@optimuslabs/runtime 0.3.3

package/dist/lib/startup-sync.js

@@ -0,0 +1,164 @@
+/**
+ * POST `/endpoint_security/startup/` with `metadata.user_profile` so `EndpointMachine.user_profile`
+ * stays fresh even when `log_uuid` is throttled (e.g. customer hooks with existing auth_key.txt).
+ * Signs `payload` with the stored machine key when present (same as `log-llm-config` startup_sender)
+ * so the backend does not revoke keys on every unsigned sync.
+ *
+ * Throttled (default 30 min) on success to avoid an extra HTTP round-trip on every tool call.
+ * After failures (network, non-2xx, etc.), exponential backoff caps repeated work so hooks are
+ * not blocked on every batch. Override interval with `OPTIMUS_STARTUP_SYNC_INTERVAL_MS` (set to
+ * `0` to sync on every batch when healthy). Skip entirely with `OPTIMUS_SKIP_STARTUP_SYNC=1`.
+ */
+import { buildStartupEndpointUrl, createSignature, loadEndpointBase, persistAuthKey, readStoredAuthKey, } from "./tofu.js";
+import { OPTIMUS_AUTH_KEY_RELATIVE_PATH, resetToolCallAuthCache } from "./machine-auth.js";
+import { resolveUserProfile } from "./user-profile.js";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+const emptyUserProfile = () => ({
+    generateduuid: "",
+    machineuuid: "",
+    mac_username: "",
+    machine_name: "",
+    github_username: "",
+    claude_email: "",
+    cursor_email: "",
+});
+const DEFAULT_STARTUP_SYNC_INTERVAL_MS = 1800000;
+const STARTUP_SYNC_FAILURE_BACKOFF_BASE_MS = 5000;
+const STARTUP_SYNC_FAILURE_BACKOFF_CAP_MS = 300000;
+let lastStartupAttemptEndedMs = 0;
+/** After a failed attempt, false until the next completed successful sync. */
+let lastStartupAttemptOk = true;
+let startupSyncFailureStreak = 0;
+function recordStartupSyncAttemptEnd(ok) {
+    lastStartupAttemptEndedMs = Date.now();
+    lastStartupAttemptOk = ok;
+    if (ok) {
+        startupSyncFailureStreak = 0;
+    }
+    else {
+        startupSyncFailureStreak += 1;
+    }
+}
+function shouldSkipStartupSyncDueToCooldown(now, intervalMs) {
+    if (lastStartupAttemptEndedMs <= 0)
+        return false;
+    const failureBackoffMs = !lastStartupAttemptOk
+        ? Math.min(STARTUP_SYNC_FAILURE_BACKOFF_CAP_MS, STARTUP_SYNC_FAILURE_BACKOFF_BASE_MS *
+            2 ** Math.min(Math.max(0, startupSyncFailureStreak - 1), 6))
+        : 0;
+    const successIntervalMs = lastStartupAttemptOk && intervalMs > 0 ? intervalMs : 0;
+    const cooldownMs = Math.max(failureBackoffMs, successIntervalMs);
+    return cooldownMs > 0 && now - lastStartupAttemptEndedMs < cooldownMs;
+}
+function readOrganizationUuid() {
+    const envValue = (process.env.OPTIMUS_ORGANIZATION_UUID || "").trim();
+    if (envValue)
+        return envValue;
+    try {
+        const orgUuidFile = path.join(os.homedir(), ".optimuslabs", "management", "org", "organization-uuid.txt");
+        return fs.readFileSync(orgUuidFile, "utf8").trim();
+    }
+    catch {
+        return "";
+    }
+}
+export async function ensureStartupMetadataSynced(hardwareUuid) {
+    if (process.env.OPTIMUS_SKIP_STARTUP_SYNC === "1")
+        return;
+    const rawInterval = process.env.OPTIMUS_STARTUP_SYNC_INTERVAL_MS;
+    let intervalMs = DEFAULT_STARTUP_SYNC_INTERVAL_MS;
+    if (rawInterval !== undefined && rawInterval !== "") {
+        const parsed = parseInt(rawInterval, 10);
+        intervalMs =
+            Number.isNaN(parsed) || parsed < 0 ? DEFAULT_STARTUP_SYNC_INTERVAL_MS : parsed;
+    }
+    const now = Date.now();
+    if (shouldSkipStartupSyncDueToCooldown(now, intervalMs)) {
+        return;
+    }
+    const timestamp = new Date().toISOString();
+    const payloadSummary = {
+        timestamp,
+        directory: process.cwd(),
+        hardware_uuid: hardwareUuid,
+    };
+    let user_profile;
+    try {
+        user_profile = { ...resolveUserProfile() };
+    }
+    catch (err) {
+        console.error(`[optimus-tool-call] resolveUserProfile failed; continuing startup sync with empty profile: ${err instanceof Error ? err.message : String(err)}`);
+        user_profile = emptyUserProfile();
+    }
+    const github_username = (typeof user_profile.github_username === "string" && user_profile.github_username.trim()) ||
+        process.env.GITHUB_USER ||
+        process.env.GH_USER ||
+        "";
+    const metadata = {
+        github_username,
+        org_identifier: process.env.GITHUB_ORG || "",
+        organization_uuid: readOrganizationUuid(),
+        repo_identifier: process.env.GITHUB_REPOSITORY || "",
+        branch: process.env.GITHUB_REF_NAME || process.env.BRANCH_NAME || "",
+        commit_sha: process.env.GITHUB_SHA || "",
+        agent_name: process.env.OPTIMUS_AGENT || "",
+        user_profile,
+    };
+    const body = {
+        hardware_uuid: hardwareUuid,
+        payload: payloadSummary,
+        metadata,
+        scan_timestamp: timestamp,
+    };
+    const storedKey = readStoredAuthKey({
+        authRelativePath: OPTIMUS_AUTH_KEY_RELATIVE_PATH,
+    });
+    if (storedKey?.key && storedKey.hardware_uuid === hardwareUuid) {
+        body.signature = createSignature(payloadSummary, storedKey.key);
+        if (storedKey.key_id)
+            body.key_id = storedKey.key_id;
+    }
+    const url = buildStartupEndpointUrl(loadEndpointBase());
+    try {
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), 5000);
+        let res;
+        try {
+            res = await fetch(url, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify(body),
+                signal: controller.signal,
+            });
+        }
+        finally {
+            clearTimeout(timeoutId);
+        }
+        const text = await res.text();
+        if (!res.ok) {
+            console.error(`[optimus-tool-call] startup metadata sync failed ${res.status}: ${text ? text.slice(0, 240) : res.statusText}`);
+            recordStartupSyncAttemptEnd(false);
+            return;
+        }
+        let parsed = {};
+        try {
+            parsed = JSON.parse(text);
+        }
+        catch {
+            recordStartupSyncAttemptEnd(false);
+            return;
+        }
+        if (parsed.status === "key_issued" && typeof parsed.key === "string") {
+            persistAuthKey(parsed.key, typeof parsed.key_id === "string" ? parsed.key_id : null, hardwareUuid, { authRelativePath: OPTIMUS_AUTH_KEY_RELATIVE_PATH });
+            resetToolCallAuthCache();
+        }
+        recordStartupSyncAttemptEnd(true);
+    }
+    catch (err) {
+        console.error(`[optimus-tool-call] startup metadata sync error: ${err instanceof Error ? err.message : String(err)}`);
+        recordStartupSyncAttemptEnd(false);
+    }
+}
+//# sourceMappingURL=startup-sync.js.map

package/dist/lib/startup-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup-sync.js","sourceRoot":"","sources":["../../src/lib/startup-sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,iBAAiB,GAClB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,8BAA8B,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,EAAE,kBAAkB,EAAoB,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,gBAAgB,GAAG,GAAgB,EAAE,CAAC,CAAC;IAC3C,aAAa,EAAE,EAAE;IACjB,WAAW,EAAE,EAAE;IACf,YAAY,EAAE,EAAE;IAChB,YAAY,EAAE,EAAE;IAChB,eAAe,EAAE,EAAE;IACnB,YAAY,EAAE,EAAE;IAChB,YAAY,EAAE,EAAE;CACjB,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,OAAS,CAAC;AACnD,MAAM,oCAAoC,GAAG,IAAK,CAAC;AACnD,MAAM,mCAAmC,GAAG,MAAO,CAAC;AAEpD,IAAI,yBAAyB,GAAG,CAAC,CAAC;AAClC,8EAA8E;AAC9E,IAAI,oBAAoB,GAAG,IAAI,CAAC;AAChC,IAAI,wBAAwB,GAAG,CAAC,CAAC;AAEjC,SAAS,2BAA2B,CAAC,EAAW;IAC9C,yBAAyB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvC,oBAAoB,GAAG,EAAE,CAAC;IAC1B,IAAI,EAAE,EAAE,CAAC;QACP,wBAAwB,GAAG,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,wBAAwB,IAAI,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,kCAAkC,CAAC,GAAW,EAAE,UAAkB;IACzE,IAAI,yBAAyB,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,gBAAgB,GAAG,CAAC,oBAAoB;QAC5C,CAAC,CAAC,IAAI,CAAC,GAAG,CACN,mCAAmC,EACnC,oCAAoC;YAClC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,wBAAwB,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAC9D;QACH,CAAC,CAAC,CAAC,CAAC;IACN,MAAM,iBAAiB,GAAG,oBAAoB,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;IACjE,OAAO,UAAU,GAAG,CAAC,IAAI,GAAG,GAAG,yBAAyB,GAAG,UAAU,CAAC;AACxE,CAAC;AAED,SAAS,oBAAoB;IAC3B,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtE,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,uBAAuB,CAAC,CAAC;QAC1G,OAAO,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,YAAoB;IACpE,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG;QAAE,OAAO;IAE1D,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC;IACjE,IAAI,UAAU,GAAG,gCAAgC,CAAC;IAClD,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACzC,UAAU;YACR,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,MAAM,CAAC;IACnF,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,kCAAkC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC;QACxD,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,cAAc,GAAG;QACrB,SAAS;QACT,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE;QACxB,aAAa,EAAE,YAAY;KAC5B,CAAC;IACF,IAAI,YAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,YAAY,GAAG,EAAE,GAAG,kBAAkB,EAAE,EAAE,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,8FACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;QACF,YAAY,GAAG,gBAAgB,EAAE,CAAC;IACpC,CAAC;IACD,MAAM,eAAe,GACnB,CAAC,OAAO,YAAY,CAAC,eAAe,KAAK,QAAQ,IAAI,YAAY,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QACzF,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,OAAO,CAAC,GAAG,CAAC,OAAO;QACnB,EAAE,CAAC;IACL,MAAM,QAAQ,GAAG;QACf,eAAe;QACf,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE;QAC5C,iBAAiB,EAAE,oBAAoB,EAAE;QACzC,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE;QACpD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE;QACpE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE;QACxC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE;QAC3C,YAAY;KACb,CAAC;IACF,MAAM,IAAI,GAA4B;QACpC,aAAa,EAAE,YAAY;QAC3B,OAAO,EAAE,cAAc;QACvB,QAAQ;QACR,cAAc,EAAE,SAAS;KAC1B,CAAC;IAEF,MAAM,SAAS,GAAG,iBAAiB,CAAC;QAClC,gBAAgB,EAAE,8BAA8B;KACjD,CAAC,CAAC;IACH,IAAI,SAAS,EAAE,GAAG,IAAI,SAAS,CAAC,aAAa,KAAK,YAAY,EAAE,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAG,eAAe,CAAC,cAAc,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QAChE,IAAI,SAAS,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IACvD,CAAC;IAED,MAAM,GAAG,GAAG,uBAAuB,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAC7D,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CACX,oDAAoD,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,CAChH,CAAC;YACF,2BAA2B,CAAC,KAAK,CAAC,CAAC;YACnC,OAAO;QACT,CAAC;QACD,IAAI,MAAM,GAA4B,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B,CAAC,KAAK,CAAC,CAAC;YACnC,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrE,cAAc,CACZ,MAAM,CAAC,GAAG,EACV,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EACxD,YAAY,EACZ,EAAE,gBAAgB,EAAE,8BAA8B,EAAE,CACrD,CAAC;YACF,sBAAsB,EAAE,CAAC;QAC3B,CAAC;QACD,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,oDAAoD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACvG,CAAC;QACF,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;AACH,CAAC"}

package/dist/lib/streaming.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Telemetry streaming — batch and send events to Optimus backend.
+ */
+import { TelemetryEvent } from "./telemetry.js";
+/** Thrown by sendBatch when the server rejects the request with a 4xx status. Not retryable. */
+export declare class ClientError extends Error {
+    readonly httpStatus: number;
+    constructor(status: number, message: string);
+}
+/**
+ * Route a send failure to the right local buffer.
+ * 4xx → client_errors.jsonl (logged, never retried)
+ * anything else → pending_events.jsonl (retried on next hook invocation)
+ * Exported for unit testing without needing to mock the HTTP stack.
+ */
+export declare function routeFailure(events: TelemetryEvent[], err: unknown): void;
+/**
+ * Resolved batch size from OPTIMUS_BATCH_SIZE (read at call time so tests can set env after import).
+ * Invalid or non-positive values fall back to 1 so `length >= batchSize` stays meaningful.
+ */
+export declare function getBatchSize(): number;
+/**
+ * Add an event to the queue and flush if needed.
+ */
+export declare function queueEvent(event: TelemetryEvent): Promise<void>;
+/**
+ * Flush all queued events to backend.
+ */
+export declare function flushEvents(): Promise<void>;
+/**
+ * Ensure all events are flushed on process exit.
+ * Uses beforeExit to allow async flush before process terminates.
+ */
+export declare function ensureShutdown(): void;
+//# sourceMappingURL=streaming.d.ts.map

package/dist/lib/streaming.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"streaming.d.ts","sourceRoot":"","sources":["../../src/lib/streaming.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAMhD,gGAAgG;AAChG,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAChB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAI5C;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,cAAc,EAAE,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI,CAMzE;AA+BD;;;GAGG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAMrC;AAoBD;;GAEG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBrE;AAED;;GAEG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CA6BjD;AAwLD;;;GAGG;AACH,wBAAgB,cAAc,IAAI,IAAI,CA0BrC"}

package/dist/lib/streaming.js

@@ -0,0 +1,326 @@
+/**
+ * Telemetry streaming — batch and send events to Optimus backend.
+ */
+import { createSignature } from "./tofu.js";
+import { ensureToolCallAuth } from "./machine-auth.js";
+import { ensureStartupMetadataSynced } from "./startup-sync.js";
+import { cloneToolCallMetadataForWire } from "./telemetry/wire-metadata.js";
+import { loadEndpointBase } from "./endpoint-config.js";
+import { tryResolveHardwareUuid } from "./hardware-uuid.js";
+import { appendPendingEvents, appendClientErrors, drainPendingEvents } from "./pending-events.js";
+/** Thrown by sendBatch when the server rejects the request with a 4xx status. Not retryable. */
+export class ClientError extends Error {
+    constructor(status, message) {
+        super(message);
+        this.httpStatus = status;
+    }
+}
+/**
+ * Route a send failure to the right local buffer.
+ * 4xx → client_errors.jsonl (logged, never retried)
+ * anything else → pending_events.jsonl (retried on next hook invocation)
+ * Exported for unit testing without needing to mock the HTTP stack.
+ */
+export function routeFailure(events, err) {
+    if (err instanceof ClientError) {
+        appendClientErrors(events, err.httpStatus);
+    }
+    else {
+        appendPendingEvents(events);
+    }
+}
+const DEBUG = !!process.env.OPTIMUS_DEBUG;
+const dbg = (...args) => { if (DEBUG)
+    console.error(...args); };
+function toolCallAuditLogEnabled() {
+    const v = (process.env.OPTIMUS_TOOL_CALL_LOG || "").trim().toLowerCase();
+    return v === "1" || v === "true" || v === "yes";
+}
+/** One-line stderr audit when OPTIMUS_TOOL_CALL_LOG is set (hooks append stderr to hook-errors.log). */
+function logBatchSent(endpoint, httpStatus, eventCount) {
+    if (!toolCallAuditLogEnabled()) {
+        return;
+    }
+    try {
+        const u = new URL(endpoint);
+        console.error(`[optimus-tool-call] telemetry: POST ${u.pathname} -> ${httpStatus} (${eventCount} event(s), host=${u.host})`);
+    }
+    catch {
+        console.error(`[optimus-tool-call] telemetry: POST batch -> ${httpStatus} (${eventCount} event(s))`);
+    }
+}
+// Backend configuration
+const OPTIMUS_API_BASE = loadEndpointBase();
+const BATCH_TIMEOUT_MS = 5000; // 5 seconds
+/**
+ * Resolved batch size from OPTIMUS_BATCH_SIZE (read at call time so tests can set env after import).
+ * Invalid or non-positive values fall back to 1 so `length >= batchSize` stays meaningful.
+ */
+export function getBatchSize() {
+    const n = parseInt(process.env.OPTIMUS_BATCH_SIZE || "1", 10);
+    if (!Number.isFinite(n) || n < 1) {
+        return 1;
+    }
+    return Math.floor(n);
+}
+// In-memory event queue
+let eventQueue = [];
+let batchTimer = null;
+// Drain the pending file once per process lifetime, before the first send.
+let pendingDrained = false;
+async function sendPendingIfAny() {
+    const pending = drainPendingEvents();
+    if (pending.length === 0)
+        return;
+    dbg(`[optimus-tool-call] Retrying ${pending.length} pending event(s) from disk`);
+    try {
+        await sendBatch(pending);
+    }
+    catch (err) {
+        routeFailure(pending, err);
+    }
+}
+/**
+ * Add an event to the queue and flush if needed.
+ */
+export async function queueEvent(event) {
+    if (!event) {
+        return;
+    }
+    if (!pendingDrained) {
+        await sendPendingIfAny();
+        pendingDrained = true;
+    }
+    eventQueue.push(event);
+    // Flush immediately if batch size reached
+    if (eventQueue.length >= getBatchSize()) {
+        await flushEvents();
+    }
+    else if (!batchTimer) {
+        // Set timer for delayed flush if not already set
+        batchTimer = setTimeout(() => {
+            flushEvents().catch((err) => {
+                // Log but don't block
+                console.error("[optimus-tool-call] Failed to flush events:", err);
+            });
+            batchTimer = null;
+        }, BATCH_TIMEOUT_MS);
+    }
+}
+/**
+ * Flush all queued events to backend.
+ */
+export async function flushEvents() {
+    if (eventQueue.length === 0) {
+        return;
+    }
+    // Clear timer
+    if (batchTimer) {
+        clearTimeout(batchTimer);
+        batchTimer = null;
+    }
+    const eventsToSend = eventQueue.splice(0, eventQueue.length);
+    try {
+        await sendBatch(eventsToSend);
+    }
+    catch (err) {
+        if (err instanceof ClientError) {
+            console.error(`[optimus-tool-call] HTTP ${err.httpStatus} for ${eventsToSend.length} event(s), logging to disk (will not retry):`, err.message);
+        }
+        else {
+            console.error(`[optimus-tool-call] Failed to send ${eventsToSend.length} event(s), buffering for retry:`, err instanceof Error ? err.message : String(err));
+        }
+        routeFailure(eventsToSend, err);
+    }
+}
+/**
+ * Clone events for HTTP: drop metadata keys the backend recomputes (classification,
+ * MCP split, identity) so the client cannot spoof them.
+ */
+function eventsWireFromTelemetry(events) {
+    return events.map((e) => {
+        const raw = JSON.parse(JSON.stringify(e));
+        const meta = raw.tool_call_metadata;
+        const cleaned = cloneToolCallMetadataForWire(meta);
+        if (cleaned !== undefined) {
+            raw.tool_call_metadata = cleaned;
+        }
+        return raw;
+    });
+}
+/**
+ * Send batch of events to Django backend.
+ */
+async function sendBatch(events) {
+    if (events.length === 0) {
+        return;
+    }
+    dbg(`[optimus-tool-call] Sending ${events.length} events to backend...`);
+    dbg(`[optimus-tool-call] Event agents:`, events.map(e => e.agent_identity).join(", "));
+    const hardwareUuid = tryResolveHardwareUuid();
+    if (!hardwareUuid) {
+        const err = "Cannot send tool-call telemetry: set OPTIMUS_HARDWARE_UUID or run on a host with a hardware UUID.";
+        console.error(`[optimus-tool-call] ERROR: ${err}`);
+        throw new Error(err);
+    }
+    dbg(`[optimus-tool-call] Hardware UUID: ${hardwareUuid}`);
+    try {
+        await ensureStartupMetadataSynced(hardwareUuid);
+        dbg(`[optimus-tool-call] Startup metadata synced`);
+    }
+    catch (err) {
+        console.error(`[optimus-tool-call] ERROR syncing startup metadata:`, err);
+        throw err;
+    }
+    const eventsWire = eventsWireFromTelemetry(events);
+    dbg(`[optimus-tool-call] Events wire:`, JSON.stringify(eventsWire, null, 2).slice(0, 500));
+    const signingPayload = {
+        hardware_uuid: hardwareUuid,
+        events: eventsWire,
+    };
+    dbg(`[optimus-tool-call] Payload ready, signing...`);
+    const auth = await ensureToolCallAuth(hardwareUuid);
+    dbg(`[optimus-tool-call] Auth obtained, key_id: ${auth.key_id}`);
+    const signature = createSignature(signingPayload, auth.key);
+    const payload = {
+        ...signingPayload,
+        signature,
+        key_id: auth.key_id || "",
+    };
+    const endpoint = new URL("api/tool-calls/events/batch_create/", OPTIMUS_API_BASE).toString();
+    dbg(`[optimus-tool-call] Endpoint: ${endpoint}`);
+    dbg(`[optimus-tool-call] Payload size: ${JSON.stringify(payload).length} bytes`);
+    const headers = {
+        "Content-Type": "application/json",
+    };
+    try {
+        // Use fetch if available (Node 18+), fall back to node:http
+        if (typeof fetch !== "undefined") {
+            dbg(`[optimus-tool-call] Using fetch to send...`);
+            const controller = new AbortController();
+            const timeoutId = setTimeout(() => controller.abort(), 5000);
+            try {
+                const response = await fetch(endpoint, {
+                    method: "POST",
+                    headers,
+                    body: JSON.stringify(payload),
+                    signal: controller.signal,
+                });
+                dbg(`[optimus-tool-call] Response status: ${response.status} ${response.statusText}`);
+                if (!response.ok) {
+                    const responseText = await response.text();
+                    dbg(`[optimus-tool-call] Response body: ${responseText}`);
+                    const msg = `HTTP ${response.status}: ${response.statusText} - ${responseText}`;
+                    if (response.status >= 400 && response.status < 500) {
+                        throw new ClientError(response.status, msg);
+                    }
+                    throw new Error(msg);
+                }
+                logBatchSent(endpoint, response.status, events.length);
+                dbg(`[optimus-tool-call] ✅ Successfully sent ${events.length} events`);
+            }
+            finally {
+                clearTimeout(timeoutId);
+            }
+        }
+        else {
+            // Fallback for older Node versions
+            dbg(`[optimus-tool-call] Using http fallback...`);
+            await sendViaHttp(endpoint, headers, payload, events.length);
+        }
+    }
+    catch (err) {
+        if (err instanceof ClientError) {
+            console.error(`[optimus-tool-call] ❌ ${err.message}`);
+            throw err;
+        }
+        const errorMsg = `Failed to send events to ${endpoint}: ${err instanceof Error ? err.message : String(err)}`;
+        console.error(`[optimus-tool-call] ❌ ${errorMsg}`);
+        throw new Error(errorMsg);
+    }
+}
+/**
+ * Fallback HTTP POST using node:http for older Node versions.
+ */
+function sendViaHttp(endpoint, headers, payload, eventCount) {
+    return new Promise((resolve, reject) => {
+        try {
+            const url = new URL(endpoint);
+            const protocol = url.protocol === "https:" ? require("https") : require("http");
+            const options = {
+                hostname: url.hostname,
+                port: url.port,
+                path: url.pathname + url.search,
+                method: "POST",
+                headers: {
+                    ...headers,
+                    "Content-Length": Buffer.byteLength(JSON.stringify(payload)),
+                },
+                timeout: 5000,
+            };
+            const req = protocol.request(options, (res) => {
+                let data = "";
+                res.on("data", (chunk) => {
+                    data += chunk;
+                });
+                res.on("end", () => {
+                    if (res.statusCode && res.statusCode >= 200 && res.statusCode < 300) {
+                        logBatchSent(endpoint, res.statusCode, eventCount);
+                        resolve();
+                    }
+                    else if (res.statusCode && res.statusCode >= 400 && res.statusCode < 500) {
+                        reject(new ClientError(res.statusCode, `HTTP ${res.statusCode}: ${data || res.statusMessage || "Client error"}`));
+                    }
+                    else {
+                        reject(new Error(`HTTP ${res.statusCode}: ${res.statusMessage || "Unknown error"}`));
+                    }
+                });
+            });
+            req.on("error", (err) => {
+                reject(err);
+            });
+            req.on("timeout", () => {
+                req.destroy();
+                reject(new Error("Request timeout"));
+            });
+            req.write(JSON.stringify(payload));
+            req.end();
+        }
+        catch (err) {
+            reject(err);
+        }
+    });
+}
+/**
+ * Ensure all events are flushed on process exit.
+ * Uses beforeExit to allow async flush before process terminates.
+ */
+export function ensureShutdown() {
+    // beforeExit allows async operations, unlike exit
+    process.on("beforeExit", async () => {
+        if (eventQueue.length > 0) {
+            try {
+                await flushEvents();
+            }
+            catch (err) {
+                console.error("[optimus-tool-call] Failed to flush events on shutdown:", err);
+            }
+        }
+    });
+    // Also handle explicit termination signals
+    const signals = ["SIGTERM", "SIGINT"];
+    signals.forEach((sig) => {
+        process.on(sig, async () => {
+            if (eventQueue.length > 0) {
+                try {
+                    await flushEvents();
+                }
+                catch (err) {
+                    console.error(`[optimus-tool-call] Failed to flush events on ${sig}:`, err);
+                }
+            }
+            process.exit(0);
+        });
+    });
+}
+//# sourceMappingURL=streaming.js.map

package/dist/lib/streaming.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streaming.js","sourceRoot":"","sources":["../../src/lib/streaming.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAEhE,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAElG,gGAAgG;AAChG,MAAM,OAAO,WAAY,SAAQ,KAAK;IAEpC,YAAY,MAAc,EAAE,OAAe;QACzC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;IAC3B,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,MAAwB,EAAE,GAAY;IACjE,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;QAC/B,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;AAC1C,MAAM,GAAG,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE,GAAG,IAAI,KAAK;IAAE,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAE3E,SAAS,uBAAuB;IAC9B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzE,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,CAAC;AAClD,CAAC;AAED,wGAAwG;AACxG,SAAS,YAAY,CAAC,QAAgB,EAAE,UAAkB,EAAE,UAAkB;IAC5E,IAAI,CAAC,uBAAuB,EAAE,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5B,OAAO,CAAC,KAAK,CACX,uCAAuC,CAAC,CAAC,QAAQ,OAAO,UAAU,KAAK,UAAU,mBAAmB,CAAC,CAAC,IAAI,GAAG,CAC9G,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CACX,gDAAgD,UAAU,KAAK,UAAU,YAAY,CACtF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,wBAAwB;AACxB,MAAM,gBAAgB,GAAG,gBAAgB,EAAE,CAAC;AAC5C,MAAM,gBAAgB,GAAG,IAAI,CAAC,CAAC,YAAY;AAE3C;;;GAGG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AAED,wBAAwB;AACxB,IAAI,UAAU,GAAqB,EAAE,CAAC;AACtC,IAAI,UAAU,GAA0B,IAAI,CAAC;AAE7C,2EAA2E;AAC3E,IAAI,cAAc,GAAG,KAAK,CAAC;AAE3B,KAAK,UAAU,gBAAgB;IAC7B,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,GAAG,CAAC,gCAAgC,OAAO,CAAC,MAAM,6BAA6B,CAAC,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAqB;IACpD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IAED,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,gBAAgB,EAAE,CAAC;QACzB,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAEvB,0CAA0C;IAC1C,IAAI,UAAU,CAAC,MAAM,IAAI,YAAY,EAAE,EAAE,CAAC;QACxC,MAAM,WAAW,EAAE,CAAC;IACtB,CAAC;SAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACvB,iDAAiD;QACjD,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;YAC3B,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC1B,sBAAsB;gBACtB,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,GAAG,CAAC,CAAC;YACpE,CAAC,CAAC,CAAC;YACH,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,cAAc;IACd,IAAI,UAAU,EAAE,CAAC;QACf,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAE7D,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,YAAY,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;YAC/B,OAAO,CAAC,KAAK,CACX,4BAA4B,GAAG,CAAC,UAAU,QAAQ,YAAY,CAAC,MAAM,8CAA8C,EACnH,GAAG,CAAC,OAAO,CACZ,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CACX,sCAAsC,YAAY,CAAC,MAAM,iCAAiC,EAC1F,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;QACJ,CAAC;QACD,YAAY,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAC9B,MAAwB;IAExB,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAA4B,CAAC;QACrE,MAAM,IAAI,GAAG,GAAG,CAAC,kBAAkB,CAAC;QACpC,MAAM,OAAO,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,GAAG,CAAC,kBAAkB,GAAG,OAAO,CAAC;QACnC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,SAAS,CAAC,MAAwB;IAC/C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IAED,GAAG,CAAC,+BAA+B,MAAM,CAAC,MAAM,uBAAuB,CAAC,CAAC;IACzE,GAAG,CAAC,mCAAmC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEvF,MAAM,YAAY,GAAG,sBAAsB,EAAE,CAAC;IAC9C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,mGAAmG,CAAC;QAChH,OAAO,CAAC,KAAK,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,GAAG,CAAC,sCAAsC,YAAY,EAAE,CAAC,CAAC;IAE1D,IAAI,CAAC;QACH,MAAM,2BAA2B,CAAC,YAAY,CAAC,CAAC;QAChD,GAAG,CAAC,6CAA6C,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,qDAAqD,EAAE,GAAG,CAAC,CAAC;QAC1E,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACnD,GAAG,CAAC,kCAAkC,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAE3F,MAAM,cAAc,GAA4B;QAC9C,aAAa,EAAE,YAAY;QAC3B,MAAM,EAAE,UAAU;KACnB,CAAC;IACF,GAAG,CAAC,+CAA+C,CAAC,CAAC;IAErD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACpD,GAAG,CAAC,8CAA8C,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,eAAe,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5D,MAAM,OAAO,GAA4B;QACvC,GAAG,cAAc;QACjB,SAAS;QACT,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;KAC1B,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,qCAAqC,EAAE,gBAAgB,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC7F,GAAG,CAAC,iCAAiC,QAAQ,EAAE,CAAC,CAAC;IACjD,GAAG,CAAC,qCAAqC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC;IAEjF,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IAEF,IAAI,CAAC;QACH,4DAA4D;QAC5D,IAAI,OAAO,KAAK,KAAK,WAAW,EAAE,CAAC;YACjC,GAAG,CAAC,4CAA4C,CAAC,CAAC;YAClD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;YAE7D,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;oBACrC,MAAM,EAAE,MAAM;oBACd,OAAO;oBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;oBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBAEH,GAAG,CAAC,wCAAwC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;gBAEtF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBAC3C,GAAG,CAAC,sCAAsC,YAAY,EAAE,CAAC,CAAC;oBAC1D,MAAM,GAAG,GAAG,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,MAAM,YAAY,EAAE,CAAC;oBAChF,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;wBACpD,MAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;oBAC9C,CAAC;oBACD,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;gBACvB,CAAC;gBAED,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBACvD,GAAG,CAAC,2CAA2C,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC;YACzE,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,mCAAmC;YACnC,GAAG,CAAC,4CAA4C,CAAC,CAAC;YAClD,MAAM,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;YAC/B,OAAO,CAAC,KAAK,CAAC,yBAAyB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACtD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,QAAQ,GAAG,4BAA4B,QAAQ,KACnD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAClB,QAAgB,EAChB,OAA+B,EAC/B,OAAgC,EAChC,UAAkB;IAElB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAEhF,MAAM,OAAO,GAAG;gBACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM;gBAC/B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,GAAG,OAAO;oBACV,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;iBAC7D;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;YAEF,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAQ,EAAE,EAAE;gBACjD,IAAI,IAAI,GAAG,EAAE,CAAC;gBACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAU,EAAE,EAAE;oBAC5B,IAAI,IAAI,KAAK,CAAC;gBAChB,CAAC,CAAC,CAAC;gBACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;wBACpE,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;wBACnD,OAAO,EAAE,CAAC;oBACZ,CAAC;yBAAM,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;wBAC3E,MAAM,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,GAAG,CAAC,UAAU,KAAK,IAAI,IAAI,GAAG,CAAC,aAAa,IAAI,cAAc,EAAE,CAAC,CAAC,CAAC;oBACpH,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,aAAa,IAAI,eAAe,EAAE,CAAC,CAAC,CAAC;oBACvF,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;gBAC7B,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;gBACrB,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YACnC,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc;IAC5B,kDAAkD;IAClD,OAAO,CAAC,EAAE,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE;QAClC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,WAAW,EAAE,CAAC;YACtB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,yDAAyD,EAAE,GAAG,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,2CAA2C;IAC3C,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACtC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACtB,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;YACzB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC;oBACH,MAAM,WAAW,EAAE,CAAC;gBACtB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CAAC,iDAAiD,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC9E,CAAC;YACH,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/telemetry/build-event.d.ts

@@ -0,0 +1,10 @@
+import type { TelemetryEvent, ToolInvocation } from "./types.js";
+/**
+ * Build a telemetry event from a tool invocation.
+ *
+ * Sends raw hook fields only. Classification (`action_type`, `command_components`,
+ * paths, patterns, MCP split) is performed server-side in Django
+ * (`tool_call_audit.classification.enrich`).
+ */
+export declare function buildTelemetryEvent(inv: ToolInvocation | null | undefined, agentIdentity?: string, sessionId?: string | null): TelemetryEvent | null;
+//# sourceMappingURL=build-event.d.ts.map

package/dist/lib/telemetry/build-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-event.d.ts","sourceRoot":"","sources":["../../../src/lib/telemetry/build-event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjE;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,cAAc,GAAG,IAAI,GAAG,SAAS,EACtC,aAAa,GAAE,MAAkB,EACjC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GACxB,cAAc,GAAG,IAAI,CA6BvB"}

package/dist/lib/telemetry/build-event.js

@@ -0,0 +1,34 @@
+/**
+ * Build a telemetry event from a tool invocation.
+ *
+ * Sends raw hook fields only. Classification (`action_type`, `command_components`,
+ * paths, patterns, MCP split) is performed server-side in Django
+ * (`tool_call_audit.classification.enrich`).
+ */
+export function buildTelemetryEvent(inv, agentIdentity = "unknown", sessionId) {
+    if (!inv) {
+        return null;
+    }
+    const toolName = inv.tool_name;
+    const toolNameNorm = typeof toolName === "string" ? toolName.trim() : "";
+    const normalizedToolInput = inv.tool_input || {};
+    const hookHash = (process.env.OPTIMUS_HOOK_HASH || "").trim() || null;
+    const meta = {
+        tool_name: toolNameNorm || toolName,
+        tool_input: normalizedToolInput,
+        ...(inv.user_prompt ? { user_prompt: inv.user_prompt } : {}),
+        ...(inv.raw_event ? { raw_event: inv.raw_event } : {}),
+        ...(hookHash ? { hook_hash: hookHash } : {}),
+    };
+    return {
+        timestamp: new Date().toISOString(),
+        agent_identity: agentIdentity,
+        event_type: "tool_call",
+        session_id: sessionId,
+        tool_use_id: inv.tool_use_id || null,
+        hook_event_name: inv.hook_event_name || null,
+        working_directory: inv.cwd || null,
+        tool_call_metadata: meta,
+    };
+}
+//# sourceMappingURL=build-event.js.map

package/dist/lib/telemetry/build-event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-event.js","sourceRoot":"","sources":["../../../src/lib/telemetry/build-event.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAsC,EACtC,gBAAwB,SAAS,EACjC,SAAyB;IAEzB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC;IAC/B,MAAM,YAAY,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,MAAM,mBAAmB,GAA4B,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;IAE1E,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAEtE,MAAM,IAAI,GAAyC;QACjD,SAAS,EAAE,YAAY,IAAI,QAAQ;QACnC,UAAU,EAAE,mBAAmB;QAC/B,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC;IAEF,OAAO;QACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,cAAc,EAAE,aAAa;QAC7B,UAAU,EAAE,WAAW;QACvB,UAAU,EAAE,SAAS;QACrB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;QACpC,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,IAAI;QAC5C,iBAAiB,EAAE,GAAG,CAAC,GAAG,IAAI,IAAI;QAClC,kBAAkB,EAAE,IAAI;KACzB,CAAC;AACJ,CAAC"}

package/dist/lib/telemetry/canonical.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Canonical event schema — minimal field extraction from Claude and Cursor hook payloads.
+ *
+ * No normalization happens here. Raw tool_name, tool_input, and the full raw_event
+ * are forwarded to the backend, which owns all agent-specific canonicalization and
+ * rule evaluation (see tool_call_audit/classification/enrich.py).
+ *
+ * The only client-side work is:
+ *   - agent detection (to set agent_identity)
+ *   - session_id / tool_use_id extraction (needed for auth and dedup)
+ *   - user_prompt extraction (requires reading local files the backend cannot access)
+ */
+export interface CanonicalHookInput {
+    agent: "claude" | "cursor" | "unknown";
+    hook_event_name: string;
+    tool_name: string;
+    tool_input: Record<string, unknown>;
+    tool_use_id?: string | null;
+    session_id?: string | null;
+    cwd?: string | null;
+    model?: string | null;
+    user_prompt?: string | null;
+    raw_event: Record<string, unknown>;
+}
+export declare function normalizeToCanonical(raw: Record<string, unknown>): CanonicalHookInput;
+//# sourceMappingURL=canonical.d.ts.map

package/dist/lib/telemetry/canonical.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../../../src/lib/telemetry/canonical.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IACvC,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,kBAAkB,CAmBrF"}