anosys-codex 0.1.0__tar.gz

anosys_codex-0.1.0/LICENSE

@@ -0,0 +1 @@
+../../../LICENSE

anosys_codex-0.1.0/PKG-INFO

@@ -0,0 +1,142 @@
+Metadata-Version: 2.4
+Name: anosys-codex
+Version: 0.1.0
+Summary: AnoSys observability hook for OpenAI Codex CLI
+Author-email: AnoSys <support@anosys.ai>
+License: ../../../LICENSE
+Project-URL: Homepage, https://anosys.ai
+Project-URL: Documentation, https://docs.anosys.ai
+Project-URL: Repository, https://github.com/anosys-ai/anosys-sdk
+Keywords: anosys,codex,openai,observability,monitoring,audit,llm
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Classifier: Topic :: System :: Monitoring
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: requests>=2.25.1
+Requires-Dist: cryptography>=3.4.0
+Dynamic: license-file
+
+# anosys-codex (Python)
+
+AnoSys observability and analytics hook for OpenAI Codex CLI.
+
+This package automatically captures Codex CLI's telemetry, agent turns, tool calls (`shell`, `apply_patch`, Code Mode custom tools, `web_search`), token usage breakdowns (prompt, completion, cache read/write, reasoning tokens), and estimated API costs, sending them directly to your AnoSys workspace.
+
+It integrates seamlessly with Codex CLI's native `notify` hook mechanism.
+
+---
+
+## Installation
+
+```bash
+pip install anosys-codex
+```
+
+After installing the package, run the setup wizard to configure the hook:
+
+```bash
+anosys-codex install
+```
+
+The installer will prompt you for:
+1. **AnoSys API Key for logs**: Your ingestion API key from the [AnoSys Console](https://console.anosys.ai/collect/integrationoptions).
+   > **Pixel Type Requirement**: This key must belong to a **`CC` (Claude Code / Codex CLI)** pixel. The installer automatically validates the key against `https://console.anosys.ai/api/resolveapikeys` to ensure it resolves to a `/cc/` endpoint. Keys belonging to `T` (OTEL) or Web Traffic (`a`/`g`) pixels are rejected with a warning.
+2. **Content Redaction**: If enabled, sensitive conversation content (prompts, answers, code, tool inputs/outputs) will be redacted and replaced with `[REDACTED]`. Only metadata and token statistics will be tracked.
+3. **Automatic Config Update**: Confirms whether to automatically write `notify = ["anosys-codex", "run"]` to `~/.codex/config.toml` (and creates a `.bak` backup first).
+
+---
+
+## Non-Interactive / Headless Installation
+
+For CI/CD pipelines, Docker containers, devcontainer setups, or non-interactive dotfiles:
+
+### Using the `-y` / `--yes` flag (Recommended):
+```bash
+anosys-codex install --api-key "your_logs_api_key" -y
+```
+
+### Using environment variables:
+```bash
+export ANOSYS_API_KEY="your_logs_api_key"
+anosys-codex install -y
+```
+
+### Using explicit granular flags:
+```bash
+anosys-codex install \
+  --api-key "your_logs_api_key" \
+  --auto-update \
+  --no-redaction
+```
+
+> **Important (Codex Security Trust)**:
+> Codex requires explicit user approval for unmanaged external notify hooks. After running `install`, start a Codex CLI session, type `/hooks`, and select `approve` / `trust` for the `anosys-codex run` hook entry.
+
+---
+
+## CLI Commands
+
+The CLI safely manages `~/.codex/config.toml` and creates automatic timestamped backups (`config.toml.<TIMESTAMP>.bak`) before applying any modifications.
+
+### `status`
+Check the current installation and registration status of the hook:
+```bash
+anosys-codex status
+```
+
+### `install`
+Installs or updates the notify hook in `~/.codex/config.toml` and creates `~/.codex/anosys-env.sh`:
+```bash
+anosys-codex install [options]
+
+Options:
+  --api-key <key>             AnoSys logs API key
+  -y, --yes                   Skip interactive prompts (non-interactive mode)
+  --redaction                 Enable content redaction
+  --no-redaction              Disable content redaction
+  --auto-update               Automatically update ~/.codex/config.toml
+  --no-auto-update            Print manual setup instructions instead of modifying config
+```
+
+### `uninstall`
+Safely removes the AnoSys notify hook entry from `~/.codex/config.toml` and deletes `~/.codex/anosys-env.sh`:
+```bash
+anosys-codex uninstall
+```
+
+### `run`
+Executed automatically by the Codex CLI on turn-complete notify events. You do not need to invoke this manually:
+```bash
+anosys-codex run
+```
+
+---
+
+## How It Works
+
+1. When a Codex turn completes, Codex CLI triggers `notify = ["anosys-codex", "run"]` defined in `~/.codex/config.toml`.
+2. The hook runner receives the session thread ID and locates the session's rollout transcript at `~/.codex/sessions/YYYY/MM/DD/rollout-<ts>-<session_id>.jsonl`.
+3. It incrementally extracts user prompts, assistant messages, model details, token counts (including cached inputs and reasoning tokens), and tool calls.
+4. It maps the turn into the AnoSys schema (`cvs200: 'CodexHook'`), estimates USD cost using OpenAI's model pricing table, applies optional PII redaction, and batches the payload to `https://api.anosys.ai/ingestion`.
+5. If network connectivity is temporarily unavailable, failed records are buffered locally in `~/.codex/state/pending_records.jsonl` and automatically replayed on subsequent runs.
+
+---
+
+## Environment Variables
+
+| Variable | Description |
+|----------|-------------|
+| `ANOSYS_HOOK_APIKEY` / `ANOSYS_API_KEY` | AnoSys ingestion API key |
+| `ANOSYS_HOOK_ENDPOINT_URL` | Override default ingestion URL (`https://api.anosys.ai/ingestion`) |
+| `REDACTION` / `ANOSYS_REDACT_CONTENT` | Set to `"true"` to redact prompts, code, and tool outputs |
+| `ANOSYS_HOOK_DRY_RUN` | Set to `"true"` to log payloads to stderr without sending to network |
+| `CODEX_HOME` | Custom directory for Codex config and sessions (defaults to `~/.codex`) |

anosys_codex-0.1.0/README.md

@@ -0,0 +1,115 @@
+# anosys-codex (Python)
+
+AnoSys observability and analytics hook for OpenAI Codex CLI.
+
+This package automatically captures Codex CLI's telemetry, agent turns, tool calls (`shell`, `apply_patch`, Code Mode custom tools, `web_search`), token usage breakdowns (prompt, completion, cache read/write, reasoning tokens), and estimated API costs, sending them directly to your AnoSys workspace.
+
+It integrates seamlessly with Codex CLI's native `notify` hook mechanism.
+
+---
+
+## Installation
+
+```bash
+pip install anosys-codex
+```
+
+After installing the package, run the setup wizard to configure the hook:
+
+```bash
+anosys-codex install
+```
+
+The installer will prompt you for:
+1. **AnoSys API Key for logs**: Your ingestion API key from the [AnoSys Console](https://console.anosys.ai/collect/integrationoptions).
+   > **Pixel Type Requirement**: This key must belong to a **`CC` (Claude Code / Codex CLI)** pixel. The installer automatically validates the key against `https://console.anosys.ai/api/resolveapikeys` to ensure it resolves to a `/cc/` endpoint. Keys belonging to `T` (OTEL) or Web Traffic (`a`/`g`) pixels are rejected with a warning.
+2. **Content Redaction**: If enabled, sensitive conversation content (prompts, answers, code, tool inputs/outputs) will be redacted and replaced with `[REDACTED]`. Only metadata and token statistics will be tracked.
+3. **Automatic Config Update**: Confirms whether to automatically write `notify = ["anosys-codex", "run"]` to `~/.codex/config.toml` (and creates a `.bak` backup first).
+
+---
+
+## Non-Interactive / Headless Installation
+
+For CI/CD pipelines, Docker containers, devcontainer setups, or non-interactive dotfiles:
+
+### Using the `-y` / `--yes` flag (Recommended):
+```bash
+anosys-codex install --api-key "your_logs_api_key" -y
+```
+
+### Using environment variables:
+```bash
+export ANOSYS_API_KEY="your_logs_api_key"
+anosys-codex install -y
+```
+
+### Using explicit granular flags:
+```bash
+anosys-codex install \
+  --api-key "your_logs_api_key" \
+  --auto-update \
+  --no-redaction
+```
+
+> **Important (Codex Security Trust)**:
+> Codex requires explicit user approval for unmanaged external notify hooks. After running `install`, start a Codex CLI session, type `/hooks`, and select `approve` / `trust` for the `anosys-codex run` hook entry.
+
+---
+
+## CLI Commands
+
+The CLI safely manages `~/.codex/config.toml` and creates automatic timestamped backups (`config.toml.<TIMESTAMP>.bak`) before applying any modifications.
+
+### `status`
+Check the current installation and registration status of the hook:
+```bash
+anosys-codex status
+```
+
+### `install`
+Installs or updates the notify hook in `~/.codex/config.toml` and creates `~/.codex/anosys-env.sh`:
+```bash
+anosys-codex install [options]
+
+Options:
+  --api-key <key>             AnoSys logs API key
+  -y, --yes                   Skip interactive prompts (non-interactive mode)
+  --redaction                 Enable content redaction
+  --no-redaction              Disable content redaction
+  --auto-update               Automatically update ~/.codex/config.toml
+  --no-auto-update            Print manual setup instructions instead of modifying config
+```
+
+### `uninstall`
+Safely removes the AnoSys notify hook entry from `~/.codex/config.toml` and deletes `~/.codex/anosys-env.sh`:
+```bash
+anosys-codex uninstall
+```
+
+### `run`
+Executed automatically by the Codex CLI on turn-complete notify events. You do not need to invoke this manually:
+```bash
+anosys-codex run
+```
+
+---
+
+## How It Works
+
+1. When a Codex turn completes, Codex CLI triggers `notify = ["anosys-codex", "run"]` defined in `~/.codex/config.toml`.
+2. The hook runner receives the session thread ID and locates the session's rollout transcript at `~/.codex/sessions/YYYY/MM/DD/rollout-<ts>-<session_id>.jsonl`.
+3. It incrementally extracts user prompts, assistant messages, model details, token counts (including cached inputs and reasoning tokens), and tool calls.
+4. It maps the turn into the AnoSys schema (`cvs200: 'CodexHook'`), estimates USD cost using OpenAI's model pricing table, applies optional PII redaction, and batches the payload to `https://api.anosys.ai/ingestion`.
+5. If network connectivity is temporarily unavailable, failed records are buffered locally in `~/.codex/state/pending_records.jsonl` and automatically replayed on subsequent runs.
+
+---
+
+## Environment Variables
+
+| Variable | Description |
+|----------|-------------|
+| `ANOSYS_HOOK_APIKEY` / `ANOSYS_API_KEY` | AnoSys ingestion API key |
+| `ANOSYS_HOOK_ENDPOINT_URL` | Override default ingestion URL (`https://api.anosys.ai/ingestion`) |
+| `REDACTION` / `ANOSYS_REDACT_CONTENT` | Set to `"true"` to redact prompts, code, and tool outputs |
+| `ANOSYS_HOOK_DRY_RUN` | Set to `"true"` to log payloads to stderr without sending to network |
+| `CODEX_HOME` | Custom directory for Codex config and sessions (defaults to `~/.codex`) |

anosys_codex-0.1.0/pyproject.toml

@@ -0,0 +1,49 @@
+[build-system]
+requires = ["setuptools>=61.0", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "anosys-codex"
+version = "0.1.0"
+description = "AnoSys observability hook for OpenAI Codex CLI"
+authors = [{name = "AnoSys", email = "support@anosys.ai"}]
+readme = "README.md"
+license = {file = "LICENSE"}
+requires-python = ">=3.10"
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Intended Audience :: Developers",
+    "License :: OSI Approved :: Apache Software License",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Topic :: Software Development :: Libraries :: Python Modules",
+    "Topic :: System :: Monitoring",
+]
+keywords = ["anosys", "codex", "openai", "observability", "monitoring", "audit", "llm"]
+dependencies = [
+    "requests>=2.25.1",
+    "cryptography>=3.4.0",
+]
+
+[project.scripts]
+anosys-codex = "anosys_sdk_codex.cli:main"
+
+[project.urls]
+Homepage = "https://anosys.ai"
+Documentation = "https://docs.anosys.ai"
+Repository = "https://github.com/anosys-ai/anosys-sdk"
+
+[tool.setuptools.packages.find]
+where = ["src"]
+
+[tool.setuptools.package-data]
+"anosys_sdk_codex" = ["py.typed"]
+
+[tool.ruff.lint]
+select = ["E4", "E7", "E9", "F"]
+
+[tool.ruff.lint.per-file-ignores]
+"src/anosys_sdk_codex/mapper.py" = ["E701", "E702"]

anosys_codex-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

anosys_codex-0.1.0/src/anosys_codex.egg-info/PKG-INFO

@@ -0,0 +1,142 @@
+Metadata-Version: 2.4
+Name: anosys-codex
+Version: 0.1.0
+Summary: AnoSys observability hook for OpenAI Codex CLI
+Author-email: AnoSys <support@anosys.ai>
+License: ../../../LICENSE
+Project-URL: Homepage, https://anosys.ai
+Project-URL: Documentation, https://docs.anosys.ai
+Project-URL: Repository, https://github.com/anosys-ai/anosys-sdk
+Keywords: anosys,codex,openai,observability,monitoring,audit,llm
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Classifier: Topic :: System :: Monitoring
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: requests>=2.25.1
+Requires-Dist: cryptography>=3.4.0
+Dynamic: license-file
+
+# anosys-codex (Python)
+
+AnoSys observability and analytics hook for OpenAI Codex CLI.
+
+This package automatically captures Codex CLI's telemetry, agent turns, tool calls (`shell`, `apply_patch`, Code Mode custom tools, `web_search`), token usage breakdowns (prompt, completion, cache read/write, reasoning tokens), and estimated API costs, sending them directly to your AnoSys workspace.
+
+It integrates seamlessly with Codex CLI's native `notify` hook mechanism.
+
+---
+
+## Installation
+
+```bash
+pip install anosys-codex
+```
+
+After installing the package, run the setup wizard to configure the hook:
+
+```bash
+anosys-codex install
+```
+
+The installer will prompt you for:
+1. **AnoSys API Key for logs**: Your ingestion API key from the [AnoSys Console](https://console.anosys.ai/collect/integrationoptions).
+   > **Pixel Type Requirement**: This key must belong to a **`CC` (Claude Code / Codex CLI)** pixel. The installer automatically validates the key against `https://console.anosys.ai/api/resolveapikeys` to ensure it resolves to a `/cc/` endpoint. Keys belonging to `T` (OTEL) or Web Traffic (`a`/`g`) pixels are rejected with a warning.
+2. **Content Redaction**: If enabled, sensitive conversation content (prompts, answers, code, tool inputs/outputs) will be redacted and replaced with `[REDACTED]`. Only metadata and token statistics will be tracked.
+3. **Automatic Config Update**: Confirms whether to automatically write `notify = ["anosys-codex", "run"]` to `~/.codex/config.toml` (and creates a `.bak` backup first).
+
+---
+
+## Non-Interactive / Headless Installation
+
+For CI/CD pipelines, Docker containers, devcontainer setups, or non-interactive dotfiles:
+
+### Using the `-y` / `--yes` flag (Recommended):
+```bash
+anosys-codex install --api-key "your_logs_api_key" -y
+```
+
+### Using environment variables:
+```bash
+export ANOSYS_API_KEY="your_logs_api_key"
+anosys-codex install -y
+```
+
+### Using explicit granular flags:
+```bash
+anosys-codex install \
+  --api-key "your_logs_api_key" \
+  --auto-update \
+  --no-redaction
+```
+
+> **Important (Codex Security Trust)**:
+> Codex requires explicit user approval for unmanaged external notify hooks. After running `install`, start a Codex CLI session, type `/hooks`, and select `approve` / `trust` for the `anosys-codex run` hook entry.
+
+---
+
+## CLI Commands
+
+The CLI safely manages `~/.codex/config.toml` and creates automatic timestamped backups (`config.toml.<TIMESTAMP>.bak`) before applying any modifications.
+
+### `status`
+Check the current installation and registration status of the hook:
+```bash
+anosys-codex status
+```
+
+### `install`
+Installs or updates the notify hook in `~/.codex/config.toml` and creates `~/.codex/anosys-env.sh`:
+```bash
+anosys-codex install [options]
+
+Options:
+  --api-key <key>             AnoSys logs API key
+  -y, --yes                   Skip interactive prompts (non-interactive mode)
+  --redaction                 Enable content redaction
+  --no-redaction              Disable content redaction
+  --auto-update               Automatically update ~/.codex/config.toml
+  --no-auto-update            Print manual setup instructions instead of modifying config
+```
+
+### `uninstall`
+Safely removes the AnoSys notify hook entry from `~/.codex/config.toml` and deletes `~/.codex/anosys-env.sh`:
+```bash
+anosys-codex uninstall
+```
+
+### `run`
+Executed automatically by the Codex CLI on turn-complete notify events. You do not need to invoke this manually:
+```bash
+anosys-codex run
+```
+
+---
+
+## How It Works
+
+1. When a Codex turn completes, Codex CLI triggers `notify = ["anosys-codex", "run"]` defined in `~/.codex/config.toml`.
+2. The hook runner receives the session thread ID and locates the session's rollout transcript at `~/.codex/sessions/YYYY/MM/DD/rollout-<ts>-<session_id>.jsonl`.
+3. It incrementally extracts user prompts, assistant messages, model details, token counts (including cached inputs and reasoning tokens), and tool calls.
+4. It maps the turn into the AnoSys schema (`cvs200: 'CodexHook'`), estimates USD cost using OpenAI's model pricing table, applies optional PII redaction, and batches the payload to `https://api.anosys.ai/ingestion`.
+5. If network connectivity is temporarily unavailable, failed records are buffered locally in `~/.codex/state/pending_records.jsonl` and automatically replayed on subsequent runs.
+
+---
+
+## Environment Variables
+
+| Variable | Description |
+|----------|-------------|
+| `ANOSYS_HOOK_APIKEY` / `ANOSYS_API_KEY` | AnoSys ingestion API key |
+| `ANOSYS_HOOK_ENDPOINT_URL` | Override default ingestion URL (`https://api.anosys.ai/ingestion`) |
+| `REDACTION` / `ANOSYS_REDACT_CONTENT` | Set to `"true"` to redact prompts, code, and tool outputs |
+| `ANOSYS_HOOK_DRY_RUN` | Set to `"true"` to log payloads to stderr without sending to network |
+| `CODEX_HOME` | Custom directory for Codex config and sessions (defaults to `~/.codex`) |

anosys_codex-0.1.0/src/anosys_codex.egg-info/SOURCES.txt

@@ -0,0 +1,17 @@
+LICENSE
+README.md
+pyproject.toml
+src/anosys_codex.egg-info/PKG-INFO
+src/anosys_codex.egg-info/SOURCES.txt
+src/anosys_codex.egg-info/dependency_links.txt
+src/anosys_codex.egg-info/entry_points.txt
+src/anosys_codex.egg-info/requires.txt
+src/anosys_codex.egg-info/top_level.txt
+src/anosys_sdk_codex/__init__.py
+src/anosys_sdk_codex/cli.py
+src/anosys_sdk_codex/encryption.py
+src/anosys_sdk_codex/hook_runner.py
+src/anosys_sdk_codex/installer.py
+src/anosys_sdk_codex/mapper.py
+src/anosys_sdk_codex/py.typed
+tests/test_codex.py

anosys_codex-0.1.0/src/anosys_codex.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

anosys_codex-0.1.0/src/anosys_codex.egg-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+anosys-codex = anosys_sdk_codex.cli:main

anosys_codex-0.1.0/src/anosys_codex.egg-info/requires.txt

@@ -0,0 +1,2 @@
+requests>=2.25.1
+cryptography>=3.4.0

anosys_codex-0.1.0/src/anosys_codex.egg-info/top_level.txt

@@ -0,0 +1 @@
+anosys_sdk_codex

anosys_codex-0.1.0/src/anosys_sdk_codex/__init__.py

@@ -0,0 +1,40 @@
+"""
+AnoSys OpenAI Codex CLI integration — observability hook for Codex sessions.
+"""
+
+try:
+    from importlib.metadata import PackageNotFoundError, version
+except ImportError:
+    from importlib_metadata import PackageNotFoundError, version
+
+from anosys_sdk_codex.installer import update_codex_config, update_codex_env
+from anosys_sdk_codex.mapper import transform_codex_turn
+from anosys_sdk_codex.encryption import (
+    ANOSYS_ENCRYPTION_PREFIX,
+    DEFAULT_ENCRYPTED_COLUMNS,
+    derive_256_bit_key,
+    encrypt,
+    decrypt,
+    get_encryption_key,
+    get_target_columns,
+    encrypt_payload,
+)
+
+try:
+    __version__ = version("anosys-codex")
+except PackageNotFoundError:
+    __version__ = "0.1.0"
+
+__all__ = [
+    "transform_codex_turn",
+    "update_codex_config",
+    "update_codex_env",
+    "ANOSYS_ENCRYPTION_PREFIX",
+    "DEFAULT_ENCRYPTED_COLUMNS",
+    "derive_256_bit_key",
+    "encrypt",
+    "decrypt",
+    "get_encryption_key",
+    "get_target_columns",
+    "encrypt_payload",
+]