optimus-tool-call-staging 0.2.4

package/dist/lib/hardware-uuid.js

@@ -0,0 +1,52 @@
+import { execSync } from "node:child_process";
+/** Run a static shell command and return trimmed stdout (same pattern as log-llm-config). */
+export function readCommandOutput(command) {
+    try {
+        return execSync(command, {
+            encoding: "utf8",
+            stdio: ["ignore", "pipe", "ignore"],
+        }).trim();
+    }
+    catch {
+        return "";
+    }
+}
+/** Resolve hardware UUID from environment or macOS system commands (same strategy as log-llm-config). */
+function resolveHardwareUuid() {
+    const envUuid = process.env.OPTIMUS_HARDWARE_UUID?.trim();
+    if (envUuid)
+        return envUuid;
+    try {
+        const ioregOutput = execSync("ioreg -rd1 -c IOPlatformExpertDevice", {
+            encoding: "utf8",
+        }).trim();
+        const ioregMatch = ioregOutput.match(/"IOPlatformUUID"\s*=\s*"([^"]+)"/i);
+        if (ioregMatch?.[1])
+            return ioregMatch[1];
+    }
+    catch {
+        // try next method
+    }
+    try {
+        const profilerOutput = execSync("system_profiler SPHardwareDataType", {
+            encoding: "utf8",
+        }).trim();
+        const profilerMatch = profilerOutput.match(/Hardware UUID:\s*([A-F0-9-]+)/i);
+        if (profilerMatch?.[1])
+            return profilerMatch[1];
+    }
+    catch {
+        // both methods failed
+    }
+    throw new Error("Unable to determine hardware UUID via ioreg or system_profiler.");
+}
+export function tryResolveHardwareUuid() {
+    try {
+        return resolveHardwareUuid();
+    }
+    catch {
+        return null;
+    }
+}
+export { resolveHardwareUuid };
+//# sourceMappingURL=hardware-uuid.js.map

package/dist/lib/hardware-uuid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hardware-uuid.js","sourceRoot":"","sources":["../../src/lib/hardware-uuid.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,6FAA6F;AAC7F,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,OAAO,EAAE;YACvB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,yGAAyG;AACzG,SAAS,mBAAmB;IAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;IAC1D,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAE5B,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,QAAQ,CAAC,sCAAsC,EAAE;YACnE,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC1E,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,QAAQ,CAAC,oCAAoC,EAAE;YACpE,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,aAAa,GAAG,cAAc,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC7E,IAAI,aAAa,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,sBAAsB;IACxB,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,IAAI,CAAC;QACH,OAAO,mBAAmB,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/lib/machine-auth.d.ts

@@ -0,0 +1,11 @@
+import { type StoredAuthKey } from "optimus-tofu-staging";
+/** Same path as log-llm-config: `~/opt-ai-sec/management/auth_key.txt` under `$HOME`. */
+export declare const OPTIMUS_AUTH_KEY_RELATIVE_PATH: string;
+/**
+ * Same TOFU + machine key flow as log-llm-config: verify stored key against
+ * `/endpoint_security/auth/` or request a new key and persist under HOME.
+ */
+export declare function ensureToolCallAuth(hardwareUuid: string): Promise<StoredAuthKey>;
+/** For tests: clear cached auth so HOME / env changes take effect. */
+export declare function resetToolCallAuthCache(): void;
+//# sourceMappingURL=machine-auth.d.ts.map

package/dist/lib/machine-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-auth.d.ts","sourceRoot":"","sources":["../../src/lib/machine-auth.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,aAAa,EACnB,MAAM,sBAAsB,CAAC;AAE9B,yFAAyF;AACzF,eAAO,MAAM,8BAA8B,QAI1C,CAAC;AAuBF;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,aAAa,CAAC,CAgBxB;AAED,sEAAsE;AACtE,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C"}

package/dist/lib/machine-auth.js

@@ -0,0 +1,46 @@
+import path from "node:path";
+import { ensureAuthentication, loadEndpointBase, readStoredAuthKey, } from "optimus-tofu-staging";
+/** Same path as log-llm-config: `~/opt-ai-sec/management/auth_key.txt` under `$HOME`. */
+export const OPTIMUS_AUTH_KEY_RELATIVE_PATH = path.join("opt-ai-sec", "management", "auth_key.txt");
+let cached = null;
+async function postJsonForAuth(endpointUrl, body) {
+    const res = await fetch(endpointUrl, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(body),
+    });
+    const text = await res.text();
+    if (!res.ok) {
+        throw new Error(`HTTP ${res.status}: ${text ? text.slice(0, 200) : res.statusText}`);
+    }
+    if (!text)
+        return { status: "error", error: "empty_response" };
+    return JSON.parse(text);
+}
+/**
+ * Same TOFU + machine key flow as log-llm-config: verify stored key against
+ * `/endpoint_security/auth/` or request a new key and persist under HOME.
+ */
+export async function ensureToolCallAuth(hardwareUuid) {
+    const fromDisk = readStoredAuthKey({
+        authRelativePath: OPTIMUS_AUTH_KEY_RELATIVE_PATH,
+    });
+    if (!fromDisk?.key && cached?.hardwareUuid === hardwareUuid) {
+        cached = null;
+    }
+    if (cached?.hardwareUuid === hardwareUuid)
+        return cached.key;
+    const key = await ensureAuthentication({
+        hardwareUuid,
+        endpointBase: loadEndpointBase(),
+        authRelativePath: OPTIMUS_AUTH_KEY_RELATIVE_PATH,
+        postJson: postJsonForAuth,
+    });
+    cached = { hardwareUuid, key };
+    return key;
+}
+/** For tests: clear cached auth so HOME / env changes take effect. */
+export function resetToolCallAuthCache() {
+    cached = null;
+}
+//# sourceMappingURL=machine-auth.js.map

package/dist/lib/machine-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-auth.js","sourceRoot":"","sources":["../../src/lib/machine-auth.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,GAGlB,MAAM,sBAAsB,CAAC;AAE9B,yFAAyF;AACzF,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,CAAC,IAAI,CACrD,YAAY,EACZ,YAAY,EACZ,cAAc,CACf,CAAC;AAEF,IAAI,MAAM,GAAwD,IAAI,CAAC;AAEvE,KAAK,UAAU,eAAe,CAC5B,WAAmB,EACnB,IAA6B;IAE7B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,QAAQ,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,CACpE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqB,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,YAAoB;IAEpB,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QACjC,gBAAgB,EAAE,8BAA8B;KACjD,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,MAAM,EAAE,YAAY,KAAK,YAAY,EAAE,CAAC;QAC5D,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,EAAE,YAAY,KAAK,YAAY;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC;IAC7D,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC;QACrC,YAAY;QACZ,YAAY,EAAE,gBAAgB,EAAE;QAChC,gBAAgB,EAAE,8BAA8B;QAChD,QAAQ,EAAE,eAAe;KAC1B,CAAC,CAAC;IACH,MAAM,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC;IAC/B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,sBAAsB;IACpC,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC"}

package/dist/lib/startup-sync.d.ts

@@ -0,0 +1,13 @@
+/**
+ * POST `/endpoint_security/startup/` with `metadata.user_profile` so `EndpointMachine.user_profile`
+ * stays fresh even when `log_uuid` is throttled (e.g. customer hooks with existing auth_key.txt).
+ * Signs `payload` with the stored machine key when present (same as `log-llm-config` startup_sender)
+ * so the backend does not revoke keys on every unsigned sync.
+ *
+ * Throttled (default 30 min) on success to avoid an extra HTTP round-trip on every tool call.
+ * After failures (network, non-2xx, etc.), exponential backoff caps repeated work so hooks are
+ * not blocked on every batch. Override interval with `OPTIMUS_STARTUP_SYNC_INTERVAL_MS` (set to
+ * `0` to sync on every batch when healthy). Skip entirely with `OPTIMUS_SKIP_STARTUP_SYNC=1`.
+ */
+export declare function ensureStartupMetadataSynced(hardwareUuid: string): Promise<void>;
+//# sourceMappingURL=startup-sync.d.ts.map

package/dist/lib/startup-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup-sync.d.ts","sourceRoot":"","sources":["../../src/lib/startup-sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAuDH,wBAAsB,2BAA2B,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA4GrF"}

package/dist/lib/startup-sync.js

@@ -0,0 +1,147 @@
+/**
+ * POST `/endpoint_security/startup/` with `metadata.user_profile` so `EndpointMachine.user_profile`
+ * stays fresh even when `log_uuid` is throttled (e.g. customer hooks with existing auth_key.txt).
+ * Signs `payload` with the stored machine key when present (same as `log-llm-config` startup_sender)
+ * so the backend does not revoke keys on every unsigned sync.
+ *
+ * Throttled (default 30 min) on success to avoid an extra HTTP round-trip on every tool call.
+ * After failures (network, non-2xx, etc.), exponential backoff caps repeated work so hooks are
+ * not blocked on every batch. Override interval with `OPTIMUS_STARTUP_SYNC_INTERVAL_MS` (set to
+ * `0` to sync on every batch when healthy). Skip entirely with `OPTIMUS_SKIP_STARTUP_SYNC=1`.
+ */
+import { buildStartupEndpointUrl, createSignature, loadEndpointBase, persistAuthKey, readStoredAuthKey, } from "optimus-tofu-staging";
+import { OPTIMUS_AUTH_KEY_RELATIVE_PATH, resetToolCallAuthCache } from "./machine-auth.js";
+import { resolveUserProfile } from "./user-profile.js";
+const emptyUserProfile = () => ({
+    generateduuid: "",
+    machineuuid: "",
+    mac_username: "",
+    github_username: "",
+    claude_email: "",
+    cursor_email: "",
+});
+const DEFAULT_STARTUP_SYNC_INTERVAL_MS = 1800000;
+const STARTUP_SYNC_FAILURE_BACKOFF_BASE_MS = 5000;
+const STARTUP_SYNC_FAILURE_BACKOFF_CAP_MS = 300000;
+let lastStartupAttemptEndedMs = 0;
+/** After a failed attempt, false until the next completed successful sync. */
+let lastStartupAttemptOk = true;
+let startupSyncFailureStreak = 0;
+function recordStartupSyncAttemptEnd(ok) {
+    lastStartupAttemptEndedMs = Date.now();
+    lastStartupAttemptOk = ok;
+    if (ok) {
+        startupSyncFailureStreak = 0;
+    }
+    else {
+        startupSyncFailureStreak += 1;
+    }
+}
+function shouldSkipStartupSyncDueToCooldown(now, intervalMs) {
+    if (lastStartupAttemptEndedMs <= 0)
+        return false;
+    const failureBackoffMs = !lastStartupAttemptOk
+        ? Math.min(STARTUP_SYNC_FAILURE_BACKOFF_CAP_MS, STARTUP_SYNC_FAILURE_BACKOFF_BASE_MS *
+            2 ** Math.min(Math.max(0, startupSyncFailureStreak - 1), 6))
+        : 0;
+    const successIntervalMs = lastStartupAttemptOk && intervalMs > 0 ? intervalMs : 0;
+    const cooldownMs = Math.max(failureBackoffMs, successIntervalMs);
+    return cooldownMs > 0 && now - lastStartupAttemptEndedMs < cooldownMs;
+}
+export async function ensureStartupMetadataSynced(hardwareUuid) {
+    if (process.env.OPTIMUS_SKIP_STARTUP_SYNC === "1")
+        return;
+    const rawInterval = process.env.OPTIMUS_STARTUP_SYNC_INTERVAL_MS;
+    let intervalMs = DEFAULT_STARTUP_SYNC_INTERVAL_MS;
+    if (rawInterval !== undefined && rawInterval !== "") {
+        const parsed = parseInt(rawInterval, 10);
+        intervalMs =
+            Number.isNaN(parsed) || parsed < 0 ? DEFAULT_STARTUP_SYNC_INTERVAL_MS : parsed;
+    }
+    const now = Date.now();
+    if (shouldSkipStartupSyncDueToCooldown(now, intervalMs)) {
+        return;
+    }
+    const timestamp = new Date().toISOString();
+    const payloadSummary = {
+        timestamp,
+        directory: process.cwd(),
+        hardware_uuid: hardwareUuid,
+    };
+    let user_profile;
+    try {
+        user_profile = { ...resolveUserProfile() };
+    }
+    catch (err) {
+        console.error(`[optimus-tool-call] resolveUserProfile failed; continuing startup sync with empty profile: ${err instanceof Error ? err.message : String(err)}`);
+        user_profile = emptyUserProfile();
+    }
+    const github_username = (typeof user_profile.github_username === "string" && user_profile.github_username.trim()) ||
+        process.env.GITHUB_USER ||
+        process.env.GH_USER ||
+        "";
+    const metadata = {
+        github_username,
+        org_identifier: process.env.GITHUB_ORG || "",
+        repo_identifier: process.env.GITHUB_REPOSITORY || "",
+        branch: process.env.GITHUB_REF_NAME || process.env.BRANCH_NAME || "",
+        commit_sha: process.env.GITHUB_SHA || "",
+        agent_name: process.env.OPTIMUS_AGENT || "",
+        user_profile,
+    };
+    const body = {
+        hardware_uuid: hardwareUuid,
+        payload: payloadSummary,
+        metadata,
+        scan_timestamp: timestamp,
+    };
+    const storedKey = readStoredAuthKey({
+        authRelativePath: OPTIMUS_AUTH_KEY_RELATIVE_PATH,
+    });
+    if (storedKey?.key && storedKey.hardware_uuid === hardwareUuid) {
+        body.signature = createSignature(payloadSummary, storedKey.key);
+        if (storedKey.key_id)
+            body.key_id = storedKey.key_id;
+    }
+    const url = buildStartupEndpointUrl(loadEndpointBase());
+    try {
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), 5000);
+        let res;
+        try {
+            res = await fetch(url, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify(body),
+                signal: controller.signal,
+            });
+        }
+        finally {
+            clearTimeout(timeoutId);
+        }
+        const text = await res.text();
+        if (!res.ok) {
+            console.error(`[optimus-tool-call] startup metadata sync failed ${res.status}: ${text ? text.slice(0, 240) : res.statusText}`);
+            recordStartupSyncAttemptEnd(false);
+            return;
+        }
+        let parsed = {};
+        try {
+            parsed = JSON.parse(text);
+        }
+        catch {
+            recordStartupSyncAttemptEnd(false);
+            return;
+        }
+        if (parsed.status === "key_issued" && typeof parsed.key === "string") {
+            persistAuthKey(parsed.key, typeof parsed.key_id === "string" ? parsed.key_id : null, hardwareUuid, { authRelativePath: OPTIMUS_AUTH_KEY_RELATIVE_PATH });
+            resetToolCallAuthCache();
+        }
+        recordStartupSyncAttemptEnd(true);
+    }
+    catch (err) {
+        console.error(`[optimus-tool-call] startup metadata sync error: ${err instanceof Error ? err.message : String(err)}`);
+        recordStartupSyncAttemptEnd(false);
+    }
+}
+//# sourceMappingURL=startup-sync.js.map

package/dist/lib/startup-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup-sync.js","sourceRoot":"","sources":["../../src/lib/startup-sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,8BAA8B,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,EAAE,kBAAkB,EAAoB,MAAM,mBAAmB,CAAC;AAEzE,MAAM,gBAAgB,GAAG,GAAgB,EAAE,CAAC,CAAC;IAC3C,aAAa,EAAE,EAAE;IACjB,WAAW,EAAE,EAAE;IACf,YAAY,EAAE,EAAE;IAChB,eAAe,EAAE,EAAE;IACnB,YAAY,EAAE,EAAE;IAChB,YAAY,EAAE,EAAE;CACjB,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,OAAS,CAAC;AACnD,MAAM,oCAAoC,GAAG,IAAK,CAAC;AACnD,MAAM,mCAAmC,GAAG,MAAO,CAAC;AAEpD,IAAI,yBAAyB,GAAG,CAAC,CAAC;AAClC,8EAA8E;AAC9E,IAAI,oBAAoB,GAAG,IAAI,CAAC;AAChC,IAAI,wBAAwB,GAAG,CAAC,CAAC;AAEjC,SAAS,2BAA2B,CAAC,EAAW;IAC9C,yBAAyB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvC,oBAAoB,GAAG,EAAE,CAAC;IAC1B,IAAI,EAAE,EAAE,CAAC;QACP,wBAAwB,GAAG,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,wBAAwB,IAAI,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,kCAAkC,CAAC,GAAW,EAAE,UAAkB;IACzE,IAAI,yBAAyB,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,gBAAgB,GAAG,CAAC,oBAAoB;QAC5C,CAAC,CAAC,IAAI,CAAC,GAAG,CACN,mCAAmC,EACnC,oCAAoC;YAClC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,wBAAwB,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAC9D;QACH,CAAC,CAAC,CAAC,CAAC;IACN,MAAM,iBAAiB,GAAG,oBAAoB,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;IACjE,OAAO,UAAU,GAAG,CAAC,IAAI,GAAG,GAAG,yBAAyB,GAAG,UAAU,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,YAAoB;IACpE,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG;QAAE,OAAO;IAE1D,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC;IACjE,IAAI,UAAU,GAAG,gCAAgC,CAAC;IAClD,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACzC,UAAU;YACR,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,MAAM,CAAC;IACnF,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,kCAAkC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC;QACxD,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,cAAc,GAAG;QACrB,SAAS;QACT,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE;QACxB,aAAa,EAAE,YAAY;KAC5B,CAAC;IACF,IAAI,YAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,YAAY,GAAG,EAAE,GAAG,kBAAkB,EAAE,EAAE,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,8FACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;QACF,YAAY,GAAG,gBAAgB,EAAE,CAAC;IACpC,CAAC;IACD,MAAM,eAAe,GACnB,CAAC,OAAO,YAAY,CAAC,eAAe,KAAK,QAAQ,IAAI,YAAY,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QACzF,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,OAAO,CAAC,GAAG,CAAC,OAAO;QACnB,EAAE,CAAC;IACL,MAAM,QAAQ,GAAG;QACf,eAAe;QACf,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE;QAC5C,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE;QACpD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE;QACpE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE;QACxC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE;QAC3C,YAAY;KACb,CAAC;IACF,MAAM,IAAI,GAA4B;QACpC,aAAa,EAAE,YAAY;QAC3B,OAAO,EAAE,cAAc;QACvB,QAAQ;QACR,cAAc,EAAE,SAAS;KAC1B,CAAC;IAEF,MAAM,SAAS,GAAG,iBAAiB,CAAC;QAClC,gBAAgB,EAAE,8BAA8B;KACjD,CAAC,CAAC;IACH,IAAI,SAAS,EAAE,GAAG,IAAI,SAAS,CAAC,aAAa,KAAK,YAAY,EAAE,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAG,eAAe,CAAC,cAAc,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QAChE,IAAI,SAAS,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IACvD,CAAC;IAED,MAAM,GAAG,GAAG,uBAAuB,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAC7D,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CACX,oDAAoD,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,CAChH,CAAC;YACF,2BAA2B,CAAC,KAAK,CAAC,CAAC;YACnC,OAAO;QACT,CAAC;QACD,IAAI,MAAM,GAA4B,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B,CAAC,KAAK,CAAC,CAAC;YACnC,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrE,cAAc,CACZ,MAAM,CAAC,GAAG,EACV,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EACxD,YAAY,EACZ,EAAE,gBAAgB,EAAE,8BAA8B,EAAE,CACrD,CAAC;YACF,sBAAsB,EAAE,CAAC;QAC3B,CAAC;QACD,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,oDAAoD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACvG,CAAC;QACF,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;AACH,CAAC"}

package/dist/lib/streaming.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Telemetry streaming — batch and send events to Optimus backend.
+ */
+import { TelemetryEvent } from "./telemetry.js";
+/**
+ * Add an event to the queue and flush if needed.
+ */
+export declare function queueEvent(event: TelemetryEvent): Promise<void>;
+/**
+ * Flush all queued events to backend.
+ */
+export declare function flushEvents(): Promise<void>;
+/**
+ * Ensure all events are flushed on process exit.
+ * Uses beforeExit to allow async flush before process terminates.
+ */
+export declare function ensureShutdown(): void;
+//# sourceMappingURL=streaming.d.ts.map

package/dist/lib/streaming.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"streaming.d.ts","sourceRoot":"","sources":["../../src/lib/streaming.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAiBhD;;GAEG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBrE;AAED;;GAEG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAyBjD;AAiLD;;;GAGG;AACH,wBAAgB,cAAc,IAAI,IAAI,CA0BrC"}

package/dist/lib/streaming.js

@@ -0,0 +1,243 @@
+/**
+ * Telemetry streaming — batch and send events to Optimus backend.
+ */
+import { createSignature } from "optimus-tofu-staging";
+import { ensureToolCallAuth } from "./machine-auth.js";
+import { ensureStartupMetadataSynced } from "./startup-sync.js";
+import { cloneToolCallMetadataForWire } from "./telemetry/wire-metadata.js";
+import { loadEndpointBase } from "./endpoint-config.js";
+import { tryResolveHardwareUuid } from "./hardware-uuid.js";
+const DEBUG = !!process.env.OPTIMUS_DEBUG;
+const dbg = (...args) => { if (DEBUG)
+    console.error(...args); };
+// Backend configuration
+const OPTIMUS_API_BASE = loadEndpointBase();
+const BATCH_SIZE = parseInt(process.env.OPTIMUS_BATCH_SIZE || "1", 10); // Default to 1 for testing
+const BATCH_TIMEOUT_MS = 5000; // 5 seconds
+// In-memory event queue
+let eventQueue = [];
+let batchTimer = null;
+/**
+ * Add an event to the queue and flush if needed.
+ */
+export async function queueEvent(event) {
+    if (!event) {
+        return;
+    }
+    eventQueue.push(event);
+    // Flush immediately if batch size reached
+    if (eventQueue.length >= BATCH_SIZE) {
+        await flushEvents();
+    }
+    else if (!batchTimer) {
+        // Set timer for delayed flush if not already set
+        batchTimer = setTimeout(() => {
+            flushEvents().catch((err) => {
+                // Log but don't block
+                console.error("[optimus-tool-call] Failed to flush events:", err);
+            });
+            batchTimer = null;
+        }, BATCH_TIMEOUT_MS);
+    }
+}
+/**
+ * Flush all queued events to backend.
+ */
+export async function flushEvents() {
+    if (eventQueue.length === 0) {
+        return;
+    }
+    // Clear timer
+    if (batchTimer) {
+        clearTimeout(batchTimer);
+        batchTimer = null;
+    }
+    const eventsToSend = eventQueue.splice(0, eventQueue.length);
+    try {
+        await sendBatch(eventsToSend);
+    }
+    catch (err) {
+        // Non-blocking: log error but don't throw
+        console.error(`[optimus-tool-call] Failed to send ${eventsToSend.length} events:`, err instanceof Error ? err.message : String(err));
+        // Optionally re-queue events on failure (for now, just drop)
+        // eventQueue.unshift(...eventsToSend);
+    }
+}
+/**
+ * Clone events for HTTP: drop metadata keys the backend recomputes (classification,
+ * MCP split, identity) so the client cannot spoof them.
+ */
+function eventsWireFromTelemetry(events) {
+    return events.map((e) => {
+        const raw = JSON.parse(JSON.stringify(e));
+        const meta = raw.tool_call_metadata;
+        const cleaned = cloneToolCallMetadataForWire(meta);
+        if (cleaned !== undefined) {
+            raw.tool_call_metadata = cleaned;
+        }
+        return raw;
+    });
+}
+/**
+ * Send batch of events to Django backend.
+ */
+async function sendBatch(events) {
+    if (events.length === 0) {
+        return;
+    }
+    dbg(`[optimus-tool-call] Sending ${events.length} events to backend...`);
+    dbg(`[optimus-tool-call] Event agents:`, events.map(e => e.agent_identity).join(", "));
+    const hardwareUuid = tryResolveHardwareUuid();
+    if (!hardwareUuid) {
+        const err = "Cannot send tool-call telemetry: set OPTIMUS_HARDWARE_UUID or run on a host with a hardware UUID.";
+        console.error(`[optimus-tool-call] ERROR: ${err}`);
+        throw new Error(err);
+    }
+    dbg(`[optimus-tool-call] Hardware UUID: ${hardwareUuid}`);
+    try {
+        await ensureStartupMetadataSynced(hardwareUuid);
+        dbg(`[optimus-tool-call] Startup metadata synced`);
+    }
+    catch (err) {
+        console.error(`[optimus-tool-call] ERROR syncing startup metadata:`, err);
+        throw err;
+    }
+    const eventsWire = eventsWireFromTelemetry(events);
+    dbg(`[optimus-tool-call] Events wire:`, JSON.stringify(eventsWire, null, 2).slice(0, 500));
+    const signingPayload = {
+        hardware_uuid: hardwareUuid,
+        events: eventsWire,
+    };
+    dbg(`[optimus-tool-call] Payload ready, signing...`);
+    const auth = await ensureToolCallAuth(hardwareUuid);
+    dbg(`[optimus-tool-call] Auth obtained, key_id: ${auth.key_id}`);
+    const signature = createSignature(signingPayload, auth.key);
+    const payload = {
+        ...signingPayload,
+        signature,
+        key_id: auth.key_id || "",
+    };
+    const endpoint = new URL("api/tool-calls/events/batch_create/", OPTIMUS_API_BASE).toString();
+    dbg(`[optimus-tool-call] Endpoint: ${endpoint}`);
+    dbg(`[optimus-tool-call] Payload size: ${JSON.stringify(payload).length} bytes`);
+    const headers = {
+        "Content-Type": "application/json",
+    };
+    try {
+        // Use fetch if available (Node 18+), fall back to node:http
+        if (typeof fetch !== "undefined") {
+            dbg(`[optimus-tool-call] Using fetch to send...`);
+            const controller = new AbortController();
+            const timeoutId = setTimeout(() => controller.abort(), 5000);
+            try {
+                const response = await fetch(endpoint, {
+                    method: "POST",
+                    headers,
+                    body: JSON.stringify(payload),
+                    signal: controller.signal,
+                });
+                dbg(`[optimus-tool-call] Response status: ${response.status} ${response.statusText}`);
+                if (!response.ok) {
+                    const responseText = await response.text();
+                    dbg(`[optimus-tool-call] Response body: ${responseText}`);
+                    throw new Error(`HTTP ${response.status}: ${response.statusText} - ${responseText}`);
+                }
+                dbg(`[optimus-tool-call] ✅ Successfully sent ${events.length} events`);
+            }
+            finally {
+                clearTimeout(timeoutId);
+            }
+        }
+        else {
+            // Fallback for older Node versions
+            dbg(`[optimus-tool-call] Using http fallback...`);
+            await sendViaHttp(endpoint, headers, payload);
+        }
+    }
+    catch (err) {
+        const errorMsg = `Failed to send events to ${endpoint}: ${err instanceof Error ? err.message : String(err)}`;
+        console.error(`[optimus-tool-call] ❌ ${errorMsg}`);
+        throw new Error(errorMsg);
+    }
+}
+/**
+ * Fallback HTTP POST using node:http for older Node versions.
+ */
+function sendViaHttp(endpoint, headers, payload) {
+    return new Promise((resolve, reject) => {
+        try {
+            const url = new URL(endpoint);
+            const protocol = url.protocol === "https:" ? require("https") : require("http");
+            const options = {
+                hostname: url.hostname,
+                port: url.port,
+                path: url.pathname + url.search,
+                method: "POST",
+                headers: {
+                    ...headers,
+                    "Content-Length": Buffer.byteLength(JSON.stringify(payload)),
+                },
+                timeout: 5000,
+            };
+            const req = protocol.request(options, (res) => {
+                let data = "";
+                res.on("data", (chunk) => {
+                    data += chunk;
+                });
+                res.on("end", () => {
+                    if (res.statusCode && res.statusCode >= 200 && res.statusCode < 300) {
+                        resolve();
+                    }
+                    else {
+                        reject(new Error(`HTTP ${res.statusCode}: ${res.statusMessage || "Unknown error"}`));
+                    }
+                });
+            });
+            req.on("error", (err) => {
+                reject(err);
+            });
+            req.on("timeout", () => {
+                req.destroy();
+                reject(new Error("Request timeout"));
+            });
+            req.write(JSON.stringify(payload));
+            req.end();
+        }
+        catch (err) {
+            reject(err);
+        }
+    });
+}
+/**
+ * Ensure all events are flushed on process exit.
+ * Uses beforeExit to allow async flush before process terminates.
+ */
+export function ensureShutdown() {
+    // beforeExit allows async operations, unlike exit
+    process.on("beforeExit", async () => {
+        if (eventQueue.length > 0) {
+            try {
+                await flushEvents();
+            }
+            catch (err) {
+                console.error("[optimus-tool-call] Failed to flush events on shutdown:", err);
+            }
+        }
+    });
+    // Also handle explicit termination signals
+    const signals = ["SIGTERM", "SIGINT"];
+    signals.forEach((sig) => {
+        process.on(sig, async () => {
+            if (eventQueue.length > 0) {
+                try {
+                    await flushEvents();
+                }
+                catch (err) {
+                    console.error(`[optimus-tool-call] Failed to flush events on ${sig}:`, err);
+                }
+            }
+            process.exit(0);
+        });
+    });
+}
+//# sourceMappingURL=streaming.js.map

package/dist/lib/streaming.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streaming.js","sourceRoot":"","sources":["../../src/lib/streaming.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAEhE,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;AAC1C,MAAM,GAAG,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE,GAAG,IAAI,KAAK;IAAE,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAE3E,wBAAwB;AACxB,MAAM,gBAAgB,GAAG,gBAAgB,EAAE,CAAC;AAC5C,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,2BAA2B;AACnG,MAAM,gBAAgB,GAAG,IAAI,CAAC,CAAC,YAAY;AAE3C,wBAAwB;AACxB,IAAI,UAAU,GAAqB,EAAE,CAAC;AACtC,IAAI,UAAU,GAA0B,IAAI,CAAC;AAE7C;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAqB;IACpD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IAED,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAEvB,0CAA0C;IAC1C,IAAI,UAAU,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;QACpC,MAAM,WAAW,EAAE,CAAC;IACtB,CAAC;SAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACvB,iDAAiD;QACjD,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;YAC3B,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC1B,sBAAsB;gBACtB,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,GAAG,CAAC,CAAC;YACpE,CAAC,CAAC,CAAC;YACH,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,cAAc;IACd,IAAI,UAAU,EAAE,CAAC;QACf,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAE7D,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,YAAY,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,0CAA0C;QAC1C,OAAO,CAAC,KAAK,CACX,sCAAsC,YAAY,CAAC,MAAM,UAAU,EACnE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;QAEF,6DAA6D;QAC7D,uCAAuC;IACzC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAC9B,MAAwB;IAExB,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAA4B,CAAC;QACrE,MAAM,IAAI,GAAG,GAAG,CAAC,kBAAkB,CAAC;QACpC,MAAM,OAAO,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,GAAG,CAAC,kBAAkB,GAAG,OAAO,CAAC;QACnC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,SAAS,CAAC,MAAwB;IAC/C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IAED,GAAG,CAAC,+BAA+B,MAAM,CAAC,MAAM,uBAAuB,CAAC,CAAC;IACzE,GAAG,CAAC,mCAAmC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEvF,MAAM,YAAY,GAAG,sBAAsB,EAAE,CAAC;IAC9C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,mGAAmG,CAAC;QAChH,OAAO,CAAC,KAAK,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,GAAG,CAAC,sCAAsC,YAAY,EAAE,CAAC,CAAC;IAE1D,IAAI,CAAC;QACH,MAAM,2BAA2B,CAAC,YAAY,CAAC,CAAC;QAChD,GAAG,CAAC,6CAA6C,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,qDAAqD,EAAE,GAAG,CAAC,CAAC;QAC1E,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACnD,GAAG,CAAC,kCAAkC,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAE3F,MAAM,cAAc,GAA4B;QAC9C,aAAa,EAAE,YAAY;QAC3B,MAAM,EAAE,UAAU;KACnB,CAAC;IACF,GAAG,CAAC,+CAA+C,CAAC,CAAC;IAErD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,YAAY,CAAC,CAAC;IACpD,GAAG,CAAC,8CAA8C,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,eAAe,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5D,MAAM,OAAO,GAA4B;QACvC,GAAG,cAAc;QACjB,SAAS;QACT,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;KAC1B,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,qCAAqC,EAAE,gBAAgB,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC7F,GAAG,CAAC,iCAAiC,QAAQ,EAAE,CAAC,CAAC;IACjD,GAAG,CAAC,qCAAqC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC;IAEjF,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IAEF,IAAI,CAAC;QACH,4DAA4D;QAC5D,IAAI,OAAO,KAAK,KAAK,WAAW,EAAE,CAAC;YACjC,GAAG,CAAC,4CAA4C,CAAC,CAAC;YAClD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;YAE7D,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;oBACrC,MAAM,EAAE,MAAM;oBACd,OAAO;oBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;oBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBAEH,GAAG,CAAC,wCAAwC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;gBAEtF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBAC3C,GAAG,CAAC,sCAAsC,YAAY,EAAE,CAAC,CAAC;oBAC1D,MAAM,IAAI,KAAK,CACb,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,MAAM,YAAY,EAAE,CACpE,CAAC;gBACJ,CAAC;gBAED,GAAG,CAAC,2CAA2C,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC;YACzE,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,mCAAmC;YACnC,GAAG,CAAC,4CAA4C,CAAC,CAAC;YAClD,MAAM,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,4BAA4B,QAAQ,KACnD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAClB,QAAgB,EAChB,OAA+B,EAC/B,OAAgC;IAEhC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAEhF,MAAM,OAAO,GAAG;gBACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM;gBAC/B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,GAAG,OAAO;oBACV,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;iBAC7D;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;YAEF,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAQ,EAAE,EAAE;gBACjD,IAAI,IAAI,GAAG,EAAE,CAAC;gBACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAU,EAAE,EAAE;oBAC5B,IAAI,IAAI,KAAK,CAAC;gBAChB,CAAC,CAAC,CAAC;gBACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;wBACpE,OAAO,EAAE,CAAC;oBACZ,CAAC;yBAAM,CAAC;wBACN,MAAM,CACJ,IAAI,KAAK,CACP,QAAQ,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,aAAa,IAAI,eAAe,EAAE,CAClE,CACF,CAAC;oBACJ,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;gBAC7B,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;gBACrB,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YACnC,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc;IAC5B,kDAAkD;IAClD,OAAO,CAAC,EAAE,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE;QAClC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,WAAW,EAAE,CAAC;YACtB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,yDAAyD,EAAE,GAAG,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,2CAA2C;IAC3C,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACtC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACtB,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;YACzB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC;oBACH,MAAM,WAAW,EAAE,CAAC;gBACtB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CAAC,iDAAiD,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC9E,CAAC;YACH,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/telemetry/build-event.d.ts

@@ -0,0 +1,10 @@
+import type { TelemetryEvent, ToolInvocation } from "./types.js";
+/**
+ * Build a telemetry event from a tool invocation.
+ *
+ * Sends raw hook fields only. Classification (`action_type`, `command_components`,
+ * paths, patterns, MCP split) is performed server-side in Django
+ * (`tool_call_audit.classification.enrich`).
+ */
+export declare function buildTelemetryEvent(inv: ToolInvocation | null | undefined, agentIdentity?: string, sessionId?: string | null): TelemetryEvent | null;
+//# sourceMappingURL=build-event.d.ts.map

package/dist/lib/telemetry/build-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-event.d.ts","sourceRoot":"","sources":["../../../src/lib/telemetry/build-event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjE;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,cAAc,GAAG,IAAI,GAAG,SAAS,EACtC,aAAa,GAAE,MAAkB,EACjC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GACxB,cAAc,GAAG,IAAI,CA0BvB"}

package/dist/lib/telemetry/build-event.js

@@ -0,0 +1,32 @@
+/**
+ * Build a telemetry event from a tool invocation.
+ *
+ * Sends raw hook fields only. Classification (`action_type`, `command_components`,
+ * paths, patterns, MCP split) is performed server-side in Django
+ * (`tool_call_audit.classification.enrich`).
+ */
+export function buildTelemetryEvent(inv, agentIdentity = "unknown", sessionId) {
+    if (!inv) {
+        return null;
+    }
+    const toolName = inv.tool_name;
+    const toolNameNorm = typeof toolName === "string" ? toolName.trim() : "";
+    const normalizedToolInput = inv.tool_input || {};
+    const meta = {
+        tool_name: toolNameNorm || toolName,
+        tool_input: normalizedToolInput,
+        ...(inv.user_prompt ? { user_prompt: inv.user_prompt } : {}),
+        ...(inv.raw_event ? { raw_event: inv.raw_event } : {}),
+    };
+    return {
+        timestamp: new Date().toISOString(),
+        agent_identity: agentIdentity,
+        event_type: "tool_call",
+        session_id: sessionId,
+        tool_use_id: inv.tool_use_id || null,
+        hook_event_name: inv.hook_event_name || null,
+        working_directory: inv.cwd || null,
+        tool_call_metadata: meta,
+    };
+}
+//# sourceMappingURL=build-event.js.map

package/dist/lib/telemetry/build-event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-event.js","sourceRoot":"","sources":["../../../src/lib/telemetry/build-event.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAsC,EACtC,gBAAwB,SAAS,EACjC,SAAyB;IAEzB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC;IAC/B,MAAM,YAAY,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,MAAM,mBAAmB,GAA4B,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;IAE1E,MAAM,IAAI,GAAyC;QACjD,SAAS,EAAE,YAAY,IAAI,QAAQ;QACnC,UAAU,EAAE,mBAAmB;QAC/B,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvD,CAAC;IAEF,OAAO;QACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,cAAc,EAAE,aAAa;QAC7B,UAAU,EAAE,WAAW;QACvB,UAAU,EAAE,SAAS;QACrB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;QACpC,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,IAAI;QAC5C,iBAAiB,EAAE,GAAG,CAAC,GAAG,IAAI,IAAI;QAClC,kBAAkB,EAAE,IAAI;KACzB,CAAC;AACJ,CAAC"}