OAAO,CAAC;IAC9C,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS;QAAE,QAAQ,CAAC,eAAe,GAAG,IAAI,CAAC;IAC5E,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;QAAE,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;IACzD,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,QAAQ,CAAC,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IAE9B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAErD,MAAM,MAAM,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAEhC,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,YAAY,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,eAAe,gBAAgB,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CACT,sBAAsB,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CACzG,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,eAAe,aAAa,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACrE,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CACT,WAAW,GAAG,CAAC,aAAa,mCAAmC,GAAG,CAAC,aAAa,GAAG,CACpF,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CACT,oFAAoF;QAClF,uFAAuF,CAC1F,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,oBAAoB,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CACT,6BAA6B,aAAa,oCAAoC,CAC/E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM;IACnB,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,MAAM,cAAc,EAAE,CAAC;IAEzC,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,EAAE,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CACT,sBAAsB,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,gBAAgB,GAAG,CACxE,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,CAAC,CAAC,CAAC,eAAe,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO;;;;;;;;IAQhC,GAAG,CAAC,aAAa;IACjB,GAAG,CAAC,aAAa;IACjB,GAAG,CAAC,cAAc;IAClB,GAAG,CAAC,eAAe,mDAAmD,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,UAAU,CAAC,KAAe;IACjC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,QAAgB;IACpC,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAC,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,QAAkB;IAElB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,aAAa,CAAC;IAC5E,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,kEAAkE;IAClE,IAAI,KAAK,CAAC,KAAK;QACb,OAAO,CAAC,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,6EAA6E;AAC7E,iEAAiE;AACjE,KAAK,UAAU,kBAAkB;IAC/B,IAAI,CAAC;QACH,OAAO,MAAM,UAAU,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,0BAA0B,gBAAgB,wBAAwB,CACnE,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;IACtB,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/collector.d.ts

@@ -0,0 +1,19 @@
+#!/usr/bin/env node
+import { type ResolvedConfig } from './config.js';
+import { type TracerHandle } from './spans/tracer.js';
+/** The Codex Stop-hook payload (handed to the worker as JSON); only the fields we read. */
+interface StopPayload {
+    session_id: string;
+    turn_id?: string;
+    transcript_path?: string | null;
+    cwd?: string;
+    model?: string;
+    last_assistant_message?: string | null;
+}
+/**
+ * Reconstruct + emit the just-finished turn(s). `makeTracer` is injected so a
+ * test can drive the whole pipeline with an in-memory exporter (and assert the
+ * cursor advances only on a successful export).
+ */
+export declare function collect(transcriptPath: string, sessionId: string, payload: StopPayload, config: ResolvedConfig, makeTracer?: (config: ResolvedConfig) => TracerHandle): Promise<void>;
+export {};

package/dist/collector.js

@@ -0,0 +1,162 @@
+#!/usr/bin/env node
+// SPDX-FileCopyrightText: 2026 CoreWeave, Inc.
+// SPDX-License-Identifier: MIT
+// SPDX-PackageName: weave-codex
+/**
+ * The detached worker. Invoked by the Stop-hook shim as:
+ *   node dist/collector.js <payload-json-file>
+ *
+ * Reads the just-finished turn from the rollout, reconstructs spans, ships them
+ * to Weave, then exits. Fully off Codex's critical path; it never throws into
+ * the calling process and never blocks Codex (the shim has already returned).
+ */
+import { readFile, unlink } from 'node:fs/promises';
+import { setTimeout as sleep } from 'node:timers/promises';
+import { configError, resolveConfig } from './config.js';
+import { acquireLock } from './lock.js';
+import { log, setVerbose } from './log.js';
+import { readNewLines, readOffset, writeOffset } from './rollout/cursor.js';
+import { parseLineMaybe, reconstructTurns, } from './rollout/parser.js';
+import { emitTurn } from './spans/emit.js';
+import { buildTracer } from './spans/tracer.js';
+// Rollout writer flushes per line, but the OS write can lag the Stop hook.
+const ROLLOUT_READ_RETRY_ATTEMPTS = 5;
+const ROLLOUT_READ_RETRY_DELAY_MS = 200;
+async function main() {
+    const payload = await readPayload();
+    const sessionId = payload.session_id;
+    const config = await resolveConfig();
+    setVerbose(config.debug);
+    const transcriptPath = payload.transcript_path;
+    if (!transcriptPath) {
+        log('warn', 'stop payload missing transcript_path; skipping', { sessionId });
+        return;
+    }
+    const configErr = configError(config);
+    if (configErr) {
+        log('error', `not configured: ${configErr}`);
+        return;
+    }
+    // Serialize per session so two workers never double-emit or rewind the cursor.
+    const release = await acquireLock(sessionId);
+    if (!release) {
+        log('info', 'another worker holds this session; skipping (a later stop catches up)', {
+            sessionId,
+        });
+        return;
+    }
+    try {
+        await collect(transcriptPath, sessionId, payload, config);
+    }
+    finally {
+        await release();
+    }
+}
+/**
+ * Reconstruct + emit the just-finished turn(s). `makeTracer` is injected so a
+ * test can drive the whole pipeline with an in-memory exporter (and assert the
+ * cursor advances only on a successful export).
+ */
+export async function collect(transcriptPath, sessionId, payload, config, makeTracer = buildTracer) {
+    const fromOffset = await readOffset(sessionId);
+    let rawLines = [];
+    let result = {
+        turns: [],
+        consumedLines: 0,
+        abandonedTurns: 0,
+    };
+    // The Stop hook can fire just before Codex's background writer flushes the
+    // turn's final lines to the rollout, so the turn may be missing or incomplete
+    // on the first read. Re-read a few times until the turn is present and its
+    // final text matches the Stop payload's last_assistant_message. This runs in
+    // the detached worker, off Codex's critical path, so the wait is unnoticeable.
+    for (let attempt = 0; attempt < ROLLOUT_READ_RETRY_ATTEMPTS; attempt++) {
+        const read = await readNewLines(transcriptPath, fromOffset);
+        rawLines = read.lines;
+        result = reconstructTurns(rawLines.map(parseLineMaybe), {
+            fallbackSessionId: sessionId,
+            fallbackModel: payload.model,
+        });
+        if (targetReady(result.turns, payload))
+            break;
+        if (rawLines.length === 0)
+            break; // nothing appended yet; no in-flight turn to wait for
+        await sleep(ROLLOUT_READ_RETRY_DELAY_MS);
+    }
+    if (result.abandonedTurns > 0) {
+        log('warn', `dropped ${result.abandonedTurns} abandoned turn(s) with no task_complete`, {
+            sessionId,
+        });
+    }
+    if (result.turns.length === 0) {
+        log('warn', 'no complete turn yet; will catch it on the next stop', {
+            sessionId,
+        });
+        return;
+    }
+    const { tracer, shutdown } = makeTracer(config);
+    let exported = false;
+    try {
+        for (const turn of result.turns) {
+            emitTurn(tracer, turn, config.captureContent);
+        }
+        // shutdown() flushes then tears down; it rejects on a transport failure, so
+        // reaching the next statement means the endpoint accepted the spans.
+        await shutdown();
+        exported = true;
+    }
+    catch (err) {
+        log('error', `emit/export failed: ${errMessage(err)}`);
+        await shutdown().catch(() => { }); // ensure teardown even if emitTurn threw first
+    }
+    if (!exported)
+        return; // leave the cursor untouched so the next stop retries
+    const committed = fromOffset + byteLengthOfLines(rawLines, result.consumedLines);
+    await writeOffset(sessionId, committed);
+    log('info', `emitted ${result.turns.length} turn(s)`, {
+        sessionId,
+        chats: result.turns.reduce((n, t) => n + t.chats.length, 0),
+        tools: result.turns.reduce((n, t) => n + t.tools.length, 0),
+    });
+}
+/** True once the just-finished turn is present and looks fully flushed. */
+function targetReady(turns, payload) {
+    if (turns.length === 0)
+        return false;
+    // With a turn_id, wait for that exact turn; without one, wait for the latest.
+    const target = payload.turn_id
+        ? turns.find(t => t.turnId === payload.turn_id)
+        : turns[turns.length - 1];
+    if (!target)
+        return false;
+    if (!payload.last_assistant_message)
+        return true;
+    const got = (target.finalAssistantMessage ?? '').trimEnd();
+    return (got.length > 0 && got.endsWith(payload.last_assistant_message.trimEnd()));
+}
+function byteLengthOfLines(lines, count) {
+    let bytes = 0;
+    for (let i = 0; i < count && i < lines.length; i++) {
+        bytes += Buffer.byteLength(lines[i], 'utf8') + 1;
+    }
+    return bytes;
+}
+async function readPayload() {
+    const file = process.argv[2];
+    if (!file)
+        return JSON.parse(await readStdin());
+    const raw = await readFile(file, 'utf8');
+    await unlink(file).catch(() => { }); // the shim's temp file; clean up best-effort
+    return JSON.parse(raw);
+}
+async function readStdin() {
+    const chunks = [];
+    for await (const chunk of process.stdin)
+        chunks.push(chunk);
+    return Buffer.concat(chunks).toString('utf8');
+}
+function errMessage(err) {
+    return err instanceof Error ? (err.stack ?? err.message) : String(err);
+}
+void main().catch(err => log('error', `unhandled: ${errMessage(err)}`));
+//# sourceMappingURL=collector.js.map

package/dist/collector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collector.js","sourceRoot":"","sources":["../src/collector.ts"],"names":[],"mappings":";AAEA,+CAA+C;AAC/C,+BAA+B;AAC/B,gCAAgC;AAEhC;;;;;;;GAOG;AACH,OAAO,EAAC,QAAQ,EAAE,MAAM,EAAC,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAC,UAAU,IAAI,KAAK,EAAC,MAAM,sBAAsB,CAAC;AAEzD,OAAO,EAAC,WAAW,EAAE,aAAa,EAAsB,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAC,WAAW,EAAC,MAAM,WAAW,CAAC;AACtC,OAAO,EAAC,GAAG,EAAE,UAAU,EAAC,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAC,YAAY,EAAE,UAAU,EAAE,WAAW,EAAC,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EACL,cAAc,EACd,gBAAgB,GAEjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAC,QAAQ,EAAC,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAC,WAAW,EAAoB,MAAM,mBAAmB,CAAC;AAEjE,2EAA2E;AAC3E,MAAM,2BAA2B,GAAG,CAAC,CAAC;AACtC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAYxC,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;IAErC,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;IACrC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEzB,MAAM,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IAC/C,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,GAAG,CAAC,MAAM,EAAE,gDAAgD,EAAE,EAAC,SAAS,EAAC,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,SAAS,EAAE,CAAC;QACd,GAAG,CAAC,OAAO,EAAE,mBAAmB,SAAS,EAAE,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,+EAA+E;IAC/E,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CACD,MAAM,EACN,uEAAuE,EACvE;YACE,SAAS;SACV,CACF,CAAC;QACF,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,cAAsB,EACtB,SAAiB,EACjB,OAAoB,EACpB,MAAsB,EACtB,aAAuD,WAAW;IAElE,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,QAAQ,GAAa,EAAE,CAAC;IAC5B,IAAI,MAAM,GAAsB;QAC9B,KAAK,EAAE,EAAE;QACT,aAAa,EAAE,CAAC;QAChB,cAAc,EAAE,CAAC;KAClB,CAAC;IAEF,2EAA2E;IAC3E,8EAA8E;IAC9E,2EAA2E;IAC3E,6EAA6E;IAC7E,+EAA+E;IAC/E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,2BAA2B,EAAE,OAAO,EAAE,EAAE,CAAC;QACvE,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAC5D,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC;QACtB,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE;YACtD,iBAAiB,EAAE,SAAS;YAC5B,aAAa,EAAE,OAAO,CAAC,KAAK;SAC7B,CAAC,CAAC;QACH,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC;YAAE,MAAM;QAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,CAAC,sDAAsD;QACxF,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,MAAM,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;QAC9B,GAAG,CACD,MAAM,EACN,WAAW,MAAM,CAAC,cAAc,0CAA0C,EAC1E;YACE,SAAS;SACV,CACF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,GAAG,CAAC,MAAM,EAAE,sDAAsD,EAAE;YAClE,SAAS;SACV,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,EAAC,MAAM,EAAE,QAAQ,EAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;QAChD,CAAC;QACD,4EAA4E;QAC5E,qEAAqE;QACrE,MAAM,QAAQ,EAAE,CAAC;QACjB,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,OAAO,EAAE,uBAAuB,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,+CAA+C;IACnF,CAAC;IAED,IAAI,CAAC,QAAQ;QAAE,OAAO,CAAC,sDAAsD;IAE7E,MAAM,SAAS,GACb,UAAU,GAAG,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IACjE,MAAM,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACxC,GAAG,CAAC,MAAM,EAAE,WAAW,MAAM,CAAC,KAAK,CAAC,MAAM,UAAU,EAAE;QACpD,SAAS;QACT,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3D,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;KAC5D,CAAC,CAAC;AACL,CAAC;AAED,2EAA2E;AAC3E,SAAS,WAAW,CAClB,KAA0B,EAC1B,OAAoB;IAEpB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,8EAA8E;IAC9E,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO;QAC5B,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC;QAC/C,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,CAAC,OAAO,CAAC,sBAAsB;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC3D,OAAO,CACL,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAe,EAAE,KAAa;IACvD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnD,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,WAAW;IACxB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,SAAS,EAAE,CAAgB,CAAC;IAC/D,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,6CAA6C;IACjF,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IACtE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACzE,CAAC;AAED,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,23 @@
+export interface Settings {
+    wandb_api_key?: string;
+    weave_project?: string;
+    wandb_base_url?: string;
+    capture_content?: boolean;
+    debug?: boolean;
+    version?: string;
+    installed_at?: string;
+}
+export interface ResolvedConfig {
+    apiKey: string;
+    /** `entity/project` — the value of the project_id ingest header. */
+    projectId: string;
+    entity: string;
+    project: string;
+    baseUrl: string;
+    captureContent: boolean;
+    debug: boolean;
+}
+export declare function readSettings(): Promise<Settings>;
+export declare function writeSettings(settings: Settings): Promise<void>;
+export declare function resolveConfig(preloaded?: Settings): Promise<ResolvedConfig>;
+export declare function configError(config: ResolvedConfig): string | undefined;

package/dist/config.js

@@ -0,0 +1,99 @@
+// SPDX-FileCopyrightText: 2026 CoreWeave, Inc.
+// SPDX-License-Identifier: MIT
+// SPDX-PackageName: weave-codex
+/**
+ * Resolve runtime config for the worker and CLI.
+ *
+ * Precedence: environment > ~/.weave-codex/settings.json > ~/.netrc. Credentials
+ * are resolved locally (no network) so the worker stays fast and self-contained,
+ * off Codex's critical path.
+ */
+import { promises as fs } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { DEFAULT_TRACE_BASE_URL, ENV, SETTINGS_FILE } from './constants.js';
+/** W&B stores the API key under this netrc machine even for trace.wandb.ai. */
+const NETRC_MACHINE = 'api.wandb.ai';
+/** Default when neither env nor settings specify it. */
+const DEFAULT_CAPTURE_CONTENT = true;
+export async function readSettings() {
+    try {
+        return JSON.parse(await fs.readFile(SETTINGS_FILE, 'utf8'));
+    }
+    catch {
+        return {};
+    }
+}
+export async function writeSettings(settings) {
+    await fs.mkdir(join(SETTINGS_FILE, '..'), { recursive: true });
+    await fs.writeFile(SETTINGS_FILE, JSON.stringify(settings, null, 2), {
+        mode: 0o600,
+    });
+}
+export async function resolveConfig(preloaded) {
+    const settings = preloaded ?? (await readSettings());
+    const baseUrl = (process.env[ENV.WANDB_BASE_URL] ??
+        settings.wandb_base_url ??
+        DEFAULT_TRACE_BASE_URL).replace(/\/+$/, '');
+    const apiKey = process.env[ENV.WANDB_API_KEY] ??
+        settings.wandb_api_key ??
+        (await apiKeyFromNetrc()) ??
+        '';
+    const projectId = process.env[ENV.WEAVE_PROJECT] ?? settings.weave_project ?? '';
+    const { entity, project } = splitProject(projectId);
+    const captureContent = parseBool(process.env[ENV.CAPTURE_CONTENT]) ??
+        settings.capture_content ??
+        DEFAULT_CAPTURE_CONTENT;
+    const debug = parseBool(process.env[ENV.DEBUG]) ?? settings.debug ?? false;
+    return { apiKey, projectId, entity, project, baseUrl, captureContent, debug };
+}
+export function configError(config) {
+    if (!config.apiKey)
+        return `missing API key (set ${ENV.WANDB_API_KEY} or run \`weave-codex install\`)`;
+    if (!config.projectId)
+        return `missing project (set ${ENV.WEAVE_PROJECT} as "entity/project")`;
+    if (!config.entity ||
+        !config.project ||
+        config.projectId.indexOf('/') !== config.projectId.lastIndexOf('/')) {
+        return `project "${config.projectId}" must be in "entity/project" form (exactly one "/")`;
+    }
+    return undefined;
+}
+function splitProject(value) {
+    const slash = value.indexOf('/');
+    if (slash === -1)
+        return { entity: '', project: value };
+    return { entity: value.slice(0, slash), project: value.slice(slash + 1) };
+}
+function parseBool(value) {
+    if (value === undefined)
+        return undefined;
+    const normalized = value.trim().toLowerCase();
+    if (normalized === '0' || normalized === 'false' || normalized === 'no')
+        return false;
+    if (normalized === '1' || normalized === 'true' || normalized === 'yes')
+        return true;
+    return undefined;
+}
+async function apiKeyFromNetrc() {
+    try {
+        const raw = await fs.readFile(join(homedir(), '.netrc'), 'utf8');
+        // Strip comments, then tokenize on whitespace (the common netrc form).
+        const tokens = raw.replace(/#.*$/gm, '').split(/\s+/).filter(Boolean);
+        for (let i = 0; i < tokens.length; i++) {
+            if (tokens[i] === 'machine' && tokens[i + 1] === NETRC_MACHINE) {
+                for (let j = i + 2; j < tokens.length; j++) {
+                    if (tokens[j] === 'machine' || tokens[j] === 'default')
+                        break; // entry ended
+                    if (tokens[j] === 'password' && j + 1 < tokens.length)
+                        return tokens[j + 1];
+                }
+            }
+        }
+    }
+    catch {
+        // no netrc / unreadable → fall through
+    }
+    return undefined;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,+BAA+B;AAC/B,gCAAgC;AAEhC;;;;;;GAMG;AACH,OAAO,EAAC,QAAQ,IAAI,EAAE,EAAC,MAAM,SAAS,CAAC;AACvC,OAAO,EAAC,OAAO,EAAC,MAAM,SAAS,CAAC;AAChC,OAAO,EAAC,IAAI,EAAC,MAAM,WAAW,CAAC;AAE/B,OAAO,EAAC,sBAAsB,EAAE,GAAG,EAAE,aAAa,EAAC,MAAM,gBAAgB,CAAC;AAE1E,+EAA+E;AAC/E,MAAM,aAAa,GAAG,cAAc,CAAC;AACrC,wDAAwD;AACxD,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAuBrC,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAa,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,QAAkB;IACpD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAC,SAAS,EAAE,IAAI,EAAC,CAAC,CAAC;IAC7D,MAAM,EAAE,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QACnE,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAoB;IAEpB,MAAM,QAAQ,GAAG,SAAS,IAAI,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC;IAErD,MAAM,OAAO,GAAG,CACd,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC;QAC/B,QAAQ,CAAC,cAAc;QACvB,sBAAsB,CACvB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEtB,MAAM,MAAM,GACV,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;QAC9B,QAAQ,CAAC,aAAa;QACtB,CAAC,MAAM,eAAe,EAAE,CAAC;QACzB,EAAE,CAAC;IAEL,MAAM,SAAS,GACb,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,aAAa,IAAI,EAAE,CAAC;IACjE,MAAM,EAAC,MAAM,EAAE,OAAO,EAAC,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IAElD,MAAM,cAAc,GAClB,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC3C,QAAQ,CAAC,eAAe;QACxB,uBAAuB,CAAC;IAC1B,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,QAAQ,CAAC,KAAK,IAAI,KAAK,CAAC;IAE3E,OAAO,EAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAsB;IAChD,IAAI,CAAC,MAAM,CAAC,MAAM;QAChB,OAAO,wBAAwB,GAAG,CAAC,aAAa,kCAAkC,CAAC;IACrF,IAAI,CAAC,MAAM,CAAC,SAAS;QACnB,OAAO,wBAAwB,GAAG,CAAC,aAAa,uBAAuB,CAAC;IAC1E,IACE,CAAC,MAAM,CAAC,MAAM;QACd,CAAC,MAAM,CAAC,OAAO;QACf,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,EACnE,CAAC;QACD,OAAO,YAAY,MAAM,CAAC,SAAS,sDAAsD,CAAC;IAC5F,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,EAAC,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAC,CAAC;IACtD,OAAO,EAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAC,CAAC;AAC1E,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB;IAC1C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,IAAI;QACrE,OAAO,KAAK,CAAC;IACf,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,KAAK;QACrE,OAAO,IAAI,CAAC;IACd,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,eAAe;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;QACjE,uEAAuE;QACvE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;gBAC/D,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC3C,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS;wBAAE,MAAM,CAAC,cAAc;oBAC7E,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM;wBACnD,OAAO,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;IACzC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}