@optimuslabs/runtime 0.3.3

package/dist/lib/telemetry/canonical.js

@@ -0,0 +1,153 @@
+/**
+ * Canonical event schema — minimal field extraction from Claude and Cursor hook payloads.
+ *
+ * No normalization happens here. Raw tool_name, tool_input, and the full raw_event
+ * are forwarded to the backend, which owns all agent-specific canonicalization and
+ * rule evaluation (see tool_call_audit/classification/enrich.py).
+ *
+ * The only client-side work is:
+ *   - agent detection (to set agent_identity)
+ *   - session_id / tool_use_id extraction (needed for auth and dedup)
+ *   - user_prompt extraction (requires reading local files the backend cannot access)
+ */
+import fs from "fs";
+import os from "os";
+import path from "path";
+export function normalizeToCanonical(raw) {
+    const agent = detectAgent(raw);
+    const hookEventName = extractHookEventName(raw, agent);
+    const toolInfo = extractToolInfo(raw, hookEventName);
+    const sessionId = extractSessionId(raw);
+    const userPrompt = extractUserPrompt(raw);
+    return {
+        agent,
+        hook_event_name: hookEventName,
+        tool_name: toolInfo.tool_name,
+        tool_input: toolInfo.tool_input,
+        tool_use_id: extractValue(raw, ["tool_use_id", "toolUseId"]) || null,
+        session_id: sessionId,
+        cwd: extractValue(raw, ["cwd", "workingDirectory"]) || null,
+        model: extractValue(raw, ["model"]) || null,
+        user_prompt: userPrompt,
+        raw_event: raw,
+    };
+}
+function detectAgent(raw) {
+    // Environment variable is the most reliable signal
+    if (process.env.CLAUDE_CODE_SESSION_ID)
+        return "claude";
+    if (process.env.CURSOR_SESSION_ID || process.env.CURSOR)
+        return "cursor";
+    const hookEventName = extractValue(raw, ["hook_event_name", "hookEventName", "hook_event"]);
+    // Claude hook names are PascalCase; Cursor uses camelCase
+    if (hookEventName === "PreToolUse" || hookEventName === "SessionStart" ||
+        hookEventName === "SessionEnd" || hookEventName === "PostToolUse" ||
+        hookEventName === "PostToolUseFailure" || hookEventName === "PermissionRequest") {
+        return "claude";
+    }
+    if (hookEventName === "preToolUse" || hookEventName === "beforeShellExecution" ||
+        hookEventName === "beforePromptSubmit") {
+        return "cursor";
+    }
+    // Field naming convention fallback
+    if (raw.toolUse || raw.toolName || (raw.sessionId && typeof raw.sessionId === "string")) {
+        return "cursor";
+    }
+    if (raw.tool_use_id || raw.session_id || raw.hook_event_name) {
+        return "claude";
+    }
+    return "claude";
+}
+function extractHookEventName(raw, agent) {
+    const explicit = extractValue(raw, ["hook_event_name", "hookEventName", "hook_event"]);
+    if (explicit)
+        return explicit;
+    if (agent === "cursor") {
+        if (raw.toolUse || raw.toolName)
+            return "preToolUse";
+        if (typeof raw.command === "string" && raw.command)
+            return "beforeShellExecution";
+    }
+    return "Unknown";
+}
+function extractToolInfo(raw, hookEventName) {
+    const getObj = (value) => value && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : null;
+    const getStr = (value) => typeof value === "string" && value.length > 0 ? value : null;
+    // Extract tool_input as-is from wherever it lives in the payload
+    const toolUse = getObj(raw.toolUse);
+    const tool = getObj(raw.tool);
+    const toolInput = getObj(raw.tool_input) ??
+        getObj(raw.toolInput) ??
+        getObj(toolUse?.input) ??
+        getObj(tool?.input) ??
+        {};
+    // Promote a top-level command field into tool_input if not already there
+    const commandFromTop = getStr(raw.command);
+    const finalToolInput = commandFromTop && !("command" in toolInput)
+        ? { ...toolInput, command: commandFromTop }
+        : toolInput;
+    // Extract tool_name as-is — no mapping, backend owns normalization
+    const toolName = getStr(raw.tool_name) ??
+        getStr(raw.toolName) ??
+        getStr(toolUse?.name) ??
+        getStr(tool?.name) ??
+        (hookEventName === "beforeShellExecution" || commandFromTop ? "Bash" : "Unknown");
+    return { tool_name: toolName, tool_input: finalToolInput };
+}
+function extractSessionId(raw) {
+    return (extractValue(raw, ["session_id", "sessionId", "conversation_id"]) ??
+        process.env.CLAUDE_CODE_SESSION_ID ??
+        process.env.CURSOR_SESSION_ID ??
+        null);
+}
+function extractUserPrompt(raw) {
+    // Direct field in payload
+    const prompt = extractValue(raw, ["user_prompt", "userPrompt", "prompt"]);
+    if (prompt)
+        return prompt;
+    // Cursor: explicit prompt file path
+    const promptFilePath = extractValue(raw, ["prompt_file_path", "promptFilePath"]);
+    if (promptFilePath) {
+        try {
+            const content = fs.readFileSync(promptFilePath, "utf-8").trim();
+            return content || null;
+        }
+        catch {
+            // not readable — continue
+        }
+    }
+    // Cursor: read from temp cache written by the beforeSubmitPrompt hook
+    const sessionId = extractSessionId(raw);
+    if (sessionId) {
+        const cachedPrompt = readCachedPrompt(sessionId);
+        if (cachedPrompt)
+            return cachedPrompt;
+    }
+    return null;
+}
+function readCachedPrompt(sessionId) {
+    try {
+        const promptCacheDir = path.join(os.tmpdir(), "optimus-prompt-cache");
+        const latestFile = path.join(promptCacheDir, `prompt-${sessionId}.txt`);
+        if (fs.existsSync(latestFile)) {
+            const content = fs.readFileSync(latestFile, "utf-8").trim();
+            return content || null;
+        }
+    }
+    catch {
+        // non-fatal
+    }
+    return null;
+}
+function extractValue(obj, keys) {
+    for (const key of keys) {
+        const value = obj[key];
+        if (value !== undefined && value !== null) {
+            return value;
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=canonical.js.map

package/dist/lib/telemetry/canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../../../src/lib/telemetry/canonical.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAexB,MAAM,UAAU,oBAAoB,CAAC,GAA4B;IAC/D,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,aAAa,GAAG,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAE1C,OAAO;QACL,KAAK;QACL,eAAe,EAAE,aAAa;QAC9B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,WAAW,EAAE,YAAY,CAAS,GAAG,EAAE,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,IAAI,IAAI;QAC5E,UAAU,EAAE,SAAS;QACrB,GAAG,EAAE,YAAY,CAAS,GAAG,EAAE,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC,IAAI,IAAI;QACnE,KAAK,EAAE,YAAY,CAAS,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI;QACnD,WAAW,EAAE,UAAU;QACvB,SAAS,EAAE,GAAG;KACf,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAA4B;IAC/C,mDAAmD;IACnD,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAAE,OAAO,QAAQ,CAAC;IACxD,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAEzE,MAAM,aAAa,GAAG,YAAY,CAAS,GAAG,EAAE,CAAC,iBAAiB,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;IAEpG,0DAA0D;IAC1D,IAAI,aAAa,KAAK,YAAY,IAAI,aAAa,KAAK,cAAc;QAClE,aAAa,KAAK,YAAY,IAAI,aAAa,KAAK,aAAa;QACjE,aAAa,KAAK,oBAAoB,IAAI,aAAa,KAAK,mBAAmB,EAAE,CAAC;QACpF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,aAAa,KAAK,YAAY,IAAI,aAAa,KAAK,sBAAsB;QAC1E,aAAa,KAAK,oBAAoB,EAAE,CAAC;QAC3C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,mCAAmC;IACnC,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,EAAE,CAAC;QACxF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC;QAC7D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB,CAAC,GAA4B,EAAE,KAAuC;IACjG,MAAM,QAAQ,GAAG,YAAY,CAAS,GAAG,EAAE,CAAC,iBAAiB,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;IAC/F,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,QAAQ;YAAE,OAAO,YAAY,CAAC;QACrD,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO;YAAE,OAAO,sBAAsB,CAAC;IACpF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CACtB,GAA4B,EAC5B,aAAqB;IAErB,MAAM,MAAM,GAAG,CAAC,KAAc,EAAkC,EAAE,CAChE,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzD,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,MAAM,GAAG,CAAC,KAAc,EAAiB,EAAE,CAC/C,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAE/D,iEAAiE;IACjE,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,SAAS,GACb,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACtB,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;QACrB,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC;QACtB,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC;QACnB,EAAE,CAAC;IAEL,yEAAyE;IACzE,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,cAAc,GAClB,cAAc,IAAI,CAAC,CAAC,SAAS,IAAI,SAAS,CAAC;QACzC,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE;QAC3C,CAAC,CAAC,SAAS,CAAC;IAEhB,mEAAmE;IACnE,MAAM,QAAQ,GACZ,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;QACrB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACpB,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC;QACrB,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC;QAClB,CAAC,aAAa,KAAK,sBAAsB,IAAI,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEpF,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,gBAAgB,CAAC,GAA4B;IACpD,OAAO,CACL,YAAY,CAAS,GAAG,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAClC,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC7B,IAAI,CACL,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAA4B;IACrD,0BAA0B;IAC1B,MAAM,MAAM,GAAG,YAAY,CAAS,GAAG,EAAE,CAAC,aAAa,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClF,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,oCAAoC;IACpC,MAAM,cAAc,GAAG,YAAY,CAAS,GAAG,EAAE,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACzF,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAChE,OAAO,OAAO,IAAI,IAAI,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,YAAY,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,YAAY;YAAE,OAAO,YAAY,CAAC;IACxC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB;IACzC,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,SAAS,MAAM,CAAC,CAAC;QACxE,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5D,OAAO,OAAO,IAAI,IAAI,CAAC;QACzB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CACnB,GAA4B,EAC5B,IAAc;IAEd,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,OAAO,KAAU,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/lib/telemetry/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Telemetry — tool invocations to audit events.
+ */
+export * from "./types.js";
+export * from "./canonical.js";
+export { eventToDict } from "./serialize.js";
+export { buildTelemetryEvent } from "./build-event.js";
+export { cloneToolCallMetadataForWire, SERVER_OWNED_TOOL_CALL_METADATA_KEYS, } from "./wire-metadata.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/telemetry/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/telemetry/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EACL,4BAA4B,EAC5B,oCAAoC,GACrC,MAAM,oBAAoB,CAAC"}

package/dist/lib/telemetry/index.js

@@ -0,0 +1,9 @@
+/**
+ * Telemetry — tool invocations to audit events.
+ */
+export * from "./types.js";
+export * from "./canonical.js";
+export { eventToDict } from "./serialize.js";
+export { buildTelemetryEvent } from "./build-event.js";
+export { cloneToolCallMetadataForWire, SERVER_OWNED_TOOL_CALL_METADATA_KEYS, } from "./wire-metadata.js";
+//# sourceMappingURL=index.js.map

package/dist/lib/telemetry/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/telemetry/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EACL,4BAA4B,EAC5B,oCAAoC,GACrC,MAAM,oBAAoB,CAAC"}

package/dist/lib/telemetry/serialize.d.ts

@@ -0,0 +1,3 @@
+import type { TelemetryEvent } from "./types.js";
+export declare function eventToDict(event: TelemetryEvent): Record<string, unknown>;
+//# sourceMappingURL=serialize.d.ts.map

package/dist/lib/telemetry/serialize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialize.d.ts","sourceRoot":"","sources":["../../../src/lib/telemetry/serialize.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,wBAAgB,WAAW,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAa1E"}

package/dist/lib/telemetry/serialize.js

@@ -0,0 +1,15 @@
+export function eventToDict(event) {
+    return {
+        timestamp: event.timestamp,
+        agent_identity: event.agent_identity,
+        event_type: event.event_type,
+        session_id: event.session_id,
+        tool_use_id: event.tool_use_id,
+        hook_event_name: event.hook_event_name,
+        working_directory: event.working_directory,
+        tool_name: event.tool_call_metadata?.tool_name,
+        tool_input: event.tool_call_metadata?.tool_input,
+        user_prompt: event.tool_call_metadata?.user_prompt,
+    };
+}
+//# sourceMappingURL=serialize.js.map

package/dist/lib/telemetry/serialize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialize.js","sourceRoot":"","sources":["../../../src/lib/telemetry/serialize.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,WAAW,CAAC,KAAqB;IAC/C,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,SAAS,EAAE,KAAK,CAAC,kBAAkB,EAAE,SAAS;QAC9C,UAAU,EAAE,KAAK,CAAC,kBAAkB,EAAE,UAAU;QAChD,WAAW,EAAE,KAAK,CAAC,kBAAkB,EAAE,WAAW;KACnD,CAAC;AACJ,CAAC"}

package/dist/lib/telemetry/types.d.ts

@@ -0,0 +1,35 @@
+export declare const SEVERITY_CRITICAL = "critical";
+export declare const SEVERITY_HIGH = "high";
+export declare const SEVERITY_MEDIUM = "medium";
+export declare const SEVERITY_LOW = "low";
+export declare const SEVERITY_INFO = "info";
+export declare const SEVERITY_ORDER: string[];
+export interface ToolInvocation {
+    tool_name: string;
+    tool_input: Record<string, unknown>;
+    tool_use_id?: string | null;
+    session_id?: string | null;
+    cwd?: string | null;
+    hook_event_name?: string | null;
+    model?: string | null;
+    agent_message?: string | null;
+    user_prompt?: string | null;
+    raw_event?: Record<string, unknown>;
+}
+export interface TelemetryEvent {
+    timestamp: string;
+    agent_identity: string;
+    event_type: string;
+    session_id?: string | null;
+    tool_use_id?: string | null;
+    hook_event_name?: string | null;
+    working_directory?: string | null;
+    tool_call_metadata: {
+        tool_name: string;
+        tool_input?: Record<string, unknown>;
+        user_prompt?: string | null;
+        raw_event?: Record<string, unknown>;
+        hook_hash?: string | null;
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/lib/telemetry/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/lib/telemetry/types.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,iBAAiB,aAAa,CAAC;AAC5C,eAAO,MAAM,aAAa,SAAS,CAAC;AACpC,eAAO,MAAM,eAAe,WAAW,CAAC;AACxC,eAAO,MAAM,YAAY,QAAQ,CAAC;AAClC,eAAO,MAAM,aAAa,SAAS,CAAC;AAEpC,eAAO,MAAM,cAAc,UAM1B,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IAEnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAElC,kBAAkB,EAAE;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACpC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,CAAC;CACH"}

package/dist/lib/telemetry/types.js

@@ -0,0 +1,14 @@
+// Severity levels
+export const SEVERITY_CRITICAL = "critical";
+export const SEVERITY_HIGH = "high";
+export const SEVERITY_MEDIUM = "medium";
+export const SEVERITY_LOW = "low";
+export const SEVERITY_INFO = "info";
+export const SEVERITY_ORDER = [
+    SEVERITY_CRITICAL,
+    SEVERITY_HIGH,
+    SEVERITY_MEDIUM,
+    SEVERITY_LOW,
+    SEVERITY_INFO,
+];
+//# sourceMappingURL=types.js.map

package/dist/lib/telemetry/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/lib/telemetry/types.ts"],"names":[],"mappings":"AAAA,kBAAkB;AAClB,MAAM,CAAC,MAAM,iBAAiB,GAAG,UAAU,CAAC;AAC5C,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;AACpC,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CAAC;AACxC,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,CAAC;AAClC,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;AAEpC,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,iBAAiB;IACjB,aAAa;IACb,eAAe;IACf,YAAY;IACZ,aAAa;CACd,CAAC"}

package/dist/lib/telemetry/wire-metadata.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Tool-call metadata keys owned by the Django ingest layer (`enrich_tool_call_metadata`).
+ * Keep in sync with the keys popped at the start of ``enrich_tool_call_metadata``.
+ * The sensor sends raw hook fields only; strip these before HTTP so spoofed values
+ * cannot influence the API.
+ */
+export declare const SERVER_OWNED_TOOL_CALL_METADATA_KEYS: readonly ["user_profile", "hardware_uuid", "action_type", "command_components", "file_path", "pattern", "mcp_server", "mcp_tool"];
+/** Return a shallow copy of metadata with server-owned keys removed. */
+export declare function cloneToolCallMetadataForWire(meta: unknown): Record<string, unknown> | undefined;
+//# sourceMappingURL=wire-metadata.d.ts.map

package/dist/lib/telemetry/wire-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-metadata.d.ts","sourceRoot":"","sources":["../../../src/lib/telemetry/wire-metadata.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,oCAAoC,mIASvC,CAAC;AAEX,wEAAwE;AACxE,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAS/F"}

package/dist/lib/telemetry/wire-metadata.js

@@ -0,0 +1,28 @@
+/**
+ * Tool-call metadata keys owned by the Django ingest layer (`enrich_tool_call_metadata`).
+ * Keep in sync with the keys popped at the start of ``enrich_tool_call_metadata``.
+ * The sensor sends raw hook fields only; strip these before HTTP so spoofed values
+ * cannot influence the API.
+ */
+export const SERVER_OWNED_TOOL_CALL_METADATA_KEYS = [
+    "user_profile",
+    "hardware_uuid",
+    "action_type",
+    "command_components",
+    "file_path",
+    "pattern",
+    "mcp_server",
+    "mcp_tool",
+];
+/** Return a shallow copy of metadata with server-owned keys removed. */
+export function cloneToolCallMetadataForWire(meta) {
+    if (!meta || typeof meta !== "object" || Array.isArray(meta)) {
+        return undefined;
+    }
+    const m = { ...meta };
+    for (const k of SERVER_OWNED_TOOL_CALL_METADATA_KEYS) {
+        delete m[k];
+    }
+    return m;
+}
+//# sourceMappingURL=wire-metadata.js.map

package/dist/lib/telemetry/wire-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-metadata.js","sourceRoot":"","sources":["../../../src/lib/telemetry/wire-metadata.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,cAAc;IACd,eAAe;IACf,aAAa;IACb,oBAAoB;IACpB,WAAW;IACX,SAAS;IACT,YAAY;IACZ,UAAU;CACF,CAAC;AAEX,wEAAwE;AACxE,MAAM,UAAU,4BAA4B,CAAC,IAAa;IACxD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,CAAC,GAAG,EAAE,GAAI,IAAgC,EAAE,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,oCAAoC,EAAE,CAAC;QACrD,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/lib/telemetry.d.ts

@@ -0,0 +1,2 @@
+export * from "./telemetry/index.js";
+//# sourceMappingURL=telemetry.d.ts.map

package/dist/lib/telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../src/lib/telemetry.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC"}

package/dist/lib/telemetry.js

@@ -0,0 +1,2 @@
+export * from "./telemetry/index.js";
+//# sourceMappingURL=telemetry.js.map

package/dist/lib/telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../src/lib/telemetry.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC"}

package/dist/lib/tofu.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Tofu shim — centralises all imports from @optimuslabs/tofu.
+ *
+ * Reads ~/.optimuslabs/management/optimus_dev.env at startup:
+ *   - No file / unreadable → production (ignores OPTIMUS_ENVIRONMENT).
+ *   - File present → environment= line in file, then OPTIMUS_ENVIRONMENT, then production.
+ *   - environment=development → loads local dist (file-relative path)
+ *   - anything else → loads the published npm package
+ *
+ * All other source files import from this module, never directly from
+ * "@optimuslabs/tofu", so the conditional lives in exactly one place.
+ */
+import type * as TofuTypes from "@optimuslabs/tofu";
+export declare const loadEndpointBase: typeof TofuTypes.loadEndpointBase, buildStartupEndpointUrl: typeof TofuTypes.buildStartupEndpointUrl, createSignature: typeof TofuTypes.createSignature, persistAuthKey: typeof TofuTypes.persistAuthKey, readStoredAuthKey: typeof TofuTypes.readStoredAuthKey, ensureAuthentication: typeof TofuTypes.ensureAuthentication, getEndpointSource: typeof TofuTypes.getEndpointSource, canonicalizePayload: typeof TofuTypes.canonicalizePayload, getAuthKeyPath: typeof TofuTypes.getAuthKeyPath;
+export type { EndpointResponse, StoredAuthKey } from "@optimuslabs/tofu";
+//# sourceMappingURL=tofu.d.ts.map

package/dist/lib/tofu.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tofu.d.ts","sourceRoot":"","sources":["../../src/lib/tofu.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,KAAK,KAAK,SAAS,MAAM,mBAAmB,CAAC;AAiCpD,eAAO,MACL,gBAAgB,qCAChB,uBAAuB,4CACvB,eAAe,oCACf,cAAc,mCACd,iBAAiB,sCACjB,oBAAoB,yCACpB,iBAAiB,sCACjB,mBAAmB,wCACnB,cAAc,iCACR,CAAC;AAET,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/lib/tofu.js

@@ -0,0 +1,44 @@
+/**
+ * Tofu shim — centralises all imports from @optimuslabs/tofu.
+ *
+ * Reads ~/.optimuslabs/management/optimus_dev.env at startup:
+ *   - No file / unreadable → production (ignores OPTIMUS_ENVIRONMENT).
+ *   - File present → environment= line in file, then OPTIMUS_ENVIRONMENT, then production.
+ *   - environment=development → loads local dist (file-relative path)
+ *   - anything else → loads the published npm package
+ *
+ * All other source files import from this module, never directly from
+ * "@optimuslabs/tofu", so the conditional lives in exactly one place.
+ */
+import { readFileSync } from "fs";
+import { homedir } from "os";
+import path from "path";
+import { fileURLToPath } from "url";
+function readEnvironment() {
+    const envPath = path.join(homedir(), ".optimuslabs", "management", "optimus_dev.env");
+    let content;
+    try {
+        content = readFileSync(envPath, "utf8");
+    }
+    catch {
+        // No management file: default production (ignore stale OPTIMUS_ENVIRONMENT).
+        return "production";
+    }
+    const match = content.match(/^(?:environment|ENVIRONMENT|OPTIMUS_ENVIRONMENT)\s*=\s*(.+)/m);
+    if (match)
+        return match[1].trim().toLowerCase();
+    const fromEnv = process.env.OPTIMUS_ENVIRONMENT?.trim().toLowerCase();
+    if (fromEnv)
+        return fromEnv;
+    return "production";
+}
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const isDevelopment = readEnvironment() === "development";
+// In development: resolve local optimus-tofu dist relative to this file.
+// dist/lib/tofu.js → ../../.. → npx_packages/staging/ → optimus-tofu/dist/index.js
+const localTofuPath = path.join(__dirname, "../../../optimus-tofu/dist/index.js");
+const tofu = (isDevelopment
+    ? await import(localTofuPath)
+    : await import("@optimuslabs/tofu"));
+export const { loadEndpointBase, buildStartupEndpointUrl, createSignature, persistAuthKey, readStoredAuthKey, ensureAuthentication, getEndpointSource, canonicalizePayload, getAuthKeyPath, } = tofu;
+//# sourceMappingURL=tofu.js.map

package/dist/lib/tofu.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tofu.js","sourceRoot":"","sources":["../../src/lib/tofu.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAGpC,SAAS,eAAe;IACtB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC;IACtF,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;QAC7E,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CACzB,8DAA8D,CAC/D,CAAC;IACF,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtE,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,MAAM,aAAa,GAAG,eAAe,EAAE,KAAK,aAAa,CAAC;AAE1D,yEAAyE;AACzE,mFAAmF;AACnF,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qCAAqC,CAAC,CAAC;AAElF,MAAM,IAAI,GAAG,CACX,aAAa;IACX,CAAC,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC;IAC7B,CAAC,CAAC,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAClB,CAAC;AAEtB,MAAM,CAAC,MAAM,EACX,gBAAgB,EAChB,uBAAuB,EACvB,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,GACf,GAAG,IAAI,CAAC"}

package/dist/lib/user-profile.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Local `user_profile` for startup POST — same probes as `log-llm-config` `resolveUserProfile`
+ * (`design_notes/user_profile_field_sources.md`).
+ */
+type UserProfile = {
+    generateduuid: string;
+    machineuuid: string;
+    mac_username: string;
+    machine_name: string;
+    github_username: string;
+    claude_email: string;
+    cursor_email: string;
+};
+/** Same as `log-llm-config` `resolveUserProfile` (design_notes). */
+export declare function resolveUserProfile(): UserProfile;
+export type { UserProfile };
+//# sourceMappingURL=user-profile.d.ts.map

package/dist/lib/user-profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-profile.d.ts","sourceRoot":"","sources":["../../src/lib/user-profile.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAUH,KAAK,WAAW,GAAG;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAyLF,oEAAoE;AACpE,wBAAgB,kBAAkB,IAAI,WAAW,CAEhD;AAED,YAAY,EAAE,WAAW,EAAE,CAAC"}

package/dist/lib/user-profile.js

@@ -0,0 +1,187 @@
+/**
+ * Local `user_profile` for startup POST — same probes as `log-llm-config` `resolveUserProfile`
+ * (`design_notes/user_profile_field_sources.md`).
+ */
+import { execFileSync } from "node:child_process";
+import crypto from "node:crypto";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { readCommandOutput, resolveHardwareUuid } from "./hardware-uuid.js";
+const safeJsonParse = (raw) => {
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+};
+const readCursorCachedEmailFromVscdb = () => {
+    const dbPath = path.join(os.homedir(), "Library/Application Support/Cursor/User/globalStorage/state.vscdb");
+    if (!fs.existsSync(dbPath))
+        return "";
+    try {
+        const out = execFileSync("sqlite3", [dbPath, "select value from ItemTable where key='cursorAuth/cachedEmail';"], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
+        return out;
+    }
+    catch {
+        return "";
+    }
+};
+const readCursorCachedEmailFromStorageJson = () => {
+    const fp = path.join(os.homedir(), "Library/Application Support/Cursor/User/globalStorage/storage.json");
+    if (!fs.existsSync(fp))
+        return "";
+    try {
+        const parsed = safeJsonParse(fs.readFileSync(fp, { encoding: "utf8" }));
+        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+            return "";
+        const root = parsed;
+        const cursor = root.cursor;
+        if (!cursor || typeof cursor !== "object" || Array.isArray(cursor))
+            return "";
+        const auth = cursor.auth;
+        if (!auth || typeof auth !== "object" || Array.isArray(auth))
+            return "";
+        const email = auth.email;
+        return typeof email === "string" ? email.trim() : "";
+    }
+    catch {
+        return "";
+    }
+};
+const readCursorCachedEmail = () => readCursorCachedEmailFromVscdb() || readCursorCachedEmailFromStorageJson();
+const readClaudeAuthEmailFromCli = () => {
+    try {
+        const out = execFileSync("claude", ["auth", "status"], {
+            encoding: "utf8",
+            stdio: ["ignore", "pipe", "ignore"],
+        }).trim();
+        if (!out)
+            return "";
+        const parsed = safeJsonParse(out);
+        if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+            const email = parsed.email;
+            return typeof email === "string" ? email.trim() : "";
+        }
+    }
+    catch {
+        return "";
+    }
+    return "";
+};
+const readClaudeEmailFromHomeFiles = () => {
+    const candidates = [
+        path.join(os.homedir(), ".claude/.credentials.json"),
+        path.join(os.homedir(), ".claude/.claude.json"),
+    ];
+    for (const fp of candidates) {
+        if (!fs.existsSync(fp))
+            continue;
+        try {
+            const parsed = safeJsonParse(fs.readFileSync(fp, { encoding: "utf8" }));
+            if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+                continue;
+            const email = parsed.email;
+            if (typeof email === "string" && email.includes("@"))
+                return email.trim();
+        }
+        catch {
+            /* try next */
+        }
+    }
+    return "";
+};
+const readClaudeAuthEmail = () => readClaudeAuthEmailFromCli().trim() || readClaudeEmailFromHomeFiles();
+const readMachineName = () => {
+    const fromEnv = process.env.OPTIMUS_MACHINE_NAME?.trim();
+    if (fromEnv)
+        return fromEnv;
+    if (process.platform === "darwin") {
+        const name = readCommandOutput("scutil --get ComputerName");
+        if (name)
+            return name;
+    }
+    return os.hostname();
+};
+const readMacUsername = () => {
+    const fromEnv = process.env.OPTIMUS_MAC_USERNAME?.trim() ||
+        process.env.USER?.trim() ||
+        process.env.LOGNAME?.trim() ||
+        "";
+    if (fromEnv)
+        return fromEnv;
+    return readCommandOutput("id -un");
+};
+const readGithubUsername = () => {
+    try {
+        const out = execFileSync("gh", ["api", "user", "--jq", ".login"], {
+            encoding: "utf8",
+            stdio: ["ignore", "pipe", "ignore"],
+            maxBuffer: 1024 * 1024,
+            // CI often has `gh` installed; without a cap it can block on auth/network and hang callers.
+            timeout: 3500,
+        }).trim();
+        if (out)
+            return out;
+    }
+    catch {
+        /* gh missing or not authenticated */
+    }
+    return (process.env.GITHUB_USER?.trim() ||
+        process.env.GH_USER?.trim() ||
+        readCommandOutput("git config user.name"));
+};
+const readUserProfileFromEnvOrFile = () => {
+    const inline = process.env.OPTIMUS_USER_PROFILE_JSON?.trim();
+    if (inline) {
+        const parsed = safeJsonParse(inline);
+        if (parsed && typeof parsed === "object" && !Array.isArray(parsed))
+            return parsed;
+    }
+    const filePath = process.env.OPTIMUS_USER_PROFILE_FILE?.trim();
+    if (filePath && fs.existsSync(filePath)) {
+        const parsed = safeJsonParse(fs.readFileSync(filePath, { encoding: "utf8" }));
+        if (parsed && typeof parsed === "object" && !Array.isArray(parsed))
+            return parsed;
+    }
+    return null;
+};
+const isPlausibleUuid = (s) => /^[\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12}$/i.test(s.trim());
+const readMacAccountGeneratedUid = () => {
+    const env = process.env.OPTIMUS_MAC_GENERATED_UID?.trim();
+    if (env && isPlausibleUuid(env))
+        return env.trim().toLowerCase();
+    if (process.platform !== "darwin")
+        return "";
+    const user = readMacUsername();
+    if (!user || !/^[a-zA-Z0-9._-]+$/.test(user))
+        return "";
+    try {
+        const out = execFileSync("dscl", [".", "-read", `/Users/${user}`, "GeneratedUID"], {
+            encoding: "utf8",
+            stdio: ["ignore", "pipe", "ignore"],
+        });
+        const m = out.match(/GeneratedUID:\s*([0-9A-Fa-f]{8}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{12})/);
+        if (m?.[1] && isPlausibleUuid(m[1]))
+            return m[1].toLowerCase();
+    }
+    catch {
+        return "";
+    }
+    return "";
+};
+const buildDefaultUserProfile = () => ({
+    generateduuid: readMacAccountGeneratedUid() || crypto.randomUUID(),
+    machineuuid: resolveHardwareUuid(),
+    mac_username: readMacUsername(),
+    machine_name: readMachineName(),
+    github_username: readGithubUsername(),
+    claude_email: readClaudeAuthEmail(),
+    cursor_email: readCursorCachedEmail(),
+});
+/** Same as `log-llm-config` `resolveUserProfile` (design_notes). */
+export function resolveUserProfile() {
+    return readUserProfileFromEnvOrFile() ?? buildDefaultUserProfile();
+}
+//# sourceMappingURL=user-profile.js.map

package/dist/lib/user-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-profile.js","sourceRoot":"","sources":["../../src/lib/user-profile.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAY5E,MAAM,aAAa,GAAG,CAAC,GAAW,EAAW,EAAE;IAC7C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,8BAA8B,GAAG,GAAW,EAAE;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CACtB,EAAE,CAAC,OAAO,EAAE,EACZ,mEAAmE,CACpE,CAAC;IACF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CACtB,SAAS,EACT,CAAC,MAAM,EAAE,iEAAiE,CAAC,EAC3E,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAC1D,CAAC,IAAI,EAAE,CAAC;QACT,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,oCAAoC,GAAG,GAAW,EAAE;IACxD,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAClB,EAAE,CAAC,OAAO,EAAE,EACZ,oEAAoE,CACrE,CAAC;IACF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9E,MAAM,IAAI,GAAG,MAAiC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9E,MAAM,IAAI,GAAI,MAAkC,CAAC,IAAI,CAAC;QACtD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACxE,MAAM,KAAK,GAAI,IAAgC,CAAC,KAAK,CAAC;QACtD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,GAAW,EAAE,CACzC,8BAA8B,EAAE,IAAI,oCAAoC,EAAE,CAAC;AAE7E,MAAM,0BAA0B,GAAG,GAAW,EAAE;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE;YACrD,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,MAAM,KAAK,GAAI,MAAkC,CAAC,KAAK,CAAC;YACxD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAEF,MAAM,4BAA4B,GAAG,GAAW,EAAE;IAChD,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,2BAA2B,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,sBAAsB,CAAC;KAChD,CAAC;IACF,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;YAAE,SAAS;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YACxE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC7E,MAAM,KAAK,GAAI,MAAkC,CAAC,KAAK,CAAC;YACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,GAAW,EAAE,CACvC,0BAA0B,EAAE,CAAC,IAAI,EAAE,IAAI,4BAA4B,EAAE,CAAC;AAExE,MAAM,eAAe,GAAG,GAAW,EAAE;IACnC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC;IACzD,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,iBAAiB,CAAC,2BAA2B,CAAC,CAAC;QAC5D,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,GAAW,EAAE;IACnC,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE;QACxC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE;QACxB,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE;QAC3B,EAAE,CAAC;IACL,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AACrC,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,GAAW,EAAE;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE;YAChE,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACnC,SAAS,EAAE,IAAI,GAAG,IAAI;YACtB,4FAA4F;YAC5F,OAAO,EAAE,IAAI;SACd,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;IACD,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE;QAC/B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE;QAC3B,iBAAiB,CAAC,sBAAsB,CAAC,CAC1C,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,4BAA4B,GAAG,GAAuB,EAAE;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,CAAC;IAC7D,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAqB,CAAC;IACnG,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,CAAC;IAC/D,IAAI,QAAQ,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9E,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAqB,CAAC;IACnG,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,CAAS,EAAW,EAAE,CAC7C,4DAA4D,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAE9E,MAAM,0BAA0B,GAAG,GAAW,EAAE;IAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,CAAC;IAC1D,IAAI,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAEjE,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAE7C,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,IAAI,CAAC,IAAI,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAExD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,IAAI,EAAE,EAAE,cAAc,CAAC,EAAE;YACjF,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CACjB,+FAA+F,CAChG,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAEF,MAAM,uBAAuB,GAAG,GAAgB,EAAE,CAAC,CAAC;IAClD,aAAa,EAAE,0BAA0B,EAAE,IAAI,MAAM,CAAC,UAAU,EAAE;IAClE,WAAW,EAAE,mBAAmB,EAAE;IAClC,YAAY,EAAE,eAAe,EAAE;IAC/B,YAAY,EAAE,eAAe,EAAE;IAC/B,eAAe,EAAE,kBAAkB,EAAE;IACrC,YAAY,EAAE,mBAAmB,EAAE;IACnC,YAAY,EAAE,qBAAqB,EAAE;CACtC,CAAC,CAAC;AAEH,oEAAoE;AACpE,MAAM,UAAU,kBAAkB;IAChC,OAAO,4BAA4B,EAAE,IAAI,uBAAuB,EAAE,CAAC;AACrE,CAAC"}