@gendigital/sage-openclaw 0.4.3 → 0.4.4

package/dist/index.cjs

@@ -7348,9 +7348,36 @@ function getFileContentRaw(path) {
 async function atomicWriteJson(path, data) {
   await fsPromises.mkdir((0, import_node_path.dirname)(path), { recursive: true });
   const tmp = `${path}.${(0, import_node_crypto.randomBytes)(6).toString("hex")}.tmp`;
-  await fsPromises.writeFile(tmp, `${JSON.stringify(data, null, 2)}
+  try {
+    await fsPromises.writeFile(tmp, `${JSON.stringify(data, null, 2)}
 `, { mode: 384 });
-  await fsPromises.rename(tmp, path);
+    await fsPromises.rename(tmp, path);
+  } catch (err) {
+    try {
+      await fsPromises.unlink(tmp);
+    } catch {
+    }
+    throw err;
+  }
+}
+async function pruneOrphanedTmpFiles(resolvedDir, maxAgeMs = 3e5) {
+  try {
+    const entries = await fsPromises.readdir(resolvedDir);
+    const now = Date.now();
+    for (const entry of entries) {
+      if (!entry.endsWith(".tmp"))
+        continue;
+      try {
+        const fullPath = (0, import_node_path.join)(resolvedDir, entry);
+        const s = await fsPromises.stat(fullPath);
+        if (now - s.mtimeMs > maxAgeMs) {
+          await fsPromises.unlink(fullPath);
+        }
+      } catch {
+      }
+    }
+  } catch {
+  }
 }
 
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js
@@ -11445,7 +11472,9 @@ var AllowlistConfigSchema = external_exports.object({
 var LoggingConfigSchema = external_exports.object({
   enabled: external_exports.boolean().default(true),
   log_clean: external_exports.boolean().default(false),
-  path: external_exports.string().default("~/.sage/audit.jsonl")
+  path: external_exports.string().default("~/.sage/audit.jsonl"),
+  max_bytes: external_exports.number().int().min(0).default(5 * 1024 * 1024),
+  max_files: external_exports.number().int().min(0).default(3)
 });
 var FileCheckConfigSchema = external_exports.object({
   endpoint: external_exports.string().optional(),
@@ -11623,6 +11652,40 @@ function toolInputSummary(toolName, toolInput) {
   }
   return JSON.stringify(toolInput).slice(0, MAX_SUMMARY_LEN);
 }
+async function rotateIfNeeded(filePath, maxBytes, maxFiles) {
+  if (maxBytes <= 0 || maxFiles <= 0)
+    return;
+  let size;
+  try {
+    const s = await (0, import_promises.stat)(filePath);
+    size = s.size;
+  } catch {
+    return;
+  }
+  if (size < maxBytes)
+    return;
+  try {
+    await (0, import_promises.unlink)(`${filePath}.${maxFiles}`);
+  } catch {
+  }
+  for (let i = maxFiles - 1; i >= 1; i--) {
+    try {
+      await (0, import_promises.rename)(`${filePath}.${i}`, `${filePath}.${i + 1}`);
+    } catch {
+    }
+  }
+  try {
+    await (0, import_promises.rename)(filePath, `${filePath}.1`);
+  } catch {
+  }
+}
+async function appendEntry(config, entry) {
+  const path = resolvePath(config.path);
+  await (0, import_promises.mkdir)((0, import_node_path4.dirname)(path), { recursive: true });
+  await rotateIfNeeded(path, config.max_bytes, config.max_files);
+  await (0, import_promises.appendFile)(path, `${JSON.stringify(entry)}
+`);
+}
 async function logVerdict(config, sessionId, toolName, toolInput, verdict, userOverride = false) {
   if (!config.enabled)
     return;
@@ -11641,11 +11704,8 @@ async function logVerdict(config, sessionId, toolName, toolInput, verdict, userO
     source: verdict.source,
     user_override: userOverride
   };
-  const path = resolvePath(config.path);
   try {
-    await (0, import_promises.mkdir)((0, import_node_path4.dirname)(path), { recursive: true });
-    await (0, import_promises.appendFile)(path, `${JSON.stringify(entry)}
-`);
+    await appendEntry(config, entry);
   } catch {
   }
 }
@@ -11660,11 +11720,8 @@ async function logPluginScan(config, pluginKey, pluginVersion, findings) {
     findings_count: findings.length,
     findings
   };
-  const path = resolvePath(config.path);
   try {
-    await (0, import_promises.mkdir)((0, import_node_path4.dirname)(path), { recursive: true });
-    await (0, import_promises.appendFile)(path, `${JSON.stringify(entry)}
-`);
+    await appendEntry(config, entry);
   } catch {
   }
 }
@@ -11808,7 +11865,7 @@ var VerdictCache = class {
 };
 
 // ../core/dist/version.js
-var VERSION = true ? "0.4.3" : "dev";
+var VERSION = true ? "0.4.4" : "dev";
 
 // ../core/dist/clients/file-check.js
 var DEFAULT_TIMEOUT = 5;
@@ -12683,7 +12740,6 @@ async function loadScanCache(configHash = "", cachePath = DEFAULT_CACHE_PATH, lo
 }
 async function saveScanCache(cache, cachePath = DEFAULT_CACHE_PATH, logger = nullLogger) {
   try {
-    await (0, import_promises4.mkdir)((0, import_node_path7.dirname)(cachePath), { recursive: true });
     const data = {
       config_hash: cache.configHash,
       entries: Object.fromEntries(Object.entries(cache.entries).map(([key, entry]) => [
@@ -12696,7 +12752,7 @@ async function saveScanCache(cache, cachePath = DEFAULT_CACHE_PATH, logger = nul
         }
       ]))
     };
-    await (0, import_promises4.writeFile)(cachePath, JSON.stringify(data, null, 2));
+    await atomicWriteJson(cachePath, data);
   } catch (e) {
     logger.warn(`Failed to save scan cache to ${cachePath}`, { error: String(e) });
   }
@@ -13186,6 +13242,7 @@ async function discoverOpenClawPlugins(logger, extensionsDir = DEFAULT_EXTENSION
 // src/startup-scan.ts
 var SAGE_PLUGIN_ID = "sage-openclaw";
 async function runScan(logger, context) {
+  await pruneOrphanedTmpFiles(resolvePath("~/.sage"));
   const { threatsDir, allowlistsDir } = getBundledDataDirs();
   const version = getSageVersion();
   logger.info(`Sage plugin scan started (${context})`, { threatsDir, allowlistsDir });