optimus-tool-call-staging 0.2.4

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Optimus Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,194 @@
+# optimus-tool-call
+
+Passive, non-blocking audit sensor for tool calls from coding agents (Claude Code, Cursor, GitHub Copilot, etc.).
+
+## Features
+
+- **50+ command classifiers** - Full nah taxonomy coverage
+- **40+ action types** - Comprehensive security categorization
+- **Real-time telemetry** - Async event streaming to backend
+- **Zero developer friction** - <50ms p99 latency, never blocks execution
+- **Smart parsing** - Handles pipes, redirects, command chains, shell builtins
+- **Flag-based detection** - Context-aware classification (sed -i, curl -X POST, make --dry-run, etc.)
+
+## How It Works
+
+1. **Hook Integration**: Integrates with Claude Code PreToolUse hooks
+2. **Command Classification**: Parses and classifies each tool call into an action type
+3. **Telemetry Event**: Creates event with classified action, file paths, session info
+4. **Async Streaming**: Non-blocking queue sends events to backend in batches
+5. **Backend Severity**: Django backend assigns severity (critical/high/medium/low/info)
+6. **Frontend Dashboard**: Real-time audit log with 2-second polling
+
+## Installation
+
+```bash
+npm install @optimus/tool-call
+```
+
+## Usage
+
+Via PreToolUse hook (automatic in Claude Code):
+
+```json
+{
+  "preToolUse": {
+    "matcher": "*",
+    "command": "node path/to/optimus-tool-call/dist/index.js"
+  }
+}
+```
+
+The hook:
+- Classifies the tool call
+- Extracts relevant metadata (files, commands, patterns)
+- Queues telemetry event
+- Returns `{"continue": true, "permission": "allow"}` (never blocks)
+
+## Command Coverage
+
+See [COMMAND_COVERAGE.md](./COMMAND_COVERAGE.md) for complete list of 50+ supported commands and their classifications.
+
+### Quick Examples
+
+```
+Filesystem:
+  read:   cat, grep, ls, find, head, tail, which
+  write:  echo, touch, mkdir, cp, mv, chmod
+  delete: rm
+
+Git:
+  safe:           log, status, diff, branch
+  write:          add, commit, checkout, pull
+  history_rewrite: push --force, reset --hard, rebase
+
+Network:
+  outbound: curl, wget, ssh
+  write:    curl --data, scp, rsync
+
+Language Execution:
+  python, node, ruby, bash, source, gdb
+
+Text Processing:
+  sed -i → filesystem_write
+  awk with system() → lang_exec
+
+And 30+ more...
+```
+
+## Action Types
+
+| Type | Examples | Severity |
+|------|----------|----------|
+| `filesystem_read` | cat, grep, ls, find, head | low |
+| `filesystem_write` | echo, touch, mkdir, cp, mv | medium |
+| `filesystem_delete` | rm | medium |
+| `git_safe` | git log, git status | low |
+| `git_write` | git add, git commit | medium |
+| `git_remote_write` | git push | medium |
+| `git_discard` | git branch -d | medium |
+| `git_history_rewrite` | git push --force, git rebase | critical |
+| `network_outbound` | curl GET, wget | low |
+| `network_write` | curl POST, scp, rsync | high |
+| `network_diagnostic` | ping, traceroute | low |
+| `package_install` | npm install, pip install | high |
+| `package_run` | npm run | medium |
+| `lang_exec` | python, node, bash, gdb | high |
+| `process_signal` | kill, pkill | high |
+| `container_read` | docker ps, docker logs | low |
+| `container_write` | docker build, docker create | medium |
+| `container_exec` | docker run, docker exec | medium |
+| `container_destructive` | docker rm, docker stop | high |
+| `service_write` | systemctl start, service restart | high |
+| `agent_exec_bypass` | (reserved for future) | critical |
+| `obfuscated` | (reserved for future) | critical |
+
+## Configuration
+
+Environment variables (optional):
+
+```bash
+OPTIMUS_API_URL=https://your-host/             # Backend base URL (same as log-llm-config; see optimus-tofu)
+OPTIMUS_ENDPOINT=...                          # Alternative to OPTIMUS_API_URL
+OPTIMUS_HARDWARE_UUID=...                     # Override when no stable hardware UUID (e.g. Linux CI)
+OPTIMUS_BATCH_SIZE=50                         # Batch size before flush (default: 1 for testing, 50 for prod)
+```
+
+Ingestion uses the same machine auth as `log-llm-config`: keys under `~/opt-ai-sec/management/auth_key.txt`, handshake against `/endpoint_security/auth/`, and HMAC signatures on each batch (see backend `batch_create`).
+
+## Architecture
+
+```
+┌─────────────────────────────────────────────┐
+│ Coding Agent (Claude Code, Cursor, etc.)    │
+└────────────────────┬────────────────────────┘
+                     │ PreToolUse hook
+                     ▼
+┌─────────────────────────────────────────────┐
+│ optimus-tool-call (TypeScript)              │
+│ ├─ Classify command into action type        │
+│ ├─ Extract file paths, patterns, etc.       │
+│ ├─ Create telemetry event                   │
+│ └─ Queue for async streaming                │
+└────────────────────┬────────────────────────┘
+                     │ Non-blocking async
+                     ▼
+┌─────────────────────────────────────────────┐
+│ Django Backend (optimus_security)           │
+│ ├─ Receive batched events                   │
+│ ├─ Calculate severity                       │
+│ ├─ Store in SQLite                          │
+│ └─ Expose via REST API                      │
+└────────────────────┬────────────────────────┘
+                     │ /api/tool-calls/events/recent/
+                     ▼
+┌─────────────────────────────────────────────┐
+│ Frontend Dashboard (React)                  │
+│ ├─ Real-time audit log (2s polling)         │
+│ ├─ Color-coded severity/agent               │
+│ └─ Expandable command details               │
+└─────────────────────────────────────────────┘
+```
+
+## Development
+
+```bash
+npm install
+npm run build
+npm run test
+```
+
+## Testing
+
+E2E test with various commands:
+
+```bash
+./test-e2e.sh
+```
+
+This will:
+1. Clear the audit log
+2. Run 50+ diverse commands (filesystem, git, network, package, etc.)
+3. Verify correct classification for each
+4. Display coverage summary
+
+## Performance
+
+- **Classification latency**: <1ms per command
+- **Telemetry overhead**: <50ms p99 (async, non-blocking)
+- **Memory**: ~10MB resident (minimal buffering)
+- **CPU**: Negligible (event-driven)
+
+## Safety
+
+- ✅ Never blocks agent execution
+- ✅ Always returns `permission: "allow"`
+- ✅ Errors logged but never thrown
+- ✅ Graceful degradation if backend unavailable
+- ✅ Batch timeout ensures events flush (5s default)
+
+## References
+
+- Based on nah taxonomy: https://github.com/manuelschipper/nah
+- Integrated with Optimus Labs security platform
+- Part of agent compliance and audit infrastructure

package/dist/capture-prompt.d.ts

@@ -0,0 +1,14 @@
+#!/usr/bin/env node
+/**
+ * optimus-capture-prompt — Cursor hook to capture and store prompt text
+ *
+ * Runs on beforeSubmitPrompt hook. Reads the prompt from stdin (if available),
+ * stores it in a temp file keyed by session ID, so that the tool-call hook
+ * can retrieve it when processing tool invocations.
+ *
+ * Cursor hook protocol for beforeSubmitPrompt:
+ * - stdin: JSON with prompt text (format varies by Cursor version)
+ * - stdout: {"continue": true|false} JSON
+ */
+export {};
+//# sourceMappingURL=capture-prompt.d.ts.map

package/dist/capture-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture-prompt.d.ts","sourceRoot":"","sources":["../src/capture-prompt.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;GAUG"}

package/dist/capture-prompt.js

@@ -0,0 +1,173 @@
+#!/usr/bin/env node
+/**
+ * optimus-capture-prompt — Cursor hook to capture and store prompt text
+ *
+ * Runs on beforeSubmitPrompt hook. Reads the prompt from stdin (if available),
+ * stores it in a temp file keyed by session ID, so that the tool-call hook
+ * can retrieve it when processing tool invocations.
+ *
+ * Cursor hook protocol for beforeSubmitPrompt:
+ * - stdin: JSON with prompt text (format varies by Cursor version)
+ * - stdout: {"continue": true|false} JSON
+ */
+import fs from "fs";
+import os from "os";
+import path from "path";
+const dbg = (...args) => { if (process.env.OPTIMUS_DEBUG)
+    console.error(...args); };
+async function main() {
+    const stdinData = await readStdin();
+    dbg("[optimus-capture-prompt] ===== HOOK STARTED =====");
+    dbg("[optimus-capture-prompt] stdin length:", stdinData.length);
+    dbg("[optimus-capture-prompt] stdin preview:", stdinData.slice(0, 200));
+    let promptText = null;
+    let payloadSessionId = null;
+    try {
+        const raw = JSON.parse(stdinData);
+        dbg("[optimus-capture-prompt] Parsed JSON successfully");
+        dbg("[optimus-capture-prompt] Raw keys:", Object.keys(raw));
+        dbg("[optimus-capture-prompt] Raw payload:", JSON.stringify(raw, null, 2).slice(0, 500));
+        // Extract session ID for Cursor (from conversation_id or session_id in payload)
+        payloadSessionId =
+            (typeof raw.conversation_id === "string" && raw.conversation_id) ||
+                (typeof raw.session_id === "string" && raw.session_id) ||
+                null;
+        // Extract prompt from various possible locations in the hook payload
+        promptText =
+            extractValue(raw, ["prompt"]) ||
+                extractValue(raw, ["text"]) ||
+                extractValue(raw, ["message"]) ||
+                extractValue(raw, ["input"]) ||
+                null;
+        // Try to extract from nested message structure
+        if (!promptText) {
+            const msg = raw.message;
+            if (msg && typeof msg === "object") {
+                promptText =
+                    extractValue(msg, ["content"]) ||
+                        extractValue(msg, ["text"]) ||
+                        extractValue(msg, ["prompt"]) ||
+                        null;
+            }
+        }
+        dbg("[optimus-capture-prompt] Extracted prompt text:", promptText ? `"${promptText.slice(0, 100)}..."` : "null");
+    }
+    catch (error) {
+        // Not valid JSON — might not have prompt in this hook payload
+        console.error("[optimus-capture-prompt] Failed to parse JSON:", error);
+    }
+    // If we have a prompt, store it in a temp file keyed by session ID
+    if (promptText) {
+        dbg("[optimus-capture-prompt] Storing prompt...");
+        try {
+            const sessionId = payloadSessionId ||
+                process.env.CURSOR_SESSION_ID ||
+                process.env.CURSOR_CODE_SESSION_ID ||
+                process.env.CLAUDE_CODE_SESSION_ID ||
+                "unknown";
+            const promptCacheDir = path.join(os.tmpdir(), "optimus-prompt-cache");
+            dbg("[optimus-capture-prompt] Session ID:", sessionId);
+            dbg("[optimus-capture-prompt] Cache dir:", promptCacheDir);
+            // Create cache directory if it doesn't exist
+            if (!fs.existsSync(promptCacheDir)) {
+                dbg("[optimus-capture-prompt] Creating cache directory...");
+                fs.mkdirSync(promptCacheDir, { recursive: true });
+            }
+            // Write prompt to temp file (with short TTL via filename timestamp)
+            const timestamp = Date.now();
+            const promptFile = path.join(promptCacheDir, `prompt-${sessionId}-${timestamp}.txt`);
+            fs.writeFileSync(promptFile, promptText, "utf-8");
+            dbg(`[optimus-capture-prompt] Wrote prompt file: ${promptFile}`);
+            // Also write a "latest" symlink for easy access
+            const latestFile = path.join(promptCacheDir, `prompt-${sessionId}.txt`);
+            try {
+                fs.unlinkSync(latestFile);
+            }
+            catch {
+                // File might not exist
+            }
+            try {
+                fs.symlinkSync(promptFile, latestFile);
+                dbg(`[optimus-capture-prompt] Created symlink: ${latestFile}`);
+            }
+            catch (e) {
+                dbg(`[optimus-capture-prompt] Symlink creation failed (non-fatal):`, e);
+            }
+            dbg(`[optimus-capture-prompt] SUCCESS: Stored prompt at ${promptFile}`);
+            // Clean up old prompt files (older than 5 minutes)
+            cleanupOldPromptFiles(promptCacheDir, sessionId);
+        }
+        catch (error) {
+            // Non-fatal — if we can't cache the prompt, the tool-call hook just won't have it
+            console.error("[optimus-capture-prompt] ERROR: Failed to store prompt:", error);
+        }
+    }
+    else {
+        dbg("[optimus-capture-prompt] No prompt text found in hook payload");
+    }
+    // Always allow — never block on prompt capture
+    const response = { continue: true };
+    dbg("[optimus-capture-prompt] Returning response:", JSON.stringify(response));
+    console.log(JSON.stringify(response));
+}
+async function readStdin() {
+    return new Promise((resolve) => {
+        let data = "";
+        process.stdin.setEncoding("utf8");
+        process.stdin.on("readable", () => {
+            let chunk;
+            while ((chunk = process.stdin.read()) !== null) {
+                data += chunk;
+            }
+        });
+        process.stdin.on("end", () => {
+            resolve(data);
+        });
+        process.stdin.on("error", () => {
+            resolve("");
+        });
+    });
+}
+function extractValue(obj, keys) {
+    for (const key of keys) {
+        const value = obj[key];
+        if (value !== undefined && value !== null && typeof value === "string") {
+            return value;
+        }
+    }
+    return null;
+}
+function cleanupOldPromptFiles(dir, sessionId) {
+    try {
+        const files = fs.readdirSync(dir);
+        const now = Date.now();
+        const maxAge = 5 * 60 * 1000; // 5 minutes
+        for (const file of files) {
+            // Only clean up files for this session
+            if (!file.startsWith(`prompt-${sessionId}-`))
+                continue;
+            const filePath = path.join(dir, file);
+            try {
+                const stat = fs.statSync(filePath);
+                if (now - stat.mtimeMs > maxAge) {
+                    fs.unlinkSync(filePath);
+                }
+            }
+            catch {
+                // Ignore errors during cleanup
+            }
+        }
+    }
+    catch {
+        // Ignore errors during cleanup
+    }
+}
+main().catch((err) => {
+    if (process.env.OPTIMUS_DEBUG) {
+        console.error("[optimus-capture-prompt] Fatal error:", err);
+    }
+    const response = { continue: true };
+    console.log(JSON.stringify(response));
+    process.exit(0);
+});
+//# sourceMappingURL=capture-prompt.js.map

package/dist/capture-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture-prompt.js","sourceRoot":"","sources":["../src/capture-prompt.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,MAAM,GAAG,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa;IAAE,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAE/F,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,MAAM,SAAS,EAAE,CAAC;IAEpC,GAAG,CAAC,mDAAmD,CAAC,CAAC;IACzD,GAAG,CAAC,wCAAwC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAChE,GAAG,CAAC,yCAAyC,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAExE,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,gBAAgB,GAAkB,IAAI,CAAC;IAE3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAElC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QACzD,GAAG,CAAC,oCAAoC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,GAAG,CAAC,uCAAuC,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAEzF,gFAAgF;QAChF,gBAAgB;YACd,CAAC,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,IAAI,GAAG,CAAC,eAAe,CAAC;gBAChE,CAAC,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC;gBACtD,IAAI,CAAC;QAEP,qEAAqE;QACrE,UAAU;YACR,YAAY,CAAS,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC;gBACrC,YAAY,CAAS,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;gBACnC,YAAY,CAAS,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACtC,YAAY,CAAS,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;gBACpC,IAAI,CAAC;QAEP,+CAA+C;QAC/C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC;YACxB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACnC,UAAU;oBACR,YAAY,CAAS,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;wBACtC,YAAY,CAAS,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;wBACnC,YAAY,CAAS,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC;wBACrC,IAAI,CAAC;YACT,CAAC;QACH,CAAC;QAED,GAAG,CAAC,iDAAiD,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,8DAA8D;QAC9D,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAED,mEAAmE;IACnE,IAAI,UAAU,EAAE,CAAC;QACf,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,gBAAgB;gBAChC,OAAO,CAAC,GAAG,CAAC,iBAAiB;gBAC7B,OAAO,CAAC,GAAG,CAAC,sBAAsB;gBAClC,OAAO,CAAC,GAAG,CAAC,sBAAsB;gBAClC,SAAS,CAAC;YAEZ,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC;YAEtE,GAAG,CAAC,sCAAsC,EAAE,SAAS,CAAC,CAAC;YACvD,GAAG,CAAC,qCAAqC,EAAE,cAAc,CAAC,CAAC;YAE3D,6CAA6C;YAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gBACnC,GAAG,CAAC,sDAAsD,CAAC,CAAC;gBAC5D,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,CAAC;YAED,oEAAoE;YACpE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,SAAS,IAAI,SAAS,MAAM,CAAC,CAAC;YACrF,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;YAClD,GAAG,CAAC,+CAA+C,UAAU,EAAE,CAAC,CAAC;YAEjE,gDAAgD;YAChD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,SAAS,MAAM,CAAC,CAAC;YACxE,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;YACD,IAAI,CAAC;gBACH,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;gBACvC,GAAG,CAAC,6CAA6C,UAAU,EAAE,CAAC,CAAC;YACjE,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,CAAC,+DAA+D,EAAE,CAAC,CAAC,CAAC;YAC1E,CAAC;YAED,GAAG,CAAC,sDAAsD,UAAU,EAAE,CAAC,CAAC;YAExE,mDAAmD;YACnD,qBAAqB,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kFAAkF;YAClF,OAAO,CAAC,KAAK,CAAC,yDAAyD,EAAE,KAAK,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,+DAA+D,CAAC,CAAC;IACvE,CAAC;IAED,+CAA+C;IAC/C,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACpC,GAAG,CAAC,8CAA8C,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAElC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE;YAChC,IAAI,KAAoB,CAAC;YACzB,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC/C,IAAI,IAAI,KAAK,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAC7B,OAAO,CAAC,EAAE,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAI,GAA4B,EAAE,IAAc;IACnE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvE,OAAO,KAAU,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW,EAAE,SAAiB;IAC3D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;QAE1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,uCAAuC;YACvC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,SAAS,GAAG,CAAC;gBAAE,SAAS;YAEvD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACnC,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,MAAM,EAAE,CAAC;oBAChC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,+BAA+B;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+BAA+B;IACjC,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+/**
+ * optimus-tool-call — agentic audit sensor entry point
+ *
+ * Reads hook JSON from stdin, builds a raw telemetry event, streams it to the
+ * backend (server classifies), returns allow response.
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;GAKG"}

package/dist/index.js

@@ -0,0 +1,165 @@
+#!/usr/bin/env node
+/**
+ * optimus-tool-call — agentic audit sensor entry point
+ *
+ * Reads hook JSON from stdin, builds a raw telemetry event, streams it to the
+ * backend (server classifies), returns allow response.
+ */
+import fs from "fs";
+import { buildTelemetryEvent, eventToDict } from "./lib/telemetry.js";
+import { queueEvent, ensureShutdown } from "./lib/streaming.js";
+import { normalizeToCanonical } from "./lib/telemetry/canonical.js";
+const dbg = (...args) => { if (process.env.OPTIMUS_DEBUG)
+    console.error(...args); };
+async function main() {
+    dbg("[optimus-tool-call] ===== HOOK STARTED =====");
+    dbg("[optimus-tool-call] NODE_ENV:", process.env.NODE_ENV);
+    dbg("[optimus-tool-call] CURSOR:", process.env.CURSOR);
+    dbg("[optimus-tool-call] CURSOR_SESSION_ID:", process.env.CURSOR_SESSION_ID);
+    dbg("[optimus-tool-call] CLAUDE_CODE_SESSION_ID:", process.env.CLAUDE_CODE_SESSION_ID);
+    // Setup shutdown handling
+    ensureShutdown();
+    // Read stdin
+    const stdinData = await readStdin();
+    dbg("[optimus-tool-call] stdin length:", stdinData.length);
+    dbg("[optimus-tool-call] stdin preview:", stdinData.slice(0, 300));
+    // Parse and normalize to canonical format
+    let canonical;
+    try {
+        const raw = JSON.parse(stdinData);
+        dbg("[optimus-tool-call] Parsed JSON successfully");
+        dbg("[optimus-tool-call] Raw keys:", Object.keys(raw));
+        // Normalize to canonical format (works for both Claude and Cursor)
+        canonical = normalizeToCanonical(raw);
+        dbg("[optimus-tool-call] Detected agent:", canonical.agent);
+        dbg("[optimus-tool-call] Hook event name:", canonical.hook_event_name);
+        dbg("[optimus-tool-call] Tool name:", canonical.tool_name);
+        // Try to extract user prompt from transcript file (works for both Claude and Cursor)
+        if (!canonical.user_prompt) {
+            const transcriptPath = typeof raw.transcript_path === "string" ? raw.transcript_path : null;
+            if (transcriptPath) {
+                const userPrompt = readLastUserPrompt(transcriptPath);
+                if (userPrompt) {
+                    canonical = { ...canonical, user_prompt: userPrompt };
+                }
+            }
+        }
+        dbg("[optimus-tool-call] Canonical event:", {
+            agent: canonical.agent,
+            hook_event_name: canonical.hook_event_name,
+            tool_name: canonical.tool_name,
+            user_prompt_preview: canonical.user_prompt?.slice(0, 100),
+        });
+    }
+    catch (error) {
+        // Invalid JSON or parse error — allow and return
+        console.error("[optimus-tool-call] ERROR: Failed to parse:", error);
+        const response = { continue: true, permission: "allow" };
+        console.log(JSON.stringify(response));
+        return;
+    }
+    // Convert canonical to ToolInvocation (for backward compatibility with existing code)
+    const invocation = {
+        tool_name: canonical.tool_name,
+        tool_input: canonical.tool_input,
+        tool_use_id: canonical.tool_use_id,
+        session_id: canonical.session_id,
+        cwd: canonical.cwd,
+        hook_event_name: canonical.hook_event_name,
+        model: canonical.model,
+        user_prompt: canonical.user_prompt,
+        raw_event: canonical.raw_event,
+    };
+    // Build telemetry event
+    const event = buildTelemetryEvent(invocation, canonical.agent, canonical.session_id);
+    if (event) {
+        // Server classifies `action_type`; queue raw invocation for all non-null events.
+        await queueEvent(event);
+        if (process.env.OPTIMUS_DEBUG) {
+            const eventDict = eventToDict(event);
+            console.error(`[optimus-tool-call] Queued event: ${JSON.stringify(eventDict)}`);
+        }
+    }
+    // Always return allow (never block)
+    const response = { continue: true, permission: "allow" };
+    console.log(JSON.stringify(response));
+}
+async function readStdin() {
+    /**
+     * Read all of stdin until EOF.
+     */
+    return new Promise((resolve, reject) => {
+        let data = "";
+        process.stdin.setEncoding("utf8");
+        process.stdin.on("readable", () => {
+            let chunk;
+            while ((chunk = process.stdin.read()) !== null) {
+                data += chunk;
+            }
+        });
+        process.stdin.on("end", () => {
+            resolve(data);
+        });
+        process.stdin.on("error", (err) => {
+            reject(err);
+        });
+    });
+}
+/**
+ * Read the Claude Code session transcript (JSONL) and return the text of the
+ * last user-typed message.  Each line is a JSON object; user turns look like:
+ *   {"type":"user","message":{"role":"user","content":"<text>"},...}
+ * Failures are non-fatal — returns null if the file is missing or unreadable.
+ */
+function readLastUserPrompt(transcriptPath) {
+    try {
+        const raw = fs.readFileSync(transcriptPath, "utf-8");
+        const lines = raw.split("\n");
+        for (let i = lines.length - 1; i >= 0; i--) {
+            const line = lines[i].trim();
+            if (!line)
+                continue;
+            try {
+                const entry = JSON.parse(line);
+                if (entry.type !== "user")
+                    continue;
+                const msg = entry.message;
+                if (!msg || msg.role !== "user")
+                    continue;
+                const content = msg.content;
+                if (typeof content === "string" && content.trim()) {
+                    return content.trim();
+                }
+                if (Array.isArray(content)) {
+                    const blocks = content;
+                    // Skip tool_result turns — those are API feedback, not user-typed messages
+                    if (blocks.some((c) => c.type === "tool_result"))
+                        continue;
+                    const text = blocks
+                        .filter((c) => c.type === "text" && typeof c.text === "string")
+                        .map((c) => c.text)
+                        .join("\n")
+                        .trim();
+                    if (text)
+                        return text;
+                }
+            }
+            catch {
+                // skip malformed lines
+            }
+        }
+    }
+    catch {
+        // file missing or unreadable — non-fatal
+    }
+    return null;
+}
+// Run
+main().catch((err) => {
+    console.error("[optimus-tool-call] Fatal error:", err);
+    // Always return allow on error
+    const response = { continue: true, permission: "allow" };
+    console.log(JSON.stringify(response));
+    process.exit(0); // Never exit non-zero (never block)
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAuB,MAAM,oBAAoB,CAAC;AAC3F,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAA2B,MAAM,8BAA8B,CAAC;AAE7F,MAAM,GAAG,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa;IAAE,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAE/F,KAAK,UAAU,IAAI;IACjB,GAAG,CAAC,8CAA8C,CAAC,CAAC;IACpD,GAAG,CAAC,+BAA+B,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3D,GAAG,CAAC,6BAA6B,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvD,GAAG,CAAC,wCAAwC,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC7E,GAAG,CAAC,6CAA6C,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAEvF,0BAA0B;IAC1B,cAAc,EAAE,CAAC;IAEjB,aAAa;IACb,MAAM,SAAS,GAAG,MAAM,SAAS,EAAE,CAAC;IAEpC,GAAG,CAAC,mCAAmC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAC3D,GAAG,CAAC,oCAAoC,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAEnE,0CAA0C;IAC1C,IAAI,SAA6B,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAElC,GAAG,CAAC,8CAA8C,CAAC,CAAC;QACpD,GAAG,CAAC,+BAA+B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAEvD,mEAAmE;QACnE,SAAS,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAEtC,GAAG,CAAC,qCAAqC,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5D,GAAG,CAAC,sCAAsC,EAAE,SAAS,CAAC,eAAe,CAAC,CAAC;QACvE,GAAG,CAAC,gCAAgC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;QAE3D,qFAAqF;QACrF,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;YAC3B,MAAM,cAAc,GAAG,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5F,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,UAAU,GAAG,kBAAkB,CAAC,cAAc,CAAC,CAAC;gBACtD,IAAI,UAAU,EAAE,CAAC;oBACf,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;gBACxD,CAAC;YACH,CAAC;QACH,CAAC;QAED,GAAG,CAAC,sCAAsC,EAAE;YAC1C,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,eAAe,EAAE,SAAS,CAAC,eAAe;YAC1C,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,mBAAmB,EAAE,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SAC1D,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iDAAiD;QACjD,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IAED,sFAAsF;IACtF,MAAM,UAAU,GAAmB;QACjC,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,eAAe,EAAE,SAAS,CAAC,eAAe;QAC1C,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,SAAS,EAAE,SAAS,CAAC,SAAS;KAC/B,CAAC;IAEF,wBAAwB;IACxB,MAAM,KAAK,GAAG,mBAAmB,CAAC,UAAU,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;IAErF,IAAI,KAAK,EAAE,CAAC;QACV,iFAAiF;QACjF,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;QAExB,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YACrC,OAAO,CAAC,KAAK,CAAC,qCAAqC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,SAAS;IACtB;;OAEG;IACH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAElC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE;YAChC,IAAI,KAAoB,CAAC;YACzB,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC/C,IAAI,IAAI,KAAK,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAChC,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAGD;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,cAAsB;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE9B,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;gBAC1D,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;oBAAE,SAAS;gBAEpC,MAAM,GAAG,GAAG,KAAK,CAAC,OAA8C,CAAC;gBACjE,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;oBAAE,SAAS;gBAE1C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;gBAC5B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;oBAClD,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;gBACxB,CAAC;gBACD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC3B,MAAM,MAAM,GAAG,OAAyC,CAAC;oBACzD,2EAA2E;oBAC3E,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC;wBAAE,SAAS;oBAC3D,MAAM,IAAI,GAAG,MAAM;yBAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;yBAC9D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAc,CAAC;yBAC5B,IAAI,CAAC,IAAI,CAAC;yBACV,IAAI,EAAE,CAAC;oBACV,IAAI,IAAI;wBAAE,OAAO,IAAI,CAAC;gBACxB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yCAAyC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAGD,MAAM;AACN,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;IACvD,+BAA+B;IAC/B,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,oCAAoC;AACvD,CAAC,CAAC,CAAC"}

package/dist/lib/endpoint-config.d.ts

@@ -0,0 +1,2 @@
+export { loadEndpointBase } from "optimus-tofu-staging";
+//# sourceMappingURL=endpoint-config.d.ts.map

package/dist/lib/endpoint-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-config.d.ts","sourceRoot":"","sources":["../../src/lib/endpoint-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/lib/endpoint-config.js

@@ -0,0 +1,2 @@
+export { loadEndpointBase } from "optimus-tofu-staging";
+//# sourceMappingURL=endpoint-config.js.map

package/dist/lib/endpoint-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-config.js","sourceRoot":"","sources":["../../src/lib/endpoint-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/lib/hardware-uuid.d.ts

@@ -0,0 +1,7 @@
+/** Run a static shell command and return trimmed stdout (same pattern as log-llm-config). */
+export declare function readCommandOutput(command: string): string;
+/** Resolve hardware UUID from environment or macOS system commands (same strategy as log-llm-config). */
+declare function resolveHardwareUuid(): string;
+export declare function tryResolveHardwareUuid(): string | null;
+export { resolveHardwareUuid };
+//# sourceMappingURL=hardware-uuid.d.ts.map

package/dist/lib/hardware-uuid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hardware-uuid.d.ts","sourceRoot":"","sources":["../../src/lib/hardware-uuid.ts"],"names":[],"mappings":"AAEA,6FAA6F;AAC7F,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CASzD;AAED,yGAAyG;AACzG,iBAAS,mBAAmB,IAAI,MAAM,CAyBrC;AAED,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,IAAI,CAMtD;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC"}