/op-identity

description: Rotate MAC address, hostname, DNS, and network identity markers
allowed-tools: Bash, Read, Write
argument-hint: <rotate|spoof|restore|status> [--interface eth0|wlan0]

> **Storage Policy**: ALL output files MUST be saved in the project directory. NEVER write to /tmp/ or any system temporary directory.

Network Identity Management

Target and options: `$ARGUMENTS`

1. Parse `$ARGUMENTS` for the subcommand (`rotate`, `spoof`, `restore`, or `status`) and `--interface` flag (default: primary active interface). Validate the subcommand is recognized.

2. **rotate**: Randomize all network identity markers:

• Generate a random MAC address with `macchanger -r <interface>` (bring interface down first, then back up)
• Change the hostname to a random plausible hostname via `hostnamectl set-hostname`
• Flush DNS cache with `systemd-resolve --flush-caches` or `resolvectl flush-caches`
• Request a new Tor circuit if Tor is running: `echo -e 'AUTHENTICATE ""\r\nSIGNAL NEWNYM\r\n' | nc 127.0.0.1 9051`

3. **spoof**: Set specific identity values:

• If `--mac` flag is provided: set the exact MAC address with `macchanger -m <mac> <interface>`
• If `--hostname` flag is provided: set the hostname with `hostnamectl set-hostname <hostname>`
• Support vendor prefix selection: allow choosing a MAC vendor prefix (e.g., `--vendor apple|dell|lenovo`) to blend with the local network

4. **restore**: Revert to original identity:

• Restore permanent/burned-in MAC with `macchanger -p <interface>`
• Restore original hostname from backup (stored during first rotation)
• Restart networking services to apply changes

5. **status**: Display current network identity state:

• Current MAC address per interface
• Current hostname and FQDN
• External IP address (via `curl -s ifconfig.me`)
• Configured DNS servers (from `/etc/resolv.conf` or `resolvectl status`)
• Tor circuit status if active

6. Log each identity rotation to the identity tracker:

   node "${CLAUDE_PLUGIN_ROOT}/scripts/identity-tracker.js" add <type> <interface> <old-value> <new-value>

7. Update session metrics:

   node "${CLAUDE_PLUGIN_ROOT}/scripts/session-state.js" metric identities_rotated