Felix NovakandPaperclip e3c0e3d430 feat(codex): refresh-failure classification + credential telemetry (PAP-1887) ...

- Classify Codex auth/refresh failures into three distinguishable classes:
  refresh_token_reused, refresh_token_expired, refresh_token_invalidated
- Emit codex.credential_health telemetry event with company/agent/adapter
  dimensions (AC1: queryable per company/agent/adapter confirmed)
- Track seed source (configured_key/host_file/snapshot_file), last_refresh
  age bucket (lt_1h/lt_8d/gte_8d/missing), and rotations_detected
- Define codex.sync_back_outcome event shape; emission point marked
  TODO(PAP-1872) pending Phase 1.1 landing
- Enforce I5 (no token material in telemetry) via unit test that asserts
  refresh/access/id tokens, openai key, account_id, and email never appear
  in emitted payloads
- fix(codex): read remote credential telemetry snapshot from remote CODEX_HOME
- test(codex): isolate refresh telemetry fixture
- Rebased onto master after PAP-1911 security review and PAP-1978 conflict resolution

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-07-09 05:51:00 +00:00

..

src

feat(codex): refresh-failure classification + credential telemetry (PAP-1887)

2026-07-09 05:51:00 +00:00

CHANGELOG.md

chore: release v0.3.1

2026-03-12 13:09:22 -05:00

package.json

build(deps-dev): bump @types/node from 22.19.11 to 22.19.21 (#7748)

2026-06-18 15:46:06 -07:00

tsconfig.json

Fix root TypeScript solution config

2026-03-09 14:09:30 -05:00

vitest.config.ts

Add first-class issue references (#4214)

2026-04-21 10:02:52 -05:00