@volcengine/tls-observer-claude-code-install 0.0.1 → 0.0.2

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @volcengine/tls-observer-claude-code-install
 
+## 0.0.2
+
+### Patch Changes
+
+- 安装包更新
+
 ## 0.0.1
 
 ### Patch Changes

package/README.md

@@ -48,12 +48,12 @@ npm exec -y \
   tls-observer-claude-code-install \
   --non-interactive \
   --force \
-  --region <region> \
-  --otel-endpoint https://tls-<region>.volces.com:4318/v1/traces \
   --trace-topic-id <trace-topic-id> \
   --api-key <api-key>
 ```
 
+TLS Region 默认是 `cn-beijing`，TLS Producer endpoint 会自动生成为 `tls-cn-beijing.volces.com`。如需切换 Region，使用 `--region <region>`；如需单独覆盖 endpoint，使用 `--tls-endpoint <host>`。旧的 `--otel-endpoint` 仅保留兼容。
+
 AK/SK 模式将 `--api-key` 替换为 `--ak`、`--sk`，并可提供 `--project-name`、`--app-name` 自动准备 TLS LogApp。
 
 ## 本地开发
@@ -67,4 +67,6 @@ CLAUDE_CODE_PLUGIN_SOURCE="$PWD/packages/claude-code" \
 node packages/claude-code-install/bin/tls-observer-claude-code-install.mjs --force
 ```
 
+安装器会读取源码包的 `publishConfig.directory`，因此本地开发与正式发布都会使用构建生成的 `dist-package`。
+
 `sync-plugin` 仅用于生成安装器内的开发快照；正式安装路径以 registry 下载插件为准。

package/dist/index.js

@@ -1,4 +1,4 @@
-import { execFile, spawn } from "node:child_process";
+import { execFile, execFileSync, spawn } from "node:child_process";
 import { homedir, tmpdir } from "node:os";
 import { pathToFileURL } from "node:url";
 import { promisify } from "node:util";
@@ -15,10 +15,10 @@ const DEFAULT_SETTINGS_PATH = __rspack_external_node_path_c5b9b54f.join(homedir(
 const DEFAULT_SKILLS_ROOT = __rspack_external_node_path_c5b9b54f.join(homedir(), '.claude', 'skills');
 const DEFAULT_ENV_TARGET = __rspack_external_node_path_c5b9b54f.join(homedir(), '.claude', 'tls-observer-claude-code.env');
 const DEFAULT_DATA_ROOT = __rspack_external_node_path_c5b9b54f.join(homedir(), '.claude', 'plugins', 'data', PLUGIN_NAME);
-const DEFAULT_REGION = 'cn-guilin-boe';
+const DEFAULT_REGION = 'cn-beijing';
 const DEFAULT_PROJECT_NAME = 'claude_code_observability';
 const DEFAULT_APP_NAME_PREFIX = 'claude-code-observability';
-const DEFAULT_TLS_ENDPOINT = 'tls-cn-guilin-boe.volces.com';
+const DEFAULT_TLS_ENDPOINT = 'tls-cn-beijing.volces.com';
 const DEFAULT_LOG_APP_TYPE = 'Claude';
 const DEFAULT_TEMPLATE_NAME = 'Claude';
 function readEnvString(key) {
@@ -37,12 +37,6 @@ function takeArg(argv, index, flag) {
 function defaultTlsEndpointForRegion(region) {
     return region ? `tls-${region}.volces.com` : DEFAULT_TLS_ENDPOINT;
 }
-function normalizeEndpointHost(endpoint) {
-    return String(endpoint || '').trim().replace(/^https?:\/\//i, '').replace(/\/.*$/, '').replace(/:\d+$/, '');
-}
-function defaultOtelEndpointForRegion(region, tlsEndpoint) {
-    return `https://${normalizeEndpointHost(tlsEndpoint) || defaultTlsEndpointForRegion(region)}:4318/v1/traces`;
-}
 function randomSuffix() {
     const alphabet = '0123456789abcdefghijklmnopqrstuvwxyz';
     let value = '';
@@ -54,8 +48,7 @@ function defaultAppName() {
 }
 function applyDerivedDefaults(options) {
     if (options.region) {
-        if (!options.tlsEndpoint) options.tlsEndpoint = defaultTlsEndpointForRegion(options.region);
-        if (!options.otelEndpoint) options.otelEndpoint = defaultOtelEndpointForRegion(options.region, options.tlsEndpoint);
+        if (!options.tlsEndpoint && !options.otelEndpoint) options.tlsEndpoint = defaultTlsEndpointForRegion(options.region);
     }
     if (!options.projectName && !options.projectId) options.projectName = DEFAULT_PROJECT_NAME;
     if (!options.logAppName) options.logAppName = defaultAppName();
@@ -77,7 +70,7 @@ function parseCliOptions(argv = process.argv.slice(2)) {
         pluginTarget: readEnvString('CLAUDE_CODE_PLUGIN_TARGET') || __rspack_external_node_path_c5b9b54f.join(skillsRoot, PLUGIN_NAME),
         envTarget: readEnvString('CLAUDE_CODE_TLS_ENV_TARGET') || DEFAULT_ENV_TARGET,
         dataRoot: readEnvString('CLAUDE_CODE_TLS_DATA_ROOT') || DEFAULT_DATA_ROOT,
-        region: readEnvString('CLAUDE_CODE_TLS_REGION'),
+        region: readEnvString('CLAUDE_CODE_TLS_REGION') || DEFAULT_REGION,
         otelEndpoint: readEnvString('CLAUDE_CODE_TLS_OTEL_ENDPOINT'),
         traceTopicId: readEnvString('CLAUDE_CODE_TLS_TRACE_TOPIC_ID'),
         apiKey: readEnvString('CLAUDE_CODE_TLS_API_KEY'),
@@ -151,8 +144,9 @@ Options:
   --advanced-paths               Prompt for Claude path overrides
   --registry <url>               NPM registry for plugin package. Default: https://registry.npmjs.org
   --plugin-version <version>     Exact plugin version or dist-tag. Overrides --beta
-  --region <region>              TLS region
-  --otel-endpoint <url>          OTLP traces endpoint
+  --region <region>              TLS region. Default: cn-beijing
+  --tls-endpoint <host>          TLS Producer endpoint. Derived from region by default
+  --otel-endpoint <url>          Deprecated legacy endpoint alias
   --trace-topic-id <id>          TLS trace topic ID
   --api-key <value>              TLS API Key
   --ak <value>                   TLS Access Key
@@ -184,8 +178,81 @@ async function promptRequired(rl, message, defaultValue = '') {
         console.log('This value is required.');
     }
 }
+function setTerminalEcho(enabled) {
+    if (!process.stdin.isTTY || !process.stdout.isTTY) return false;
+    try {
+        execFileSync('stty', [
+            enabled ? 'echo' : '-echo'
+        ], {
+            stdio: [
+                'inherit',
+                'ignore',
+                'ignore'
+            ]
+        });
+        return true;
+    } catch  {
+        return false;
+    }
+}
 async function promptSecret(rl, message, defaultValue = '') {
-    return promptRequired(rl, message, defaultValue);
+    if (!process.stdin.isTTY || !process.stdout.isTTY) return promptRequired(rl, message, defaultValue);
+    rl.pause();
+    return new Promise((resolve, reject)=>{
+        const input = process.stdin;
+        let value = '';
+        let finished = false;
+        const previousRawMode = input.isRaw;
+        let echoDisabled = false;
+        const suffix = defaultValue ? '\n    default: 已设置，回车保留\n> ' : '\n> ';
+        function cleanup() {
+            input.off('data', onData);
+            input.setRawMode(Boolean(previousRawMode));
+            if (echoDisabled) setTerminalEcho(true);
+            input.pause();
+            rl.resume();
+        }
+        function finish() {
+            if (finished) return;
+            finished = true;
+            cleanup();
+            process.stdout.write('\n');
+            const resolvedValue = value.trim() || defaultValue;
+            if (resolvedValue) resolve(resolvedValue);
+            else {
+                console.log('This value is required.');
+                resolve(promptSecret(rl, message, defaultValue));
+            }
+        }
+        function onData(buffer) {
+            for (const char of buffer.toString('utf8')){
+                if (finished) return;
+                if ('\u0003' === char) {
+                    finished = true;
+                    cleanup();
+                    reject(new Error('Interrupted'));
+                    return;
+                }
+                if ('\r' === char || '\n' === char) return void finish();
+                if ('\u007f' === char || '\b' === char) {
+                    if (value.length > 0) {
+                        value = [
+                            ...value
+                        ].slice(0, -1).join('');
+                        process.stdout.write('\b \b');
+                    }
+                    continue;
+                }
+                value += char;
+                process.stdout.write('*');
+            }
+        }
+        input.resume();
+        input.setRawMode(true);
+        input.on('data', onData);
+        echoDisabled = setTerminalEcho(false);
+        process.stdout.write(`${message}${suffix}`);
+    });
 }
 function detectAuthType(options) {
     if (options.apiKey) return 'apiKey';
@@ -203,7 +270,7 @@ function validateBaseTlsConfig(options) {
 function validateTlsConfig(options) {
     validateBaseTlsConfig(options);
     const missing = [];
-    if (!options.otelEndpoint) missing.push('--otel-endpoint or CLAUDE_CODE_TLS_OTEL_ENDPOINT');
+    if (!options.tlsEndpoint && !options.otelEndpoint) missing.push('--tls-endpoint, --region, or legacy --otel-endpoint');
     if (!options.traceTopicId) missing.push('--trace-topic-id or CLAUDE_CODE_TLS_TRACE_TOPIC_ID');
     if (missing.length > 0) throw new Error(`Missing required TLS config: ${missing.join(', ')}`);
 }
@@ -230,7 +297,6 @@ async function collectInteractiveOptions(options) {
             applyDerivedDefaults(options);
             const authType = await promptRequired(rl, 'Auth type, apiKey or aksk', detectAuthType(options) || 'apiKey');
             if ('apiKey' === authType) {
-                options.otelEndpoint = await promptRequired(rl, 'OTLP trace endpoint', options.otelEndpoint);
                 options.traceTopicId = await promptRequired(rl, 'Trace topic ID', options.traceTopicId || '');
                 options.apiKey = await promptSecret(rl, 'TLS API Key', options.apiKey || '');
                 options.ak = void 0;
@@ -443,14 +509,18 @@ async function installPluginPackageToTemp(options) {
 async function findLocalPluginSource() {
     const explicit = readEnvString('CLAUDE_CODE_PLUGIN_SOURCE');
     if (!explicit) return;
-    const candidates = [
+    const manifest = await readJsonFile(__rspack_external_node_path_c5b9b54f.join(explicit, 'package.json'), {});
+    const publishDirectory = manifest.publishConfig?.directory;
+    const candidates = publishDirectory ? [
+        __rspack_external_node_path_c5b9b54f.join(explicit, publishDirectory)
+    ] : [
         explicit
-    ].filter((candidate)=>Boolean(candidate));
+    ];
     for (const candidate of candidates)try {
         await assertPluginRuntime(candidate);
         return candidate;
     } catch  {}
-    throw new Error(`CLAUDE_CODE_PLUGIN_SOURCE does not point to a built plugin: ${explicit}`);
+    throw new Error(`CLAUDE_CODE_PLUGIN_SOURCE does not point to a built runtime package: ${explicit}. Run the plugin build first.`);
 }
 async function readPluginVersion(pluginSource) {
     const manifest = await readJsonFile(__rspack_external_node_path_c5b9b54f.join(pluginSource, 'package.json'), {});
@@ -489,6 +559,7 @@ async function installPlugin(options) {
                 const child = spawn(npm, [
                     'install',
                     '--omit=dev',
+                    "--ignore-scripts",
                     '--no-audit',
                     '--no-fund'
                 ], {
@@ -557,6 +628,7 @@ function buildTlsEnv(options) {
         '# Generated by tls-observer-claude-code installer.',
         '# Keep this file local because it can contain credentials.',
         envLine('CLAUDE_CODE_TLS_REGION', options.region),
+        envLine('CLAUDE_CODE_TLS_ENDPOINT', options.tlsEndpoint),
         envLine('CLAUDE_CODE_TLS_OTEL_ENDPOINT', options.otelEndpoint),
         envLine('CLAUDE_CODE_TLS_TRACE_TOPIC_ID', options.traceTopicId),
         envLine('CLAUDE_CODE_TLS_API_KEY', options.apiKey),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volcengine/tls-observer-claude-code-install",
-  "version": "0.0.1",
+  "version": "0.0.2",
   "description": "One-step installer for the TLS Observer Claude Code plugin.",
   "type": "module",
   "bin": {
@@ -15,13 +15,6 @@
     "LICENSE",
     "CHANGELOG.md"
   ],
-  "scripts": {
-    "build": "rslib build",
-    "check": "tsc --noEmit",
-    "format": "prettier --write \"bin/**/*.mjs\" \"scripts/**/*.mjs\" \"src/**/*.ts\" \"*.json\"",
-    "format:check": "prettier --check \"bin/**/*.mjs\" \"scripts/**/*.mjs\" \"src/**/*.ts\" \"*.json\"",
-    "sync-plugin": "node scripts/sync-plugin.mjs"
-  },
   "engines": {
     "node": ">=18"
   },
@@ -37,5 +30,12 @@
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
     "access": "public"
+  },
+  "scripts": {
+    "build": "rslib build",
+    "check": "tsc --noEmit",
+    "format": "prettier --write \"bin/**/*.mjs\" \"scripts/**/*.mjs\" \"src/**/*.ts\" \"*.json\"",
+    "format:check": "prettier --check \"bin/**/*.mjs\" \"scripts/**/*.mjs\" \"src/**/*.ts\" \"*.json\"",
+    "sync-plugin": "node scripts/sync-plugin.mjs"
   }
-}
+}

package/scripts/sync-plugin.mjs

@@ -4,7 +4,7 @@ import * as path from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const installRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const pluginSource = path.resolve(installRoot, '..', 'claude-code');
+const pluginSource = path.resolve(installRoot, '..', 'claude-code', 'dist-package');
 const pluginTarget = path.join(installRoot, 'plugins', 'tls-observer-claude-code');
 
 async function assertFile(filePath) {

package/src/installer/installer-runner.ts

@@ -1,6 +1,6 @@
 import * as fs from 'node:fs/promises';
 import * as path from 'node:path';
-import { execFile, spawn } from 'node:child_process';
+import { execFile, execFileSync, spawn } from 'node:child_process';
 import { homedir, tmpdir } from 'node:os';
 import { pathToFileURL } from 'node:url';
 import { promisify } from 'node:util';
@@ -76,10 +76,10 @@ const DEFAULT_SETTINGS_PATH = path.join(homedir(), '.claude', 'settings.json');
 const DEFAULT_SKILLS_ROOT = path.join(homedir(), '.claude', 'skills');
 const DEFAULT_ENV_TARGET = path.join(homedir(), '.claude', 'tls-observer-claude-code.env');
 const DEFAULT_DATA_ROOT = path.join(homedir(), '.claude', 'plugins', 'data', PLUGIN_NAME);
-const DEFAULT_REGION = 'cn-guilin-boe';
+const DEFAULT_REGION = 'cn-beijing';
 const DEFAULT_PROJECT_NAME = 'claude_code_observability';
 const DEFAULT_APP_NAME_PREFIX = 'claude-code-observability';
-const DEFAULT_TLS_ENDPOINT = 'tls-cn-guilin-boe.volces.com';
+const DEFAULT_TLS_ENDPOINT = 'tls-cn-beijing.volces.com';
 const DEFAULT_LOG_APP_TYPE = 'Claude';
 const DEFAULT_TEMPLATE_NAME = 'Claude';
 
@@ -105,18 +105,6 @@ function defaultTlsEndpointForRegion(region?: string): string {
   return region ? `tls-${region}.volces.com` : DEFAULT_TLS_ENDPOINT;
 }
 
-function normalizeEndpointHost(endpoint?: string): string {
-  return String(endpoint || '')
-    .trim()
-    .replace(/^https?:\/\//i, '')
-    .replace(/\/.*$/, '')
-    .replace(/:\d+$/, '');
-}
-
-function defaultOtelEndpointForRegion(region?: string, tlsEndpoint?: string): string {
-  return `https://${normalizeEndpointHost(tlsEndpoint) || defaultTlsEndpointForRegion(region)}:4318/v1/traces`;
-}
-
 function randomSuffix(): string {
   const alphabet = '0123456789abcdefghijklmnopqrstuvwxyz';
   let value = '';
@@ -130,9 +118,9 @@ function defaultAppName(): string {
 
 function applyDerivedDefaults(options: InstallOptions): void {
   if (options.region) {
-    if (!options.tlsEndpoint) options.tlsEndpoint = defaultTlsEndpointForRegion(options.region);
-    if (!options.otelEndpoint)
-      options.otelEndpoint = defaultOtelEndpointForRegion(options.region, options.tlsEndpoint);
+    if (!options.tlsEndpoint && !options.otelEndpoint) {
+      options.tlsEndpoint = defaultTlsEndpointForRegion(options.region);
+    }
   }
   if (!options.projectName && !options.projectId) options.projectName = DEFAULT_PROJECT_NAME;
   if (!options.logAppName) options.logAppName = defaultAppName();
@@ -159,7 +147,7 @@ function parseCliOptions(argv: string[] = process.argv.slice(2)): InstallOptions
     pluginTarget: readEnvString('CLAUDE_CODE_PLUGIN_TARGET') || path.join(skillsRoot, PLUGIN_NAME),
     envTarget: readEnvString('CLAUDE_CODE_TLS_ENV_TARGET') || DEFAULT_ENV_TARGET,
     dataRoot: readEnvString('CLAUDE_CODE_TLS_DATA_ROOT') || DEFAULT_DATA_ROOT,
-    region: readEnvString('CLAUDE_CODE_TLS_REGION'),
+    region: readEnvString('CLAUDE_CODE_TLS_REGION') || DEFAULT_REGION,
     otelEndpoint: readEnvString('CLAUDE_CODE_TLS_OTEL_ENDPOINT'),
     traceTopicId: readEnvString('CLAUDE_CODE_TLS_TRACE_TOPIC_ID'),
     apiKey: readEnvString('CLAUDE_CODE_TLS_API_KEY'),
@@ -238,8 +226,9 @@ Options:
   --advanced-paths               Prompt for Claude path overrides
   --registry <url>               NPM registry for plugin package. Default: https://registry.npmjs.org
   --plugin-version <version>     Exact plugin version or dist-tag. Overrides --beta
-  --region <region>              TLS region
-  --otel-endpoint <url>          OTLP traces endpoint
+  --region <region>              TLS region. Default: cn-beijing
+  --tls-endpoint <host>          TLS Producer endpoint. Derived from region by default
+  --otel-endpoint <url>          Deprecated legacy endpoint alias
   --trace-topic-id <id>          TLS trace topic ID
   --api-key <value>              TLS API Key
   --ak <value>                   TLS Access Key
@@ -271,8 +260,85 @@ async function promptRequired(rl: readline.Interface, message: string, defaultVa
   }
 }
 
+function setTerminalEcho(enabled: boolean): boolean {
+  if (!process.stdin.isTTY || !process.stdout.isTTY) return false;
+  try {
+    execFileSync('stty', [enabled ? 'echo' : '-echo'], {
+      stdio: ['inherit', 'ignore', 'ignore'],
+    });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
 async function promptSecret(rl: readline.Interface, message: string, defaultValue = ''): Promise<string> {
-  return promptRequired(rl, message, defaultValue);
+  if (!process.stdin.isTTY || !process.stdout.isTTY) {
+    return promptRequired(rl, message, defaultValue);
+  }
+
+  rl.pause();
+  return new Promise<string>((resolve, reject) => {
+    const input = process.stdin;
+    let value = '';
+    let finished = false;
+    const previousRawMode = input.isRaw;
+    let echoDisabled = false;
+    const suffix = defaultValue ? '\n    default: 已设置，回车保留\n> ' : '\n> ';
+
+    function cleanup(): void {
+      input.off('data', onData);
+      input.setRawMode(Boolean(previousRawMode));
+      if (echoDisabled) setTerminalEcho(true);
+      input.pause();
+      rl.resume();
+    }
+
+    function finish(): void {
+      if (finished) return;
+      finished = true;
+      cleanup();
+      process.stdout.write('\n');
+      const resolvedValue = value.trim() || defaultValue;
+      if (resolvedValue) {
+        resolve(resolvedValue);
+      } else {
+        console.log('This value is required.');
+        resolve(promptSecret(rl, message, defaultValue));
+      }
+    }
+
+    function onData(buffer: Buffer): void {
+      for (const char of buffer.toString('utf8')) {
+        if (finished) return;
+        if (char === '\u0003') {
+          finished = true;
+          cleanup();
+          reject(new Error('Interrupted'));
+          return;
+        }
+        if (char === '\r' || char === '\n') {
+          finish();
+          return;
+        }
+        if (char === '\u007f' || char === '\b') {
+          if (value.length > 0) {
+            value = [...value].slice(0, -1).join('');
+            process.stdout.write('\b \b');
+          }
+          continue;
+        }
+        value += char;
+        process.stdout.write('*');
+      }
+    }
+
+    input.resume();
+    input.setRawMode(true);
+    input.on('data', onData);
+    echoDisabled = setTerminalEcho(false);
+    process.stdout.write(`${message}${suffix}`);
+  });
 }
 
 function detectAuthType(options: InstallOptions): 'apiKey' | 'aksk' | undefined {
@@ -296,7 +362,9 @@ function validateBaseTlsConfig(options: InstallOptions): void {
 function validateTlsConfig(options: InstallOptions): void {
   validateBaseTlsConfig(options);
   const missing: string[] = [];
-  if (!options.otelEndpoint) missing.push('--otel-endpoint or CLAUDE_CODE_TLS_OTEL_ENDPOINT');
+  if (!options.tlsEndpoint && !options.otelEndpoint) {
+    missing.push('--tls-endpoint, --region, or legacy --otel-endpoint');
+  }
   if (!options.traceTopicId) missing.push('--trace-topic-id or CLAUDE_CODE_TLS_TRACE_TOPIC_ID');
   if (missing.length > 0) throw new Error(`Missing required TLS config: ${missing.join(', ')}`);
 }
@@ -329,7 +397,6 @@ async function collectInteractiveOptions(options: InstallOptions): Promise<Insta
         detectAuthType(options) || 'apiKey',
       );
       if (authType === 'apiKey') {
-        options.otelEndpoint = await promptRequired(rl, 'OTLP trace endpoint', options.otelEndpoint);
         options.traceTopicId = await promptRequired(rl, 'Trace topic ID', options.traceTopicId || '');
         options.apiKey = await promptSecret(rl, 'TLS API Key', options.apiKey || '');
         options.ak = undefined;
@@ -577,7 +644,12 @@ async function installPluginPackageToTemp(options: InstallOptions): Promise<{
 async function findLocalPluginSource(): Promise<string | undefined> {
   const explicit = readEnvString('CLAUDE_CODE_PLUGIN_SOURCE');
   if (!explicit) return undefined;
-  const candidates = [explicit].filter((candidate): candidate is string => Boolean(candidate));
+  const manifest = await readJsonFile<{ publishConfig?: { directory?: string } }>(
+    path.join(explicit, 'package.json'),
+    {},
+  );
+  const publishDirectory = manifest.publishConfig?.directory;
+  const candidates = publishDirectory ? [path.join(explicit, publishDirectory)] : [explicit];
   for (const candidate of candidates) {
     try {
       await assertPluginRuntime(candidate);
@@ -586,7 +658,9 @@ async function findLocalPluginSource(): Promise<string | undefined> {
       // Continue so the final error includes the env var value.
     }
   }
-  throw new Error(`CLAUDE_CODE_PLUGIN_SOURCE does not point to a built plugin: ${explicit}`);
+  throw new Error(
+    `CLAUDE_CODE_PLUGIN_SOURCE does not point to a built runtime package: ${explicit}. Run the plugin build first.`,
+  );
 }
 
 async function readPluginVersion(pluginSource: string): Promise<string | undefined> {
@@ -611,12 +685,11 @@ async function installPlugin(options: InstallOptions): Promise<PluginInstallResu
     for (const entry of runtimeEntries) {
       await fs.cp(path.join(source, entry), path.join(options.pluginTarget, entry), { recursive: true });
     }
-
     const npm = process.platform === 'win32' ? 'npm.cmd' : 'npm';
     console.log('插件依赖安装中，请稍后...');
     try {
       await new Promise<void>((resolve, reject) => {
-        const child = spawn(npm, ['install', '--omit=dev', '--no-audit', '--no-fund'], {
+        const child = spawn(npm, ['install', '--omit=dev', '--ignore-scripts', '--no-audit', '--no-fund'], {
           cwd: options.pluginTarget,
           stdio: 'inherit',
         });
@@ -696,6 +769,7 @@ function buildTlsEnv(options: InstallOptions): string {
     '# Generated by tls-observer-claude-code installer.',
     '# Keep this file local because it can contain credentials.',
     envLine('CLAUDE_CODE_TLS_REGION', options.region),
+    envLine('CLAUDE_CODE_TLS_ENDPOINT', options.tlsEndpoint),
     envLine('CLAUDE_CODE_TLS_OTEL_ENDPOINT', options.otelEndpoint),
     envLine('CLAUDE_CODE_TLS_TRACE_TOPIC_ID', options.traceTopicId),
     envLine('CLAUDE_CODE_TLS_API_KEY', options.apiKey),