Sync public snapshot from freebuff-private

Source: CodebuffAI/freebuff-private@c6e459f573bd6265fc538df66b2b23f9102af9d2

Author: github-actions[bot]

bun.lock

@@ -1,6 +1,7 @@
 import { describe, expect, test } from 'bun:test'
 
 import {
+  ADS_FETCH_COMPLETED_EVENT,
   CONTEXT_PRUNING_COMPLETED_EVENT,
   getAxiomOnlyLogEvent,
   STREAM_RECOVERY_EVENT,
@@ -137,4 +138,32 @@ describe('getAxiomOnlyLogEvent', () => {
       data: { metric: 'stream_recovery_rescued' },
     })
   })
+
+  test('sanitizes ad-fetch metadata', () => {
+    expect(
+      getAxiomOnlyLogEvent({
+        axiomEvent: ADS_FETCH_COMPLETED_EVENT,
+        outcome: 'fill',
+        requested_provider: 'gravity',
+        served_provider: 'carbon',
+        ad_count: 1,
+        placement_id: 'CLI-Chat-Inline',
+        duration_ms: 42,
+        client_ua_product: 'freebuff-cli',
+        attempted_providers: ['gravity', 'carbon'],
+        messages: [{ role: 'user', content: 'secret' }],
+      }),
+    ).toEqual({
+      event: ADS_FETCH_COMPLETED_EVENT,
+      data: {
+        outcome: 'fill',
+        requested_provider: 'gravity',
+        served_provider: 'carbon',
+        ad_count: 1,
+        placement_id: 'CLI-Chat-Inline',
+        duration_ms: 42,
+        client_ua_product: 'freebuff-cli',
+      },
+    })
+  })
 })

common/src/util/__tests__/axiom-only-log.test.ts

@@ -1,12 +1,12 @@
+import { AnalyticsEvent } from '../constants/analytics-events'
+
 /**
  * Operational events that belong in Axiom but not in product analytics.
  *
- * CLI logs normally redact structured info payloads before shipping and also
- * mirror a sampled `cli_log` event to PostHog. This allowlist lets a small set
- * of content-free operational events retain useful numeric/string/boolean
- * metadata in Axiom without becoming product events or providing a general
- * redaction bypass — each event declares an explicit field allowlist, and
- * unknown keys or unexpected value types are always discarded.
+ * This allowlist lets a small set of content-free operational events retain
+ * useful numeric/string/boolean metadata without becoming product events or
+ * providing a general redaction bypass. Unknown fields and unexpected value
+ * types are always discarded.
  */
 
 export const CONTEXT_PRUNING_COMPLETED_EVENT =
@@ -18,6 +18,7 @@ export const CONTEXT_PRUNING_COMPLETED_EVENT =
  *  allowlisted event — `_gave_up` logs at error level, which already ships
  *  raw and doesn't need the allowlist. */
 export const STREAM_RECOVERY_EVENT = 'stream_recovery' as const
+export const ADS_FETCH_COMPLETED_EVENT = AnalyticsEvent.ADS_FETCH_COMPLETED
 
 type AxiomOnlyFieldType = 'string' | 'number' | 'boolean'
 type AxiomOnlyFieldSchema = Record<string, AxiomOnlyFieldType>
@@ -58,10 +59,24 @@ const STREAM_RECOVERY_FIELDS = {
   consecutive: 'number',
 } as const satisfies AxiomOnlyFieldSchema
 
+const ADS_FETCH_COMPLETED_FIELDS = {
+  outcome: 'string',
+  requested_provider: 'string',
+  served_provider: 'string',
+  ad_count: 'number',
+  surface: 'string',
+  placement_id: 'string',
+  chat_session_id: 'string',
+  duration_ms: 'number',
+  client_ua_product: 'string',
+  client_ua_version: 'string',
+} as const satisfies AxiomOnlyFieldSchema
+
 export type AxiomOnlyLogEvent = {
   event:
     | typeof CONTEXT_PRUNING_COMPLETED_EVENT
     | typeof STREAM_RECOVERY_EVENT
+    | typeof ADS_FETCH_COMPLETED_EVENT
   data: Record<string, string | number | boolean>
 }
 
@@ -120,5 +135,11 @@ export function getAxiomOnlyLogEvent(
       data: sanitizeAllowlistedFields(record, STREAM_RECOVERY_FIELDS),
     }
   }
+  if (eventName === ADS_FETCH_COMPLETED_EVENT) {
+    return {
+      event: eventName,
+      data: sanitizeAllowlistedFields(record, ADS_FETCH_COMPLETED_FIELDS),
+    }
+  }
   return null
 }