Felix NovakandPaperclip e3c0e3d430 feat(codex): refresh-failure classification + credential telemetry (PAP-1887) ...

- Classify Codex auth/refresh failures into three distinguishable classes:
  refresh_token_reused, refresh_token_expired, refresh_token_invalidated
- Emit codex.credential_health telemetry event with company/agent/adapter
  dimensions (AC1: queryable per company/agent/adapter confirmed)
- Track seed source (configured_key/host_file/snapshot_file), last_refresh
  age bucket (lt_1h/lt_8d/gte_8d/missing), and rotations_detected
- Define codex.sync_back_outcome event shape; emission point marked
  TODO(PAP-1872) pending Phase 1.1 landing
- Enforce I5 (no token material in telemetry) via unit test that asserts
  refresh/access/id tokens, openai key, account_id, and email never appear
  in emitted payloads
- fix(codex): read remote credential telemetry snapshot from remote CODEX_HOME
- test(codex): isolate refresh telemetry fixture
- Rebased onto master after PAP-1911 security review and PAP-1978 conflict resolution

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-07-09 05:51:00 +00:00

..

__tests__

feat(codex): refresh-failure classification + credential telemetry (PAP-1887)

2026-07-09 05:51:00 +00:00

adapters

Make ACP the default engine for local adapters (#9238)

2026-07-08 19:05:03 -07:00

auth

build(deps): bump better-auth from 1.4.18 to 1.6.20 (#8464)

2026-06-23 11:01:40 -07:00

http

[codex] Runtime control-plane fixes (#6380)

2026-05-20 10:37:11 -05:00

lib

Add low-trust review containment (#7530)

2026-06-05 16:48:02 -05:00

middleware

Reject projectless isolated git worktree tasks (#9231)

2026-07-08 10:31:37 -07:00

onboarding-assets

[codex] Add heartbeat policy eval coverage (#9087)

2026-07-06 16:31:14 -05:00

realtime

Add browser SSH terminal for custom image setup (#8911)

2026-07-03 16:44:21 -07:00

routes

Harden environment deletion and expose delete blast radius (#9250)

2026-07-08 22:04:22 -07:00

secrets

fix: validate session ID as UUID before --resume + error diagnostics (DLD-889) (#1742)

2026-06-09 20:21:10 -07:00

services

feat(codex): refresh-failure classification + credential telemetry (PAP-1887)

2026-07-09 05:51:00 +00:00

storage

Address artifact PR review feedback

2026-05-30 20:51:46 +00:00

types

feat(secrets): add user-specific runtime secrets (#8825)

2026-07-05 05:58:20 -05:00

agent-auth-jwt.ts

[codex] Isolate run JWTs by control-plane instance (#9162)

2026-07-07 09:27:19 -05:00

app.ts

Fix DB backup health alerts (#9147)

2026-07-07 05:54:20 -05:00

attachment-types.ts

Allow inline video attachment previews

2026-06-05 03:28:07 +00:00

board-claim.ts

[codex] Add agent permissions and controls plan (#6386)

2026-05-22 08:12:52 -05:00

config-file.ts

refactor: rename packages to @paperclipai and CLI binary to paperclipai

2026-03-03 08:45:26 -06:00

config.ts

Add secrets provider vaults and remote import (#5429)

2026-05-09 18:22:17 -05:00

dev-runner-worktree.ts

[codex] Bundle local branch fixes from PAP-10032 (#6604)

2026-05-25 07:25:26 -05:00

dev-server-status.ts

[codex] UI and dev ops quality-of-life (#6384)

2026-05-19 15:52:39 -05:00

dev-watch-ignore.ts

feat(adapters): external adapter plugin system with dynamic UI parser

2026-04-03 21:11:20 +01:00

errors.ts

feat(secrets): add user-specific runtime secrets (#8825)

2026-07-05 05:58:20 -05:00

first-admin-claim.ts

[codex] Add private browser first-admin claim flow (#6755)

2026-05-27 21:15:01 -10:00

home-paths.ts

[codex] Add LLM Wiki plugin host support (#5597)

2026-05-10 07:34:12 -05:00

index.ts

fix: run restart recovery, workspace self-heal, quota-aware retries, failed-run metrics (#9183)

2026-07-07 20:30:09 -05:00

instrumentation.ts

feat(server): opt-in OpenTelemetry auto-instrumentation (#3735)

2026-06-12 10:44:22 -07:00

log-redaction.ts

Sync/master post pap1497 followups 2026 04 15 (#3779)

2026-04-15 21:13:56 -05:00

paths.ts

feat(cli): add client commands and home-based local runtime defaults

2026-02-20 07:10:58 -06:00

redaction.ts

feat(secrets): add user-specific runtime secrets (#8825)

2026-07-05 05:58:20 -05:00

runtime-api.ts

Prefer loopback runtime API URL for local agents (#5102)

2026-06-20 14:03:21 -07:00

server-info.ts

Fix stale server info debug metadata (#8753)

2026-06-29 13:10:58 -07:00

startup-banner.ts

Introduce bind presets for deployment setup

2026-04-11 07:09:07 -05:00

static-index-html.ts

[codex] Bundle local branch fixes from PAP-10032 (#6604)

2026-05-25 07:25:26 -05:00

telemetry.ts

fix: add periodic flush and graceful shutdown for server-side telemetry

2026-04-02 10:47:29 -05:00

ui-branding.ts

Add worktree UI branding

2026-03-13 11:12:43 -05:00

version.ts

fix(server): report source-install version from git metadata (#9103)

2026-07-06 09:15:44 -07:00

vite-html-renderer.ts

[codex] Add backup endpoint and dev runtime hardening (#4087)

2026-04-20 06:08:55 -05:00

worktree-config.ts

[codex] Bundle local branch fixes from PAP-10032 (#6604)

2026-05-25 07:25:26 -05:00