@optimuslabs/runtime-staging 0.3.3 → 0.3.5

package/dist/test/prompt-privacy.test.js

@@ -0,0 +1,33 @@
+import { test } from "node:test";
+import assert from "node:assert";
+import { createHash } from "node:crypto";
+import { applyPromptCollectionToMetadata, stripRawEventPromptFields } from "../lib/telemetry/prompt-privacy.js";
+test("stripRawEventPromptFields removes top-level prompt keys only", () => {
+    const stripped = stripRawEventPromptFields({
+        user_prompt: "secret",
+        prompt: "secret2",
+        tool_input: { prompt: "keep" },
+    });
+    assert(stripped);
+    assert.strictEqual(stripped.user_prompt, undefined);
+    assert.strictEqual(stripped.prompt, undefined);
+    assert.deepStrictEqual(stripped.tool_input, { prompt: "keep" });
+});
+test("applyPromptCollectionToMetadata hashes and drops plaintext when enabled", () => {
+    const digest = createHash("sha256").update("do a thing", "utf8").digest("hex");
+    const out = applyPromptCollectionToMetadata({
+        user_prompt: "do a thing",
+        raw_event: { user_prompt: "do a thing", command: "ls" },
+    }, true);
+    assert.strictEqual(out.user_prompt, undefined);
+    assert.strictEqual(out.user_prompt_hash, digest);
+    assert.strictEqual(out.raw_event.user_prompt, undefined);
+    assert.strictEqual(out.raw_event.command, "ls");
+});
+test("applyPromptCollectionToMetadata keeps plaintext when hashing is off", () => {
+    const out = applyPromptCollectionToMetadata({ user_prompt: "hello", raw_event: { user_prompt: "hello" } }, false);
+    assert.strictEqual(out.user_prompt, "hello");
+    assert.strictEqual(out.user_prompt_hash, undefined);
+    assert.strictEqual(out.raw_event.user_prompt, undefined);
+});
+//# sourceMappingURL=prompt-privacy.test.js.map

package/dist/test/prompt-privacy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-privacy.test.js","sourceRoot":"","sources":["../../src/test/prompt-privacy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,+BAA+B,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAEhH,IAAI,CAAC,8DAA8D,EAAE,GAAG,EAAE;IACxE,MAAM,QAAQ,GAAG,yBAAyB,CAAC;QACzC,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,SAAS;QACjB,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;KAC/B,CAAC,CAAC;IACH,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjB,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACpD,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC/C,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AAClE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yEAAyE,EAAE,GAAG,EAAE;IACnF,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/E,MAAM,GAAG,GAAG,+BAA+B,CACzC;QACE,WAAW,EAAE,YAAY;QACzB,SAAS,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE;KACxD,EACD,IAAI,CACL,CAAC;IACF,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC/C,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,CAAC,WAAW,CAAE,GAAG,CAAC,SAAsC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACvF,MAAM,CAAC,WAAW,CAAE,GAAG,CAAC,SAAkC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAC5E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qEAAqE,EAAE,GAAG,EAAE;IAC/E,MAAM,GAAG,GAAG,+BAA+B,CACzC,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAC7D,KAAK,CACN,CAAC;IACF,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;IACpD,MAAM,CAAC,WAAW,CAAE,GAAG,CAAC,SAAsC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;AACzF,CAAC,CAAC,CAAC"}

package/dist/test/transcript.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=transcript.test.d.ts.map

package/dist/test/transcript.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcript.test.d.ts","sourceRoot":"","sources":["../../src/test/transcript.test.ts"],"names":[],"mappings":""}

package/dist/test/transcript.test.js

@@ -0,0 +1,38 @@
+import { test } from "node:test";
+import assert from "node:assert";
+import fs from "fs";
+import os from "os";
+import path from "path";
+import { readLastUserPrompt } from "../lib/transcript.js";
+function transcript(lines) {
+    const dir = fs.mkdtempSync(path.join(os.tmpdir(), "transcript-"));
+    const file = path.join(dir, "t.jsonl");
+    fs.writeFileSync(file, lines.map((l) => JSON.stringify(l)).join("\n") + "\n");
+    return file;
+}
+const codexUser = (text) => ({
+    type: "response_item",
+    payload: { type: "message", role: "user", content: [{ type: "input_text", text }] },
+});
+test("readLastUserPrompt - Codex: the last prompt the person typed", () => {
+    const file = transcript([
+        codexUser("# AGENTS.md instructions for /repo"),
+        codexUser("<environment_context>\n  <cwd>/repo</cwd>"),
+        codexUser("first question"),
+        { type: "response_item", payload: { type: "function_call", name: "shell" } },
+        codexUser("Run ls -la /tmp"),
+    ]);
+    assert.strictEqual(readLastUserPrompt(file), "Run ls -la /tmp");
+});
+test("readLastUserPrompt - Codex: injected context is never taken for the prompt", () => {
+    const file = transcript([codexUser("real prompt"), codexUser("<environment_context>x")]);
+    assert.strictEqual(readLastUserPrompt(file), "real prompt");
+});
+test("readLastUserPrompt - Claude transcripts still read as before", () => {
+    const file = transcript([{ type: "user", message: { role: "user", content: "claude prompt" } }]);
+    assert.strictEqual(readLastUserPrompt(file), "claude prompt");
+});
+test("readLastUserPrompt - missing file is null", () => {
+    assert.strictEqual(readLastUserPrompt("/nonexistent/t.jsonl"), null);
+});
+//# sourceMappingURL=transcript.test.js.map

package/dist/test/transcript.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcript.test.js","sourceRoot":"","sources":["../../src/test/transcript.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,SAAS,UAAU,CAAC,KAAgB;IAClC,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACvC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC;IACnC,IAAI,EAAE,eAAe;IACrB,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE;CACpF,CAAC,CAAC;AAEH,IAAI,CAAC,8DAA8D,EAAE,GAAG,EAAE;IACxE,MAAM,IAAI,GAAG,UAAU,CAAC;QACtB,SAAS,CAAC,oCAAoC,CAAC;QAC/C,SAAS,CAAC,2CAA2C,CAAC;QACtD,SAAS,CAAC,gBAAgB,CAAC;QAC3B,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QAC5E,SAAS,CAAC,iBAAiB,CAAC;KAC7B,CAAC,CAAC;IACH,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC,CAAC;AAClE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4EAA4E,EAAE,GAAG,EAAE;IACtF,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,SAAS,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,CAAC;AAC9D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8DAA8D,EAAE,GAAG,EAAE;IACxE,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;IACjG,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC;AAChE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACrD,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,EAAE,IAAI,CAAC,CAAC;AACvE,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@optimuslabs/runtime-staging",
-  "version": "0.3.3",
+  "version": "0.3.5",
   "description": "Agentic audit sensor — streams raw tool call metadata; the Optimus backend classifies on ingest",
   "type": "module",
   "bin": {
@@ -11,7 +11,7 @@
   "scripts": {
     "build": "rm -rf dist && tsc && node ../../../scripts/ensure-bin-executable.mjs",
     "dev": "tsx src/index.ts",
-    "pretest": "npm run build --prefix ../optimus-tofu && npm run build",
+    "pretest": "npm run build --prefix ../tofu && npm run build",
     "test": "node --test dist/test/*.test.js",
     "prepare": "npm run build"
   },
@@ -27,12 +27,12 @@
   "repository": {
     "type": "git",
     "url": "git+https://github.com/optimuslabs-io/optimus-secure-fdn.git",
-    "directory": "npx_packages/staging/optimuslabs/optimus-tool-call"
+    "directory": "npx_packages/staging/optimuslabs/runtime"
   },
   "bugs": {
     "url": "https://github.com/optimuslabs-io/optimus-secure-fdn/issues"
   },
-  "homepage": "https://github.com/optimuslabs-io/optimus-secure-fdn/tree/main/npx_packages/staging/optimuslabs/optimus-tool-call#readme",
+  "homepage": "https://github.com/optimuslabs-io/optimus-secure-fdn/tree/main/npx_packages/staging/optimuslabs/runtime#readme",
   "files": [
     "dist/**/*",
     "README.md"