@optimuslabs/runtime 0.3.3

package/dist/lib/client-event.js

@@ -0,0 +1,140 @@
+/**
+ * Tool-call client-event reporter → POST /endpoint_security/api/client-event/.
+ *
+ * Emits a FunctionalRun(unit=tool_call) as a substep of the tool-call HookRun. story_id and
+ * story_id: env, else ~/.optimuslabs/management/telemetry/current_story.id (written by start-every-prompt).
+ * hook_run_id: env, else deterministic `${story_id}::tool_call`.
+ * Best-effort, short timeout, never throws — the tool-call hook must never block on telemetry.
+ */
+import os from "os";
+import path from "path";
+import fs from "fs";
+import { fileURLToPath } from "url";
+import { loadEndpointBase, createSignature, readStoredAuthKey } from "./tofu.js";
+import { resolveHardwareUuid } from "./hardware-uuid.js";
+import { OPTIMUS_AUTH_KEY_RELATIVE_PATH } from "./machine-auth.js";
+const SEND_TIMEOUT_MS = 4000;
+/** This package's name + version as "<name>: <version>", read from its own package.json. */
+function readPackageVersion() {
+    try {
+        const pkgPath = fileURLToPath(new URL("../../package.json", import.meta.url));
+        const parsed = JSON.parse(fs.readFileSync(pkgPath, "utf8"));
+        const name = typeof parsed?.name === "string" ? parsed.name : "";
+        const version = typeof parsed?.version === "string" ? parsed.version : "";
+        if (name && version)
+            return `${name}: ${version}`;
+        return version || name || "unknown";
+    }
+    catch {
+        return "unknown";
+    }
+}
+const STORY_FILE_MAX_AGE_MS = 180000;
+function resolveStoryId() {
+    const fromEnv = (process.env.OPTIMUS_STORY_ID || "").trim();
+    if (fromEnv)
+        return fromEnv;
+    const home = process.env.HOME || process.env.USERPROFILE;
+    if (home) {
+        try {
+            const p = path.join(home, ".optimuslabs", "management", "telemetry", "current_story.id");
+            const st = fs.statSync(p);
+            if (Date.now() - st.mtimeMs <= STORY_FILE_MAX_AGE_MS) {
+                const fromFile = fs.readFileSync(p, "utf8").trim();
+                if (fromFile)
+                    return fromFile;
+            }
+        }
+        catch {
+            // missing/unreadable/stale — mint
+        }
+    }
+    return `toolcall-${Date.now()}-${process.pid}`;
+}
+const KNOWN_AGENTS = new Set(["cursor", "claude", "copilot", "opencode", "codex"]);
+/** Shell env (hook wrapper) wins; payload detection when env is missing (Unknown fix). */
+function resolveReportingAgent(detected) {
+    const fromEnv = (process.env.OPTIMUS_HOOK_TYPE || process.env.OPTIMUS_AGENT || "").trim().toLowerCase();
+    if (KNOWN_AGENTS.has(fromEnv))
+        return fromEnv;
+    const fromDetected = (detected || "").trim().toLowerCase();
+    if (KNOWN_AGENTS.has(fromDetected))
+        return fromDetected;
+    return null;
+}
+function metadata(agent) {
+    const out = {
+        host: os.hostname(),
+        platform: `${process.platform}/${process.arch}`,
+        node: process.version,
+        pid: String(process.pid),
+        reporter_version: readPackageVersion(),
+        source: "tool_call",
+    };
+    if (process.env.OPTIMUS_HOOK_SCRIPT_VERSION)
+        out.hook_script_version = process.env.OPTIMUS_HOOK_SCRIPT_VERSION;
+    if (agent)
+        out.hook_type = agent;
+    if (process.env.OPTIMUS_ENDPOINT)
+        out.endpoint = process.env.OPTIMUS_ENDPOINT;
+    return out;
+}
+function resolveHookRunId(storyId) {
+    const fromEnv = (process.env.OPTIMUS_HOOK_RUN_ID || "").trim();
+    if (fromEnv)
+        return fromEnv;
+    return `${storyId}::tool_call`;
+}
+export async function reportToolCallRun(fields) {
+    try {
+        const hardwareUuid = resolveHardwareUuid();
+        const storyId = resolveStoryId();
+        const agent = resolveReportingAgent(fields.agent);
+        const events = [
+            {
+                kind: "functional_run",
+                unit: "tool_call",
+                command: fields.command ?? "optimus-tool-call",
+                hook_name: "tool_call",
+                story_id: storyId,
+                hook_run_id: resolveHookRunId(storyId),
+                outcome: fields.outcome,
+                exit_code: fields.exit_code ?? null,
+                message: fields.message ?? "",
+                detail: fields.detail ?? "",
+                ...(agent ? { agent } : {}),
+                metadata: metadata(agent),
+            },
+        ];
+        const signingPayload = { hardware_uuid: hardwareUuid, events };
+        let signature = "";
+        try {
+            const authKey = readStoredAuthKey({ authRelativePath: OPTIMUS_AUTH_KEY_RELATIVE_PATH });
+            if (authKey?.key)
+                signature = createSignature(signingPayload, authKey.key);
+        }
+        catch {
+            // unsigned is accepted by the backend (signature_valid=false)
+        }
+        const endpoint = `${loadEndpointBase().replace(/\/+$/, "")}/endpoint_security/api/client-event/`;
+        if (typeof fetch === "undefined")
+            return;
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), SEND_TIMEOUT_MS);
+        try {
+            await fetch(endpoint, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ ...signingPayload, signature }),
+                signal: controller.signal,
+            });
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    catch {
+        // never throw — telemetry must not break the tool-call hook
+    }
+}
+//# sourceMappingURL=client-event.js.map

package/dist/lib/client-event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-event.js","sourceRoot":"","sources":["../../src/lib/client-event.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AAEnE,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B,4FAA4F;AAC5F,SAAS,kBAAkB;IACzB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAA0C,CAAC;QACrG,MAAM,IAAI,GAAG,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,OAAO,GAAG,OAAO,MAAM,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,IAAI,IAAI,IAAI,OAAO;YAAE,OAAO,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC;QAClD,OAAO,OAAO,IAAI,IAAI,IAAI,SAAS,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,qBAAqB,GAAG,MAAO,CAAC;AAEtC,SAAS,cAAc;IACrB,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5D,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACzD,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;YACzF,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,qBAAqB,EAAE,CAAC;gBACrD,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;gBACnD,IAAI,QAAQ;oBAAE,OAAO,QAAQ,CAAC;YAChC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,YAAY,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AAEnF,0FAA0F;AAC1F,SAAS,qBAAqB,CAAC,QAAiB;IAC9C,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxG,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9C,MAAM,YAAY,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3D,IAAI,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC;QAAE,OAAO,YAAY,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC;AAYD,SAAS,QAAQ,CAAC,KAAoB;IACpC,MAAM,GAAG,GAA2B;QAClC,IAAI,EAAE,EAAE,CAAC,QAAQ,EAAE;QACnB,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE;QAC/C,IAAI,EAAE,OAAO,CAAC,OAAO;QACrB,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;QACxB,gBAAgB,EAAE,kBAAkB,EAAE;QACtC,MAAM,EAAE,WAAW;KACpB,CAAC;IACF,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B;QAAE,GAAG,CAAC,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IAC/G,IAAI,KAAK;QAAE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC;IACjC,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAAE,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC9E,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/D,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,OAAO,GAAG,OAAO,aAAa,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAyB;IAC/D,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,mBAAmB,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG;YACb;gBACE,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,mBAAmB;gBAC9C,SAAS,EAAE,WAAW;gBACtB,QAAQ,EAAE,OAAO;gBACjB,WAAW,EAAE,gBAAgB,CAAC,OAAO,CAAC;gBACtC,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;gBACnC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;gBAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;gBAC3B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3B,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC;aAC1B;SACF,CAAC;QACF,MAAM,cAAc,GAAG,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;QAC/D,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,8BAA8B,EAAE,CAAC,CAAC;YACxF,IAAI,OAAO,EAAE,GAAG;gBAAE,SAAS,GAAG,eAAe,CAAC,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;QAChE,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,gBAAgB,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,sCAAsC,CAAC;QACjG,IAAI,OAAO,KAAK,KAAK,WAAW;YAAE,OAAO;QACzC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,eAAe,CAAC,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,QAAQ,EAAE;gBACpB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,cAAc,EAAE,SAAS,EAAE,CAAC;gBACtD,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;AACH,CAAC"}

package/dist/lib/endpoint-config.d.ts

@@ -0,0 +1,2 @@
+export { loadEndpointBase } from "./tofu.js";
+//# sourceMappingURL=endpoint-config.d.ts.map

package/dist/lib/endpoint-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-config.d.ts","sourceRoot":"","sources":["../../src/lib/endpoint-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC"}

package/dist/lib/endpoint-config.js

@@ -0,0 +1,2 @@
+export { loadEndpointBase } from "./tofu.js";
+//# sourceMappingURL=endpoint-config.js.map

package/dist/lib/endpoint-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-config.js","sourceRoot":"","sources":["../../src/lib/endpoint-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC"}

package/dist/lib/hardware-uuid.d.ts

@@ -0,0 +1,7 @@
+/** Run a static shell command and return trimmed stdout (same pattern as log-llm-config). */
+export declare function readCommandOutput(command: string): string;
+/** Resolve hardware UUID from environment or macOS system commands (same strategy as log-llm-config). */
+declare function resolveHardwareUuid(): string;
+export declare function tryResolveHardwareUuid(): string | null;
+export { resolveHardwareUuid };
+//# sourceMappingURL=hardware-uuid.d.ts.map

package/dist/lib/hardware-uuid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hardware-uuid.d.ts","sourceRoot":"","sources":["../../src/lib/hardware-uuid.ts"],"names":[],"mappings":"AAEA,6FAA6F;AAC7F,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CASzD;AAED,yGAAyG;AACzG,iBAAS,mBAAmB,IAAI,MAAM,CAyBrC;AAED,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,IAAI,CAMtD;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/lib/hardware-uuid.js

@@ -0,0 +1,52 @@
+import { execSync } from "node:child_process";
+/** Run a static shell command and return trimmed stdout (same pattern as log-llm-config). */
+export function readCommandOutput(command) {
+    try {
+        return execSync(command, {
+            encoding: "utf8",
+            stdio: ["ignore", "pipe", "ignore"],
+        }).trim();
+    }
+    catch {
+        return "";
+    }
+}
+/** Resolve hardware UUID from environment or macOS system commands (same strategy as log-llm-config). */
+function resolveHardwareUuid() {
+    const envUuid = process.env.OPTIMUS_HARDWARE_UUID?.trim();
+    if (envUuid)
+        return envUuid;
+    try {
+        const ioregOutput = execSync("ioreg -rd1 -c IOPlatformExpertDevice", {
+            encoding: "utf8",
+        }).trim();
+        const ioregMatch = ioregOutput.match(/"IOPlatformUUID"\s*=\s*"([^"]+)"/i);
+        if (ioregMatch?.[1])
+            return ioregMatch[1];
+    }
+    catch {
+        // try next method
+    }
+    try {
+        const profilerOutput = execSync("system_profiler SPHardwareDataType", {
+            encoding: "utf8",
+        }).trim();
+        const profilerMatch = profilerOutput.match(/Hardware UUID:\s*([A-F0-9-]+)/i);
+        if (profilerMatch?.[1])
+            return profilerMatch[1];
+    }
+    catch {
+        // both methods failed
+    }
+    throw new Error("Unable to determine hardware UUID via ioreg or system_profiler.");
+}
+export function tryResolveHardwareUuid() {
+    try {
+        return resolveHardwareUuid();
+    }
+    catch {
+        return null;
+    }
+}
+export { resolveHardwareUuid };
+//# sourceMappingURL=hardware-uuid.js.map

package/dist/lib/hardware-uuid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hardware-uuid.js","sourceRoot":"","sources":["../../src/lib/hardware-uuid.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,6FAA6F;AAC7F,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,OAAO,EAAE;YACvB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,yGAAyG;AACzG,SAAS,mBAAmB;IAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;IAC1D,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAE5B,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,QAAQ,CAAC,sCAAsC,EAAE;YACnE,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC1E,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,QAAQ,CAAC,oCAAoC,EAAE;YACpE,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,aAAa,GAAG,cAAc,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC7E,IAAI,aAAa,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,sBAAsB;IACxB,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,IAAI,CAAC;QACH,OAAO,mBAAmB,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/lib/machine-auth.d.ts

@@ -0,0 +1,11 @@
+import { type StoredAuthKey } from "./tofu.js";
+/** Same path as log-llm-config: `~/.optimuslabs/management/auth/auth_key.txt` under `$HOME`. */
+export declare const OPTIMUS_AUTH_KEY_RELATIVE_PATH: string;
+/**
+ * Same TOFU + machine key flow as log-llm-config: verify stored key against
+ * `/endpoint_security/auth/` or request a new key and persist under HOME.
+ */
+export declare function ensureToolCallAuth(hardwareUuid: string): Promise<StoredAuthKey>;
+/** For tests: clear cached auth so HOME / env changes take effect. */
+export declare function resetToolCallAuthCache(): void;
+//# sourceMappingURL=machine-auth.d.ts.map

package/dist/lib/machine-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-auth.d.ts","sourceRoot":"","sources":["../../src/lib/machine-auth.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,aAAa,EACnB,MAAM,WAAW,CAAC;AAEnB,gGAAgG;AAChG,eAAO,MAAM,8BAA8B,QAK1C,CAAC;AAuBF;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,aAAa,CAAC,CAgBxB;AAED,sEAAsE;AACtE,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C"}

package/dist/lib/machine-auth.js

@@ -0,0 +1,46 @@
+import path from "node:path";
+import { ensureAuthentication, loadEndpointBase, readStoredAuthKey, } from "./tofu.js";
+/** Same path as log-llm-config: `~/.optimuslabs/management/auth/auth_key.txt` under `$HOME`. */
+export const OPTIMUS_AUTH_KEY_RELATIVE_PATH = path.join(".optimuslabs", "management", "auth", "auth_key.txt");
+let cached = null;
+async function postJsonForAuth(endpointUrl, body) {
+    const res = await fetch(endpointUrl, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(body),
+    });
+    const text = await res.text();
+    if (!res.ok) {
+        throw new Error(`HTTP ${res.status}: ${text ? text.slice(0, 200) : res.statusText}`);
+    }
+    if (!text)
+        return { status: "error", error: "empty_response" };
+    return JSON.parse(text);
+}
+/**
+ * Same TOFU + machine key flow as log-llm-config: verify stored key against
+ * `/endpoint_security/auth/` or request a new key and persist under HOME.
+ */
+export async function ensureToolCallAuth(hardwareUuid) {
+    const fromDisk = readStoredAuthKey({
+        authRelativePath: OPTIMUS_AUTH_KEY_RELATIVE_PATH,
+    });
+    if (!fromDisk?.key && cached?.hardwareUuid === hardwareUuid) {
+        cached = null;
+    }
+    if (cached?.hardwareUuid === hardwareUuid)
+        return cached.key;
+    const key = await ensureAuthentication({
+        hardwareUuid,
+        endpointBase: loadEndpointBase(),
+        authRelativePath: OPTIMUS_AUTH_KEY_RELATIVE_PATH,
+        postJson: postJsonForAuth,
+    });
+    cached = { hardwareUuid, key };
+    return key;
+}
+/** For tests: clear cached auth so HOME / env changes take effect. */
+export function resetToolCallAuthCache() {
+    cached = null;
+}
+//# sourceMappingURL=machine-auth.js.map

package/dist/lib/machine-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-auth.js","sourceRoot":"","sources":["../../src/lib/machine-auth.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,GAGlB,MAAM,WAAW,CAAC;AAEnB,gGAAgG;AAChG,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,CAAC,IAAI,CACrD,cAAc,EACd,YAAY,EACZ,MAAM,EACN,cAAc,CACf,CAAC;AAEF,IAAI,MAAM,GAAwD,IAAI,CAAC;AAEvE,KAAK,UAAU,eAAe,CAC5B,WAAmB,EACnB,IAA6B;IAE7B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,QAAQ,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,CACpE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqB,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,YAAoB;IAEpB,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QACjC,gBAAgB,EAAE,8BAA8B;KACjD,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,MAAM,EAAE,YAAY,KAAK,YAAY,EAAE,CAAC;QAC5D,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,EAAE,YAAY,KAAK,YAAY;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC;IAC7D,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC;QACrC,YAAY;QACZ,YAAY,EAAE,gBAAgB,EAAE;QAChC,gBAAgB,EAAE,8BAA8B;QAChD,QAAQ,EAAE,eAAe;KAC1B,CAAC,CAAC;IACH,MAAM,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC;IAC/B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,sBAAsB;IACpC,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC"}

package/dist/lib/pending-events.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Durable pending-event buffer for telemetry that failed to send.
+ *
+ * Note on scope: this buffer handles Optimus backend unavailability, not
+ * general internet connectivity loss. If the developer is fully offline,
+ * the AI agent itself cannot reach its API, so no tool calls are generated
+ * and hooks never fire — there is nothing to buffer. The realistic failure
+ * modes this covers are: Optimus backend deploying or restarting mid-session,
+ * transient 5xx errors, and network path issues specific to app.optimuslabs.io
+ * while the AI API endpoint remains reachable.
+ *
+ * On network failure or 5xx, events are appended as JSONL to
+ * ~/.optimuslabs/management/telemetry/pending_events.jsonl.
+ * On the next hook invocation, drainPendingEvents() atomically claims that
+ * file (via rename) so a concurrent hook process won't double-send the same
+ * batch.
+ */
+import type { TelemetryEvent } from "./telemetry.js";
+/**
+ * Resolve the telemetry directory at call time so that tests can override it
+ * by setting OPTIMUS_TELEMETRY_DIR before calling any function.
+ */
+export declare function getPendingDir(): string;
+export declare function getPendingFile(): string;
+export declare function getClientErrorsFile(): string;
+/**
+ * Append events to the pending file for retry on the next hook invocation.
+ * Used for network failures and transient server errors (5xx).
+ */
+export declare function appendPendingEvents(events: TelemetryEvent[]): void;
+/**
+ * Log events that failed with a 4xx HTTP error.
+ * These are not retried — the request was malformed or rejected by the server.
+ * Each line is a JSON object with the HTTP status, timestamp, and original event.
+ */
+export declare function appendClientErrors(events: TelemetryEvent[], httpStatus: number): void;
+/**
+ * Atomically claim and parse the pending file.
+ * Uses rename so two concurrent hook processes never read the same batch.
+ * Returns [] if the file does not exist or cannot be read.
+ *
+ * Crash safety: if `pending_events.jsonl` is missing but `pending_events.jsonl.draining`
+ * exists (process died after rename, before successful read), the draining file is moved
+ * back to the pending path and processed normally. If read/unlink fails after claim, the
+ * batch is renamed back to `pending_events.jsonl` so it can be retried instead of being
+ * stranded under `.draining`.
+ */
+export declare function drainPendingEvents(): TelemetryEvent[];
+//# sourceMappingURL=pending-events.d.ts.map

package/dist/lib/pending-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-events.d.ts","sourceRoot":"","sources":["../../src/lib/pending-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD;;;GAGG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAItC;AAED,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAOD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAWlE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,cAAc,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAgBrF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,IAAI,cAAc,EAAE,CAoDrD"}

package/dist/lib/pending-events.js

@@ -0,0 +1,135 @@
+/**
+ * Durable pending-event buffer for telemetry that failed to send.
+ *
+ * Note on scope: this buffer handles Optimus backend unavailability, not
+ * general internet connectivity loss. If the developer is fully offline,
+ * the AI agent itself cannot reach its API, so no tool calls are generated
+ * and hooks never fire — there is nothing to buffer. The realistic failure
+ * modes this covers are: Optimus backend deploying or restarting mid-session,
+ * transient 5xx errors, and network path issues specific to app.optimuslabs.io
+ * while the AI API endpoint remains reachable.
+ *
+ * On network failure or 5xx, events are appended as JSONL to
+ * ~/.optimuslabs/management/telemetry/pending_events.jsonl.
+ * On the next hook invocation, drainPendingEvents() atomically claims that
+ * file (via rename) so a concurrent hook process won't double-send the same
+ * batch.
+ */
+import { homedir } from "os";
+import path from "path";
+import fs from "fs";
+/**
+ * Resolve the telemetry directory at call time so that tests can override it
+ * by setting OPTIMUS_TELEMETRY_DIR before calling any function.
+ */
+export function getPendingDir() {
+    return process.env.OPTIMUS_TELEMETRY_DIR
+        ? path.resolve(process.env.OPTIMUS_TELEMETRY_DIR)
+        : path.join(homedir(), ".optimuslabs", "management", "telemetry");
+}
+export function getPendingFile() {
+    return path.join(getPendingDir(), "pending_events.jsonl");
+}
+export function getClientErrorsFile() {
+    return path.join(getPendingDir(), "client_errors.jsonl");
+}
+function writeLines(dir, file, lines) {
+    fs.mkdirSync(dir, { recursive: true });
+    fs.appendFileSync(file, lines.join("\n") + "\n", "utf8");
+}
+/**
+ * Append events to the pending file for retry on the next hook invocation.
+ * Used for network failures and transient server errors (5xx).
+ */
+export function appendPendingEvents(events) {
+    if (events.length === 0)
+        return;
+    const dir = getPendingDir();
+    try {
+        writeLines(dir, getPendingFile(), events.map((e) => JSON.stringify(e)));
+    }
+    catch (err) {
+        console.error("[optimus-tool-call] Failed to write pending events to disk:", err instanceof Error ? err.message : String(err));
+    }
+}
+/**
+ * Log events that failed with a 4xx HTTP error.
+ * These are not retried — the request was malformed or rejected by the server.
+ * Each line is a JSON object with the HTTP status, timestamp, and original event.
+ */
+export function appendClientErrors(events, httpStatus) {
+    if (events.length === 0)
+        return;
+    const dir = getPendingDir();
+    const failedAt = new Date().toISOString();
+    try {
+        writeLines(dir, getClientErrorsFile(), events.map((e) => JSON.stringify({ http_status: httpStatus, failed_at: failedAt, event: e })));
+    }
+    catch (err) {
+        console.error("[optimus-tool-call] Failed to log client errors to disk:", err instanceof Error ? err.message : String(err));
+    }
+}
+/**
+ * Atomically claim and parse the pending file.
+ * Uses rename so two concurrent hook processes never read the same batch.
+ * Returns [] if the file does not exist or cannot be read.
+ *
+ * Crash safety: if `pending_events.jsonl` is missing but `pending_events.jsonl.draining`
+ * exists (process died after rename, before successful read), the draining file is moved
+ * back to the pending path and processed normally. If read/unlink fails after claim, the
+ * batch is renamed back to `pending_events.jsonl` so it can be retried instead of being
+ * stranded under `.draining`.
+ */
+export function drainPendingEvents() {
+    const pendingFile = getPendingFile();
+    const tmpFile = pendingFile + ".draining";
+    // Recover a leftover claim file from a crash between rename and successful read/unlink.
+    if (!fs.existsSync(pendingFile) && fs.existsSync(tmpFile)) {
+        try {
+            fs.renameSync(tmpFile, pendingFile);
+        }
+        catch {
+            return [];
+        }
+    }
+    try {
+        fs.renameSync(pendingFile, tmpFile);
+    }
+    catch {
+        return [];
+    }
+    try {
+        const content = fs.readFileSync(tmpFile, "utf8");
+        const events = [];
+        for (const line of content.split("\n")) {
+            const trimmed = line.trim();
+            if (!trimmed)
+                continue;
+            try {
+                events.push(JSON.parse(trimmed));
+            }
+            catch {
+                // skip malformed lines
+            }
+        }
+        try {
+            fs.unlinkSync(tmpFile);
+        }
+        catch {
+            // best-effort cleanup; events are still returned
+        }
+        return events;
+    }
+    catch (err) {
+        try {
+            if (fs.existsSync(tmpFile)) {
+                fs.renameSync(tmpFile, pendingFile);
+            }
+        }
+        catch (restoreErr) {
+            console.error("[optimus-tool-call] Failed to restore pending_events after drain error:", restoreErr instanceof Error ? restoreErr.message : String(restoreErr), "| original:", err instanceof Error ? err.message : String(err));
+        }
+        return [];
+    }
+}
+//# sourceMappingURL=pending-events.js.map

package/dist/lib/pending-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-events.js","sourceRoot":"","sources":["../../src/lib/pending-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AAGpB;;;GAGG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACtC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACjD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,sBAAsB,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,qBAAqB,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,IAAY,EAAE,KAAe;IAC5D,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAwB;IAC1D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAChC,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,CAAC;QACH,UAAU,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,6DAA6D,EAC7D,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAwB,EAAE,UAAkB;IAC7E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAChC,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,UAAU,CACR,GAAG,EACH,mBAAmB,EAAE,EACrB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAC9F,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,0DAA0D,EAC1D,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,WAAW,GAAG,WAAW,CAAC;IAE1C,wFAAwF;IACxF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,MAAM,GAAqB,EAAE,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAC,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;QACnD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CACX,yEAAyE,EACzE,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EACrE,aAAa,EACb,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/lib/startup-sync.d.ts

@@ -0,0 +1,13 @@
+/**
+ * POST `/endpoint_security/startup/` with `metadata.user_profile` so `EndpointMachine.user_profile`
+ * stays fresh even when `log_uuid` is throttled (e.g. customer hooks with existing auth_key.txt).
+ * Signs `payload` with the stored machine key when present (same as `log-llm-config` startup_sender)
+ * so the backend does not revoke keys on every unsigned sync.
+ *
+ * Throttled (default 30 min) on success to avoid an extra HTTP round-trip on every tool call.
+ * After failures (network, non-2xx, etc.), exponential backoff caps repeated work so hooks are
+ * not blocked on every batch. Override interval with `OPTIMUS_STARTUP_SYNC_INTERVAL_MS` (set to
+ * `0` to sync on every batch when healthy). Skip entirely with `OPTIMUS_SKIP_STARTUP_SYNC=1`.
+ */
+export declare function ensureStartupMetadataSynced(hardwareUuid: string): Promise<void>;
+//# sourceMappingURL=startup-sync.d.ts.map

package/dist/lib/startup-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup-sync.d.ts","sourceRoot":"","sources":["../../src/lib/startup-sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAsEH,wBAAsB,2BAA2B,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA6GrF"}