optimus-tool-call 0.2.2 → 0.2.5

package/dist/test/integration-canonical.test.js

@@ -0,0 +1,157 @@
+import { test } from "node:test";
+import assert from "node:assert";
+import { buildTelemetryEvent } from "../lib/telemetry.js";
+import { normalizeToCanonical } from "../lib/telemetry/canonical.js";
+/**
+ * Integration tests verifying that Claude and Cursor produce identical
+ * telemetry events for the same tool invocations.
+ */
+test("Integration: Read /etc/passwd from both agents produces same event", () => {
+    // Claude hook payload
+    const claudeRaw = {
+        hook_event_name: "PreToolUse",
+        tool_name: "Read",
+        tool_input: { file_path: "/etc/passwd" },
+        session_id: "session-123",
+        cwd: "/home/user",
+    };
+    // Cursor hook payload (same action, different format)
+    const cursorRaw = {
+        toolUse: { name: "Read", input: { file_path: "/etc/passwd" } },
+        sessionId: "session-123",
+        cwd: "/home/user",
+    };
+    // Normalize both
+    const claudeCanonical = normalizeToCanonical(claudeRaw);
+    const cursorCanonical = normalizeToCanonical(cursorRaw);
+    // Build telemetry events
+    const claudeEvent = buildTelemetryEvent({
+        tool_name: claudeCanonical.tool_name,
+        tool_input: claudeCanonical.tool_input,
+        session_id: claudeCanonical.session_id,
+        cwd: claudeCanonical.cwd,
+        hook_event_name: claudeCanonical.hook_event_name,
+        raw_event: claudeCanonical.raw_event,
+    }, "claude", claudeCanonical.session_id);
+    const cursorEvent = buildTelemetryEvent({
+        tool_name: cursorCanonical.tool_name,
+        tool_input: cursorCanonical.tool_input,
+        session_id: cursorCanonical.session_id,
+        cwd: cursorCanonical.cwd,
+        hook_event_name: cursorCanonical.hook_event_name,
+        raw_event: cursorCanonical.raw_event,
+    }, "cursor", cursorCanonical.session_id);
+    // Verify critical fields match (except agent_identity which should differ)
+    assert(claudeEvent);
+    assert(cursorEvent);
+    assert.strictEqual(claudeEvent.event_type, cursorEvent.event_type);
+    assert.strictEqual(claudeEvent.session_id, cursorEvent.session_id);
+    assert.strictEqual(claudeEvent.working_directory, cursorEvent.working_directory);
+    assert.strictEqual(claudeEvent.tool_call_metadata.tool_name, cursorEvent.tool_call_metadata.tool_name);
+    assert.deepEqual(claudeEvent.tool_call_metadata.tool_input, cursorEvent.tool_call_metadata.tool_input);
+    // Agent identity should be different
+    assert.strictEqual(claudeEvent.agent_identity, "claude");
+    assert.strictEqual(cursorEvent.agent_identity, "cursor");
+});
+test("Integration: Dangerous shell command from both agents", () => {
+    // Claude preToolUse with bash command
+    const claudeRaw = {
+        hook_event_name: "PreToolUse",
+        tool_name: "Bash",
+        tool_input: { command: "rm -rf /var/log" },
+        user_prompt: "clean up logs",
+        session_id: "claude-sess",
+    };
+    // Cursor preToolUse with bash command (different field names)
+    const cursorRaw = {
+        toolUse: {
+            name: "Bash",
+            input: { command: "rm -rf /var/log" },
+        },
+        user_prompt: "clean up logs",
+        sessionId: "cursor-sess",
+    };
+    const claudeCanonical = normalizeToCanonical(claudeRaw);
+    const cursorCanonical = normalizeToCanonical(cursorRaw);
+    // Tool information should be identical
+    assert.strictEqual(claudeCanonical.tool_name, cursorCanonical.tool_name);
+    assert.strictEqual(claudeCanonical.tool_name, "Bash");
+    assert.deepEqual(claudeCanonical.tool_input.command, cursorCanonical.tool_input.command);
+    assert.strictEqual(claudeCanonical.user_prompt, cursorCanonical.user_prompt);
+    // But agents should be detected correctly
+    assert.strictEqual(claudeCanonical.agent, "claude");
+    assert.strictEqual(cursorCanonical.agent, "cursor");
+});
+test("Integration: Web operations from both agents", () => {
+    const claudeRaw = {
+        hook_event_name: "PreToolUse",
+        tool_name: "WebFetch",
+        tool_input: { url: "https://api.github.com/user", prompt: "check auth" },
+        user_prompt: "verify github access",
+    };
+    const cursorRaw = {
+        toolName: "WebFetch",
+        toolInput: { url: "https://api.github.com/user", prompt: "check auth" },
+        userPrompt: "verify github access",
+    };
+    const claudeCanonical = normalizeToCanonical(claudeRaw);
+    const cursorCanonical = normalizeToCanonical(cursorRaw);
+    assert.strictEqual(claudeCanonical.tool_name, "WebFetch");
+    assert.strictEqual(cursorCanonical.tool_name, "WebFetch");
+    assert.deepEqual(claudeCanonical.tool_input, cursorCanonical.tool_input);
+});
+test("Integration: MCP tool invocations from both agents", () => {
+    const claudeRaw = {
+        hook_event_name: "PreToolUse",
+        tool_name: "mcp__sequential_thinking__think",
+        tool_input: { thought: "this is complex" },
+    };
+    const cursorRaw = {
+        toolName: "mcp__sequential_thinking__think",
+        toolInput: { thought: "this is complex" },
+    };
+    const claudeCanonical = normalizeToCanonical(claudeRaw);
+    const cursorCanonical = normalizeToCanonical(cursorRaw);
+    assert.strictEqual(claudeCanonical.tool_name, cursorCanonical.tool_name);
+    assert.deepEqual(claudeCanonical.tool_input, cursorCanonical.tool_input);
+});
+test("Integration: Cursor beforeShellExecution maps to same canonical as Claude preToolUse Bash", () => {
+    // Claude preToolUse with Bash
+    const claudeRaw = {
+        hook_event_name: "PreToolUse",
+        tool_name: "Bash",
+        tool_input: { command: "curl -X GET https://api.example.com" },
+    };
+    // Cursor beforeShellExecution with same command
+    const cursorRaw = {
+        command: "curl -X GET https://api.example.com",
+    };
+    const claudeCanonical = normalizeToCanonical(claudeRaw);
+    const cursorCanonical = normalizeToCanonical(cursorRaw);
+    // Both should identify as shell operations
+    assert.strictEqual(claudeCanonical.tool_name, "Bash");
+    assert.strictEqual(cursorCanonical.tool_name, "Bash");
+    // Tool input should be normalized the same way
+    assert.deepEqual(claudeCanonical.tool_input, cursorCanonical.tool_input);
+    assert.strictEqual(claudeCanonical.tool_input.command, "curl -X GET https://api.example.com");
+});
+test("Integration: Write operations with sensitivity", () => {
+    const claudeRaw = {
+        hook_event_name: "PreToolUse",
+        tool_name: "Write",
+        tool_input: { file_path: "~/.ssh/authorized_keys" },
+        user_prompt: "add SSH key",
+    };
+    const cursorRaw = {
+        tool: { name: "Write", input: { file_path: "~/.ssh/authorized_keys" } },
+        userPrompt: "add SSH key",
+    };
+    const claudeCanonical = normalizeToCanonical(claudeRaw);
+    const cursorCanonical = normalizeToCanonical(cursorRaw);
+    // Sensitive path should be preserved identically
+    assert.strictEqual(claudeCanonical.tool_name, "Write");
+    assert.strictEqual(cursorCanonical.tool_name, "Write");
+    assert.deepEqual(claudeCanonical.tool_input, cursorCanonical.tool_input);
+    assert.strictEqual(claudeCanonical.tool_input.file_path, "~/.ssh/authorized_keys");
+});
+//# sourceMappingURL=integration-canonical.test.js.map

package/dist/test/integration-canonical.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-canonical.test.js","sourceRoot":"","sources":["../../src/test/integration-canonical.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE;;;GAGG;AAEH,IAAI,CAAC,oEAAoE,EAAE,GAAG,EAAE;IAC9E,sBAAsB;IACtB,MAAM,SAAS,GAAG;QAChB,eAAe,EAAE,YAAY;QAC7B,SAAS,EAAE,MAAM;QACjB,UAAU,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE;QACxC,UAAU,EAAE,aAAa;QACzB,GAAG,EAAE,YAAY;KAClB,CAAC;IAEF,sDAAsD;IACtD,MAAM,SAAS,GAAG;QAChB,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE;QAC9D,SAAS,EAAE,aAAa;QACxB,GAAG,EAAE,YAAY;KAClB,CAAC;IAEF,iBAAiB;IACjB,MAAM,eAAe,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,eAAe,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAExD,yBAAyB;IACzB,MAAM,WAAW,GAAG,mBAAmB,CACrC;QACE,SAAS,EAAE,eAAe,CAAC,SAAS;QACpC,UAAU,EAAE,eAAe,CAAC,UAAU;QACtC,UAAU,EAAE,eAAe,CAAC,UAAU;QACtC,GAAG,EAAE,eAAe,CAAC,GAAG;QACxB,eAAe,EAAE,eAAe,CAAC,eAAe;QAChD,SAAS,EAAE,eAAe,CAAC,SAAS;KACrC,EACD,QAAQ,EACR,eAAe,CAAC,UAAU,CAC3B,CAAC;IAEF,MAAM,WAAW,GAAG,mBAAmB,CACrC;QACE,SAAS,EAAE,eAAe,CAAC,SAAS;QACpC,UAAU,EAAE,eAAe,CAAC,UAAU;QACtC,UAAU,EAAE,eAAe,CAAC,UAAU;QACtC,GAAG,EAAE,eAAe,CAAC,GAAG;QACxB,eAAe,EAAE,eAAe,CAAC,eAAe;QAChD,SAAS,EAAE,eAAe,CAAC,SAAS;KACrC,EACD,QAAQ,EACR,eAAe,CAAC,UAAU,CAC3B,CAAC;IAEF,2EAA2E;IAC3E,MAAM,CAAC,WAAW,CAAC,CAAC;IACpB,MAAM,CAAC,WAAW,CAAC,CAAC;IACpB,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,iBAAiB,EAAE,WAAW,CAAC,iBAAiB,CAAC,CAAC;IACjF,MAAM,CAAC,WAAW,CAChB,WAAW,CAAC,kBAAkB,CAAC,SAAS,EACxC,WAAW,CAAC,kBAAkB,CAAC,SAAS,CACzC,CAAC;IACF,MAAM,CAAC,SAAS,CACd,WAAW,CAAC,kBAAkB,CAAC,UAAU,EACzC,WAAW,CAAC,kBAAkB,CAAC,UAAU,CAC1C,CAAC;IAEF,qCAAqC;IACrC,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IACzD,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;IACjE,sCAAsC;IACtC,MAAM,SAAS,GAAG;QAChB,eAAe,EAAE,YAAY;QAC7B,SAAS,EAAE,MAAM;QACjB,UAAU,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE;QAC1C,WAAW,EAAE,eAAe;QAC5B,UAAU,EAAE,aAAa;KAC1B,CAAC;IAEF,8DAA8D;IAC9D,MAAM,SAAS,GAAG;QAChB,OAAO,EAAE;YACP,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE;SACtC;QACD,WAAW,EAAE,eAAe;QAC5B,SAAS,EAAE,aAAa;KACzB,CAAC;IAEF,MAAM,eAAe,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,eAAe,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAExD,uCAAuC;IACvC,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,SAAS,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACzE,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,CAAC,SAAS,CACd,eAAe,CAAC,UAAU,CAAC,OAAO,EAClC,eAAe,CAAC,UAAU,CAAC,OAAO,CACnC,CAAC;IACF,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,WAAW,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC;IAE7E,0CAA0C;IAC1C,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8CAA8C,EAAE,GAAG,EAAE;IACxD,MAAM,SAAS,GAAG;QAChB,eAAe,EAAE,YAAY;QAC7B,SAAS,EAAE,UAAU;QACrB,UAAU,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE,MAAM,EAAE,YAAY,EAAE;QACxE,WAAW,EAAE,sBAAsB;KACpC,CAAC;IAEF,MAAM,SAAS,GAAG;QAChB,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE,MAAM,EAAE,YAAY,EAAE;QACvE,UAAU,EAAE,sBAAsB;KACnC,CAAC;IAEF,MAAM,eAAe,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,eAAe,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAExD,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC1D,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC1D,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,UAAU,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;AAC3E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAC9D,MAAM,SAAS,GAAG;QAChB,eAAe,EAAE,YAAY;QAC7B,SAAS,EAAE,iCAAiC;QAC5C,UAAU,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE;KAC3C,CAAC;IAEF,MAAM,SAAS,GAAG;QAChB,QAAQ,EAAE,iCAAiC;QAC3C,SAAS,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE;KAC1C,CAAC;IAEF,MAAM,eAAe,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,eAAe,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAExD,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,SAAS,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACzE,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,UAAU,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;AAC3E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2FAA2F,EAAE,GAAG,EAAE;IACrG,8BAA8B;IAC9B,MAAM,SAAS,GAAG;QAChB,eAAe,EAAE,YAAY;QAC7B,SAAS,EAAE,MAAM;QACjB,UAAU,EAAE,EAAE,OAAO,EAAE,qCAAqC,EAAE;KAC/D,CAAC;IAEF,gDAAgD;IAChD,MAAM,SAAS,GAAG;QAChB,OAAO,EAAE,qCAAqC;KAC/C,CAAC;IAEF,MAAM,eAAe,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,eAAe,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAExD,2CAA2C;IAC3C,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAEtD,+CAA+C;IAC/C,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,UAAU,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;IACzE,MAAM,CAAC,WAAW,CAChB,eAAe,CAAC,UAAU,CAAC,OAAO,EAClC,qCAAqC,CACtC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC1D,MAAM,SAAS,GAAG;QAChB,eAAe,EAAE,YAAY;QAC7B,SAAS,EAAE,OAAO;QAClB,UAAU,EAAE,EAAE,SAAS,EAAE,wBAAwB,EAAE;QACnD,WAAW,EAAE,aAAa;KAC3B,CAAC;IAEF,MAAM,SAAS,GAAG;QAChB,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,wBAAwB,EAAE,EAAE;QACvE,UAAU,EAAE,aAAa;KAC1B,CAAC;IAEF,MAAM,eAAe,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,eAAe,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAExD,iDAAiD;IACjD,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACvD,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACvD,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,UAAU,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;IACzE,MAAM,CAAC,WAAW,CAChB,eAAe,CAAC,UAAU,CAAC,SAAS,EACpC,wBAAwB,CACzB,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,10 +1,11 @@
 {
   "name": "optimus-tool-call",
-  "version": "0.2.2",
+  "version": "0.2.5",
   "description": "Agentic audit sensor — streams raw tool call metadata; the Optimus backend classifies on ingest",
   "type": "module",
   "bin": {
-    "optimus-tool-call": "./dist/index.js"
+    "optimus-tool-call": "./dist/index.js",
+    "optimus-capture-prompt": "./dist/capture-prompt.js"
   },
   "main": "./dist/index.js",
   "scripts": {
@@ -25,12 +26,12 @@
   "repository": {
     "type": "git",
     "url": "git+https://github.com/optimuslabs-io/optimus-secure-fdn.git",
-    "directory": "dev_npx_packages/optimus-tool-call"
+    "directory": "npx_packages/production/optimus-tool-call"
   },
   "bugs": {
     "url": "https://github.com/optimuslabs-io/optimus-secure-fdn/issues"
   },
-  "homepage": "https://github.com/optimuslabs-io/optimus-secure-fdn/tree/main/dev_npx_packages/optimus-tool-call#readme",
+  "homepage": "https://github.com/optimuslabs-io/optimus-secure-fdn/tree/main/npx_packages/production/optimus-tool-call#readme",
   "files": [
     "dist/**/*",
     "README.md"
@@ -44,6 +45,6 @@
     "typescript": "^5.0.0"
   },
   "dependencies": {
-    "optimus-tofu": "^0.1.0"
+    "optimus-tofu": "^0.1.8"
   }
 }