Note

Medium Risk
Changes how telemetry user IDs are derived and persisted when auth files are missing or corrupt; mis-handling could affect analytics identity stability but scope is limited to telemetry identification.

Overview
Replaces the single hash error with typed telemetry identity errors (read, decode, generate, persist, hash) that keep the original cause but use fixed messages that do not echo nested cause text.

getTelemetryIdentifierForHome resolves codex → claude → anonymous: only NotFound counts as “missing”; other read failures are logged with structured annotations (errorTag, source, filePath, causeKind, no raw cause or secrets) and the flow falls through to the next source. upsertAnonymousId reuses an existing file when readable and does not write a new anonymous id after a non-NotFound read failure (can return null instead of minting an id). getTelemetryIdentifier delegates to the new home-directory API.

Adds Identify.test.ts for anonymous reuse, malformed Codex JSON fallback/logging, and directory-at-anonymous-path behavior.

^{Reviewed by Cursor Bugbot for commit f7c377b. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Structure telemetry identity errors with typed error classes and source-aware logging

• Replaces generic error handling in Identify.ts with typed error classes (TelemetryIdentityReadError, TelemetryIdentityDecodeError, TelemetryAnonymousIdGenerationError, TelemetryAnonymousIdPersistenceError, TelemetryIdentityHashError) that carry source, filePath, and cause fields.
• Adds logTelemetryIdentityError to emit structured warnings with consistent annotations (errorTag, source, causeKind, platformReason, errorStack).
• NotFound file reads now return Option.none for silent fallback; other read failures propagate as typed errors, preventing anonymous id from being silently overwritten on non-NotFound errors.
• Introduces getTelemetryIdentifierForHome to resolve identity across Codex → Claude → anonymous sources deterministically, returning null when all sources fail.
• Risk: upsertAnonymousId now propagates non-NotFound read failures instead of silently overwriting, which is a behavioral change for degraded filesystem states.

^{Macroscope summarized f7c377b.}