failproofai 1.0.4-beta.6 → 1.0.4-beta.8

package/lib/openclaw-sessions.ts

@@ -1,11 +1,9 @@
 /**
  * OpenClaw (openclaw gateway) session transcript loader + parser.
  *
- * AUDIT-ONLY (Pillar 2). OpenClaw writes one JSONL transcript per session at
- * `~/.openclaw/agents/<agentId>/sessions/<sessionId>.jsonl` (sessionId is a
- * UUID), alongside a much larger `<sessionId>.trajectory.jsonl` OTel trace we
- * IGNORE, and a `sessions.json` index keyed by sessionKey. Verified live
- * against openclaw v2026.7.1.
+ * Legacy OpenClaw writes one JSONL transcript per session under `sessions/`;
+ * 2026.9.2+ stores the same logical records as `event_json` rows in each
+ * agent's `agent/openclaw-agent.sqlite`. SQLite is preferred when both exist.
  *
  * The transcript is type-discriminated JSONL:
  *   {type:"session", cwd, …}              — header (carries cwd)
@@ -18,8 +16,8 @@
  * `toolResult` by `toolCallId` (mirrors lib/hermes-sessions.ts) and is PURE, so
  * it is unit-testable with plain line objects.
  *
- * Home override: set `OPENCLAW_HOME` (used by tests / to point at a copied
- * gateway config dir).
+ * Home override: `OPENCLAW_STATE_DIR`, then `OPENCLAW_HOME` (used by tests /
+ * to point at a copied gateway config dir).
  */
 import { readFile } from "node:fs/promises";
 import { readdirSync, statSync } from "node:fs";
@@ -39,13 +37,18 @@ import {
   type LogSource,
 } from "./log-entries";
 import { formatDuration } from "./format-duration";
+import { readOpenClawSqliteTranscript } from "./openclaw-db";
 
 /** OpenClaw sessions are stored under UUID filenames. */
 export const OPENCLAW_SESSION_ID_RE = /^[0-9a-fA-F-]{36}$/;
 
-/** Absolute path to OpenClaw's config home (override with OPENCLAW_HOME). */
+/** Absolute path to OpenClaw's state home. */
 export function openclawHome(): string {
-  return process.env.OPENCLAW_HOME || join(homedir(), ".openclaw");
+  return (
+    process.env.OPENCLAW_STATE_DIR ||
+    process.env.OPENCLAW_HOME ||
+    join(homedir(), ".openclaw")
+  );
 }
 
 // ── Parsing helpers ──
@@ -60,7 +63,11 @@ function extractText(content: unknown): string {
   if (typeof content === "string") return content;
   if (Array.isArray(content)) {
     return content
-      .map((c) => (isPlainObject(c) && typeof c.text === "string" ? (c.text as string) : ""))
+      .map((c) =>
+        isPlainObject(c) && typeof c.text === "string"
+          ? (c.text as string)
+          : "",
+      )
       .filter(Boolean)
       .join("\n");
   }
@@ -134,7 +141,10 @@ export function openclawLinesToLogEntries(
           if (b.type === "text" && typeof b.text === "string") {
             blocks.push({ type: "text", text: b.text });
           } else if (b.type === "toolCall") {
-            const id = typeof b.id === "string" ? b.id : `${String(b.name ?? "tool")}-${blocks.length}`;
+            const id =
+              typeof b.id === "string"
+                ? b.id
+                : `${String(b.name ?? "tool")}-${blocks.length}`;
             const name = typeof b.name === "string" ? b.name : "tool";
             const input = isPlainObject(b.arguments) ? b.arguments : {};
             const block: ToolUseBlock = { type: "tool_use", id, name, input };
@@ -151,17 +161,23 @@ export function openclawLinesToLogEntries(
       entries.push({
         type: "assistant",
         ...base,
-        message: { role: "assistant", content: blocks, model: typeof m.model === "string" ? m.model : undefined },
+        message: {
+          role: "assistant",
+          content: blocks,
+          model: typeof m.model === "string" ? m.model : undefined,
+        },
       } satisfies AssistantEntry);
       continue;
     }
 
     if (role === "toolResult") {
-      const callId = typeof m.toolCallId === "string" ? m.toolCallId : undefined;
+      const callId =
+        typeof m.toolCallId === "string" ? m.toolCallId : undefined;
       const block = callId ? toolUseById.get(callId) : undefined;
       if (block) {
         const details = isPlainObject(m.details) ? m.details : undefined;
-        const startMs = (callId && toolUseStartMs.get(callId)) || date.getTime();
+        const startMs =
+          (callId && toolUseStartMs.get(callId)) || date.getTime();
         const durationMs =
           details && typeof details.durationMs === "number"
             ? details.durationMs
@@ -238,13 +254,20 @@ export function listOpenClawTranscripts(): OpenClawTranscriptFile[] {
     }
     for (const file of files) {
       // Only `<uuid>.jsonl` — not `<uuid>.trajectory.jsonl` / `.trajectory-path.json`.
-      if (!file.endsWith(".jsonl") || file.endsWith(".trajectory.jsonl")) continue;
+      if (!file.endsWith(".jsonl") || file.endsWith(".trajectory.jsonl"))
+        continue;
       const sessionId = file.slice(0, -".jsonl".length);
       if (!OPENCLAW_SESSION_ID_RE.test(sessionId)) continue;
       const transcriptPath = join(sessionsDir, file);
       try {
         const st = statSync(transcriptPath);
-        out.push({ agentId, sessionId, transcriptPath, mtimeMs: st.mtimeMs, sizeBytes: st.size });
+        out.push({
+          agentId,
+          sessionId,
+          transcriptPath,
+          mtimeMs: st.mtimeMs,
+          sizeBytes: st.size,
+        });
       } catch {
         // skip unreadable
       }
@@ -276,6 +299,36 @@ export interface OpenClawSessionLogData {
 export async function getOpenClawSessionLog(
   sessionId: string,
 ): Promise<OpenClawSessionLogData | null> {
+  if (!OPENCLAW_SESSION_ID_RE.test(sessionId)) return null;
+
+  // New OpenClaw versions keep live transcripts in SQLite. Prefer that copy
+  // when an archived JSONL with the same UUID also exists.
+  const sqlite = await readOpenClawSqliteTranscript(
+    openclawHome(),
+    listOpenClawAgents(),
+    sessionId,
+  );
+  if (sqlite) {
+    const entries = openclawLinesToLogEntries(sqlite.rawLines, "session");
+    let cwd: string | undefined;
+    for (const line of sqlite.rawLines) {
+      if (
+        line.type === "session" &&
+        typeof line.cwd === "string" &&
+        line.cwd.length > 0
+      ) {
+        cwd = line.cwd;
+        break;
+      }
+    }
+    return {
+      entries,
+      rawLines: sqlite.rawLines,
+      cwd,
+      filePath: sqlite.filePath,
+    };
+  }
+
   const filePath = findOpenClawTranscript(sessionId);
   if (!filePath) return null;
   let content: string;
@@ -289,7 +342,12 @@ export async function getOpenClawSessionLog(
   // cwd lives on the `type:"session"` header line.
   let cwd: string | undefined;
   for (const line of rawLines) {
-    if (isPlainObject(line) && line.type === "session" && typeof line.cwd === "string" && line.cwd.length > 0) {
+    if (
+      isPlainObject(line) &&
+      line.type === "session" &&
+      typeof line.cwd === "string" &&
+      line.cwd.length > 0
+    ) {
       cwd = line.cwd;
       break;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "1.0.4-beta.6",
+  "version": "1.0.4-beta.8",
   "description": "Observability and enforcement for AI agent harnesses. 39 built-in policies hooked into 12 of them — Claude Code, Codex, Cursor, Hermes, OpenClaw and more — blocking the tool call before it runs. Local dashboard included, no account needed.",
   "bin": {
     "failproofai": "./dist/cli.mjs",
@@ -121,15 +121,15 @@
     "browserslist": "4.28.8"
   },
   "optionalDependencies": {
-    "@failproofai/failproofaid-linux-x64": "1.0.4-beta.6",
-    "@failproofai/failproofaid-linux-arm64": "1.0.4-beta.6",
-    "@failproofai/failproofaid-darwin-x64": "1.0.4-beta.6",
-    "@failproofai/failproofaid-darwin-arm64": "1.0.4-beta.6"
+    "@failproofai/failproofaid-linux-x64": "1.0.4-beta.8",
+    "@failproofai/failproofaid-linux-arm64": "1.0.4-beta.8",
+    "@failproofai/failproofaid-darwin-x64": "1.0.4-beta.8",
+    "@failproofai/failproofaid-darwin-arm64": "1.0.4-beta.8"
   },
   "failproofaidBinaries": {
-    "linux-x64": "24118b8bd058cc5d8711053c4c77cdca9361c12dbf0f421a757d33f07596d428",
-    "linux-arm64": "b4278c34a288de2c747bcebcc623d8fd5bda3a1f1e55800926eb1a4b89f0a5e9",
-    "darwin-x64": "ecb66699f45f605b0d54ac9e4bac360ac11e4e136442dcccdd083514d77c7d42",
-    "darwin-arm64": "b3dbad58bda960ef9481f90bc5085ba8624b2472519cc0bf212a0e8451dd2db4"
+    "linux-x64": "17274c1da30675b49de74953a4ce2777e09ba07b9da79250ab155e5fdb316a0a",
+    "linux-arm64": "a07b228d899914baca1c75024be19c0319eb4fc40c6d5a303ba733bf6721924a",
+    "darwin-x64": "d170fd5604cb419bc83f4a5ab1a6cb5be2f9aec957aed99ce237990aa5d3966f",
+    "darwin-arm64": "0e2bde5bd0762641fa072a6640e485c637b2102f2fb6c1afeca679f005e89679"
   }
 }

package/src/audit/index.ts

@@ -70,7 +70,7 @@ const TRANSCRIPT_BYTE_BUDGET = 48 * 1024 * 1024;
  * otherwise the largest transcript on the machine could never be scanned, which
  * is precisely the one most likely to hold something.
  */
-class ByteGate {
+export class ByteGate {
   private inFlight = 0;
   private waiting: Array<() => void> = [];
 

package/src/audit/leak-record.ts

@@ -152,23 +152,30 @@ export function upsertFinding(
     return { record, isNew: true };
   }
 
-  existing.occurrences += 1;
-  if (sighting.at > existing.lastSeen) existing.lastSeen = sighting.at;
-  if (sighting.at < existing.firstSeen) existing.firstSeen = sighting.at;
-
   // Keep the earliest sighting AND the most recent evidence. The report/email
   // promises the CLI and timestamp of the latest exposure; keeping only the
   // first five made those fields stale forever after a busy credential crossed
   // the cap. Middle sightings are the expendable ones.
   const seen = existing.sightings.some(
-    (s) => s.sessionId === sighting.sessionId && s.at === sighting.at,
+    (s) =>
+      s.sessionId === sighting.sessionId &&
+      s.at === sighting.at &&
+      s.mechanism.direction === sighting.mechanism.direction &&
+      s.mechanism.summary === sighting.mechanism.summary,
   );
-  if (!seen) {
-    existing.sightings.push(sighting);
-    existing.sightings.sort((a, b) => a.at.localeCompare(b.at));
-    if (existing.sightings.length > MAX_SIGHTINGS) {
-      existing.sightings.splice(1, existing.sightings.length - MAX_SIGHTINGS);
-    }
+  // Cached transcript results are folded through this function again. An
+  // identical sighting is therefore not a new exposure and must not inflate
+  // the count each time the same cache entry is reused.
+  if (seen) return { record, isNew: false };
+
+  existing.occurrences += 1;
+  if (sighting.at > existing.lastSeen) existing.lastSeen = sighting.at;
+  if (sighting.at < existing.firstSeen) existing.firstSeen = sighting.at;
+
+  existing.sightings.push(sighting);
+  existing.sightings.sort((a, b) => a.at.localeCompare(b.at));
+  if (existing.sightings.length > MAX_SIGHTINGS) {
+    existing.sightings.splice(1, existing.sightings.length - MAX_SIGHTINGS);
   }
   return { record, isNew: false };
 }
@@ -181,7 +188,12 @@ export function upsertFinding(
  */
 export function pruneRecord(record: LeakRecord, nowMs: number): LeakRecord {
   const cutoff = new Date(nowMs - FINDING_TTL_DAYS * 86_400_000).toISOString();
-  const live = record.findings.filter((f) => f.lastSeen >= cutoff);
+  // A missing or malformed timestamp cannot be aged out safely. Keep it until
+  // the bounded-cap pass below rather than silently deleting a finding that the
+  // reporting path deliberately surfaces as having an unknown date.
+  const live = record.findings.filter(
+    (f) => !f.lastSeen || !Number.isFinite(Date.parse(f.lastSeen)) || f.lastSeen >= cutoff,
+  );
   live.sort((a, b) => (a.lastSeen < b.lastSeen ? 1 : a.lastSeen > b.lastSeen ? -1 : 0));
   record.findings = live.slice(0, MAX_FINDINGS);
   return record;

package/src/audit/macos-notifier.ts

@@ -24,13 +24,13 @@
  * would install for every account on the box, which is not what a per-user
  * notification is.
  *
- * **An app bundle, not a bare `osascript -e 'display notification'`.** A raw
- * osascript notification is attributed to whatever host ran it — in practice
- * "Script Editor" — so it inherits Script Editor's notification permission,
- * appears under Script Editor in System Settings, and is indistinguishable from
- * any other script on the machine. Compiling a tiny applet with `osacompile`
- * gives it its own bundle identifier, so the banner says failproofai, and the
- * user gets a real entry they can allow, silence or deny like any other app.
+ * **A user-session `osascript`, not an applet binary launched directly.** The
+ * compiled applet path looked attractive because it could carry a FailproofAI
+ * bundle identifier, but launching `Contents/MacOS/applet` directly from
+ * launchd is not a dependable Notification Center client on current macOS.
+ * `osascript` from a user LaunchAgent is the same mechanism ordinary scheduled
+ * jobs use successfully. Delivery matters more than owning the label shown by
+ * Notification Center, so the runner uses that proven path.
  *
  * **A watched drop directory, not a resident process.** The agent is not a
  * daemon: `WatchPaths` makes launchd start it only when a file appears, and it
@@ -45,25 +45,29 @@
  * the thing that lasts.
  */
 import { execFileSync } from "node:child_process";
-import { existsSync, mkdirSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { chmodSync, existsSync, mkdirSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { resolve } from "node:path";
 
 import { runDir } from "../hooks/fp-home";
 import { isFindingId } from "./leak-fingerprint";
 
-/** The bundle identifier the banner is attributed to, and the agent's label. */
+/** Stable label used to load, inspect, and remove the per-user LaunchAgent. */
 export const MAC_NOTIFIER_LABEL = "ai.failproof.notifier";
 
 /** Where a queued notification waits for the agent to pick it up. */
 export const macNotifyDir = (home?: string) => resolve(runDir(home), "notify");
 
-/** The compiled applet. Under `~/.failproofai` rather than `/Applications`,
- *  because it is a delivery mechanism, not something to launch. */
+/** Legacy compiled applet path, retained so upgrades and uninstall remove it. */
 export function macNotifierAppPath(home?: string): string {
   return resolve(runDir(home), "..", "bin", "FailproofAI Notifier.app");
 }
 
+/** User-session runner invoked by launchd when a notification is queued. */
+export function macNotifierRunnerPath(home?: string): string {
+  return resolve(runDir(home), "..", "bin", "failproofai-notifier.zsh");
+}
+
 export function macNotifierPlistPath(): string {
   return resolve(homedir(), "Library", "LaunchAgents", `${MAC_NOTIFIER_LABEL}.plist`);
 }
@@ -73,11 +77,11 @@ function escapeXml(s: string): string {
 }
 
 /**
- * The AppleScript the applet runs: drain the directory, say each line, exit.
+ * The user-session runner: drain the directory, say each notification, exit.
  *
- * Payload format is two lines — title, then body — chosen over JSON because
- * AppleScript has no JSON parser and shelling out to one would put a second
- * interpreter in the path of a two-field message.
+ * Payload format is two lines — title, then body. Values are passed to
+ * AppleScript as argv, never interpolated into source, so notification text
+ * cannot become AppleScript code.
  *
  * The file is REMOVED BEFORE the notification is posted, and that order is
  * deliberate: `WatchPaths` fires on every change to the directory, so a file
@@ -88,32 +92,25 @@ function escapeXml(s: string): string {
  */
 export function notifierScript(home?: string): string {
   const dir = macNotifyDir(home);
-  return `on run
-	set dropDir to ${JSON.stringify(dir + "/")}
-	set listing to ""
-	try
-		set listing to do shell script "ls -1 " & quoted form of dropDir & " 2>/dev/null"
-	end try
-	repeat with entryName in paragraphs of listing
-		set entryPath to dropDir & (entryName as string)
-		if (entryName as string) is not "" then
-			try
-				set payload to do shell script "cat " & quoted form of entryPath & " 2>/dev/null"
-				do shell script "rm -f " & quoted form of entryPath
-				set lines_ to paragraphs of payload
-				if (count of lines_) is greater than 1 then
-					set noteTitle to item 1 of lines_
-					set noteBody to ""
-					repeat with i from 2 to (count of lines_)
-						if noteBody is not "" then set noteBody to noteBody & " "
-						set noteBody to noteBody & (item i of lines_)
-					end repeat
-					display notification noteBody with title noteTitle
-				end if
-			end try
-		end if
-	end repeat
+  const quotedDir = `'${dir.replace(/'/g, `'\\''`)}'`;
+  return `#!/bin/zsh
+set -u
+setopt NULL_GLOB
+
+drop_dir=${quotedDir}
+
+for entry_path in "$drop_dir"/*; do
+  [ -f "$entry_path" ] || continue
+  note_title=$(/usr/bin/sed -n '1p' "$entry_path")
+  note_body=$(/usr/bin/sed -n '2,$p' "$entry_path" | /usr/bin/tr '\\n' ' ')
+  /bin/rm -f "$entry_path"
+  [ -n "$note_title" ] || continue
+  /usr/bin/osascript - "$note_title" "$note_body" <<'APPLESCRIPT'
+on run argv
+  display notification (item 2 of argv) with title (item 1 of argv)
 end run
+APPLESCRIPT
+done
 `;
 }
 
@@ -122,7 +119,7 @@ end run
  * assert this file's shape from a Linux CI runner, which is every CI runner we
  * have.
  */
-export function notifierPlistContents(appPath: string, watchDir: string): string {
+export function notifierPlistContents(runnerPath: string, watchDir: string): string {
   return `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
@@ -131,7 +128,7 @@ export function notifierPlistContents(appPath: string, watchDir: string): string
     <string>${escapeXml(MAC_NOTIFIER_LABEL)}</string>
     <key>ProgramArguments</key>
     <array>
-        <string>${escapeXml(resolve(appPath, "Contents", "MacOS", "applet"))}</string>
+        <string>${escapeXml(runnerPath)}</string>
     </array>
     <!-- Started only when something is queued, and it exits when the queue is
          empty. RunAtLoad would fire it once at login with nothing to say. -->
@@ -173,36 +170,26 @@ function run(cmd: string, args: string[]): void {
  * machine scan, and may it interrupt), and both of those are real settings.
  *
  * Returns rather than throws. Notifications are one channel of several, and a
- * Mac that cannot compile an applet must still finish setting up its daemon,
- * its hooks and its policies — the parts that actually enforce anything.
+ * Mac that cannot load the user LaunchAgent must still finish setting up its
+ * daemon, hooks and policies — the parts that actually enforce anything.
  */
 export function installMacNotifier(home?: string): MacNotifierResult {
   if (process.platform !== "darwin") return { installed: false, reason: "not macOS" };
   try {
-    const app = macNotifierAppPath(home);
+    const runner = macNotifierRunnerPath(home);
     const watch = macNotifyDir(home);
     mkdirSync(watch, { recursive: true, mode: 0o700 });
-    mkdirSync(resolve(app, ".."), { recursive: true });
-
-    const scriptPath = resolve(watch, "..", "notifier.applescript");
-    writeFileSync(scriptPath, notifierScript(home), { mode: 0o600 });
-    // osacompile refuses to overwrite an existing bundle, so a reinstall (a
-    // second `failproofai config`, or an upgrade) has to clear it first.
-    rmSync(app, { recursive: true, force: true });
-    run("osacompile", ["-o", app, scriptPath]);
-    rmSync(scriptPath, { force: true });
-
-    // Give the bundle its own identity, so the banner is attributed to
-    // failproofai instead of to whatever compiled it, and so the user gets one
-    // entry in System Settings > Notifications they can turn off themselves.
-    const plist = resolve(app, "Contents", "Info.plist");
-    run("defaults", ["write", plist, "CFBundleIdentifier", MAC_NOTIFIER_LABEL]);
-    run("defaults", ["write", plist, "CFBundleName", "failproofai"]);
-    // `defaults write` leaves the file 0600 and owned by us but in binary
-    // format; launchd and LaunchServices both read either, so no conversion.
+    mkdirSync(resolve(runner, ".."), { recursive: true });
+    writeFileSync(runner, notifierScript(home), { mode: 0o700 });
+    // writeFileSync preserves an existing file's mode. Repair it explicitly on
+    // upgrades from a partially-created or hand-edited runner.
+    chmodSync(runner, 0o700);
+    // Remove the applet used by older builds. The LaunchAgent below no longer
+    // references it, and leaving it behind makes diagnosis ambiguous.
+    rmSync(macNotifierAppPath(home), { recursive: true, force: true });
 
     mkdirSync(resolve(macNotifierPlistPath(), ".."), { recursive: true });
-    writeFileSync(macNotifierPlistPath(), notifierPlistContents(app, watch), { mode: 0o644 });
+    writeFileSync(macNotifierPlistPath(), notifierPlistContents(runner, watch), { mode: 0o644 });
 
     const target = `gui/${process.getuid?.() ?? 0}`;
     // bootout first: bootstrap fails outright on an already-loaded label, and
@@ -220,7 +207,7 @@ export function installMacNotifier(home?: string): MacNotifierResult {
 }
 
 /**
- * Remove the agent and the bundle.
+ * Remove the agent and its runner, including the applet used by older builds.
  *
  * Called from `failproofai uninstall --purge`. Unconditional and quiet: an
  * agent left behind after an uninstall is a plist launchd keeps trying to start
@@ -236,6 +223,7 @@ export function uninstallMacNotifier(home?: string): void {
   }
   rmSync(macNotifierPlistPath(), { force: true });
   rmSync(macNotifierAppPath(home), { recursive: true, force: true });
+  rmSync(macNotifierRunnerPath(home), { force: true });
   rmSync(macNotifyDir(home), { recursive: true, force: true });
 }
 
@@ -281,7 +269,7 @@ export function queueMacNotification(
 
 /** True when an agent is installed and could pick a queued file up. */
 export function macNotifierInstalled(home?: string): boolean {
-  return existsSync(macNotifierPlistPath()) && existsSync(macNotifierAppPath(home));
+  return existsSync(macNotifierPlistPath()) && existsSync(macNotifierRunnerPath(home));
 }
 
 /**

package/src/hooks/builtin-policies.ts

@@ -138,10 +138,10 @@ const API_KEY_PATTERNS: Array<[RegExp, string]> = [
   // this rule's run would bridge the hyphen in `sk-proj-` and report every
   // project key a second time under the wrong label.
   [/sk-proj-[A-Za-z0-9\-_]{20,}/, "OpenAI project API key"],
-  [/sk-svcacct-[A-Za-z0-9\-_]{20,}/, "OpenAI service-account key"],
+  [/(?<!\w)sk-svcacct-[A-Za-z0-9\-_]{20,}/, "OpenAI service-account key"],
   // Highest blast radius in the family: it authenticates the organisation
   // admin surface, and lives at a DIFFERENT console from the other keys.
-  [/sk-admin-[A-Za-z0-9\-_]{20,}/, "OpenAI admin key"],
+  [/(?<!\w)sk-admin-[A-Za-z0-9\-_]{20,}/, "OpenAI admin key"],
 
   // ── OpenAI-compatible gateways ──
   [/sk-or-v1-[A-Za-z0-9\-_]{20,}/, "OpenRouter API key"],

package/src/hooks/configure-wizard.ts

@@ -1489,7 +1489,14 @@ export async function runConfigureWizard(
     // missing or launchd refuses the job must still finish installing its
     // daemon, its hooks and its policies, which are the parts that enforce
     // anything; the notice in-CLI still reaches them either way.
-    installMacNotifier();
+    const notifier = installMacNotifier();
+    if (process.platform === "darwin" && !notifier.installed) {
+      hookLogWarn(`macOS notification helper was not installed: ${notifier.reason ?? "unknown error"}`);
+      stdout.write(
+        "\nSystem notifications could not be installed. Scheduled scans and email alerts\n" +
+          "still work; re-run `failproofai config` after checking the local LaunchAgent.\n\n",
+      );
+    }
   }
 
   // Telemetry runs concurrently with the install (never rejects, 5s-bounded) so

package/src/hooks/uninstall-cli.ts

@@ -193,6 +193,7 @@ export async function runUninstallCommand(opts: UninstallOptions = {}): Promise<
   if (found.daemonConfigured) {
     plan.push(`  • stop requiring the daemon (policies go back to evaluating in-process)`);
   }
+  let removeDaemon = opts.purge === true;
   if (found.serviceInstalled) {
     plan.push(
       opts.purge || opts.yes
@@ -305,8 +306,7 @@ export async function runUninstallCommand(opts: UninstallOptions = {}): Promise<
     //
     // So the only case that keeps it is an INTERACTIVE run where the person said no
     // (or could not be asked).
-    const removeDaemon =
-      opts.purge || opts.yes ? true : ((await opts.confirmDaemon?.()) ?? false);
+    removeDaemon = opts.purge || opts.yes ? true : ((await opts.confirmDaemon?.()) ?? false);
 
     if (!removeDaemon) {
       lines.push(
@@ -357,7 +357,7 @@ export async function runUninstallCommand(opts: UninstallOptions = {}): Promise<
   // No-ops on every other platform, and needs no elevation on macOS: a per-user
   // agent is the user's own to load and unload. Tied to the daemon's removal
   // because it exists only to deliver what the daemon's scheduled audit finds.
-  if (opts.purge || (found.serviceInstalled && (opts.purge || opts.yes))) {
+  if (opts.purge || removeDaemon) {
     uninstallMacNotifier();
   }
 

package/.next/standalone/.next/server/chunks/[root-of-the-server]__0-219ec._.js

@@ -1,3 +0,0 @@
-module.exports=[2157,(t,e,n)=>{e.exports=t.x("node:fs",()=>require("node:fs"))},60526,(t,e,n)=>{e.exports=t.x("node:os",()=>require("node:os"))},54214,67405,t=>{"use strict";var e=t.i(24868),n=t.i(14747),i=t.i(81580),s=t.i(56936);async function r(t,i,s,r){let a=`agent-${r}.jsonl`;for(let r of[(0,n.join)(t,i,a),(0,n.join)(t,i,s,a),(0,n.join)(t,i,s,"subagents",a)])if(!(0,n.relative)(t,r).startsWith(".."))try{return await (0,e.access)(r),r}catch(t){if("ENOENT"===t.code)continue;break}return null}var a=t.i(83534),o=t.i(71809),u=t.i(28557);function l(t){if(t<1e3)return`${t}ms`;let e=Math.round(t/100);if(e<600)return`${(e/10).toFixed(1)}s`;let n=Math.round(t/1e3);if(n<3600){let t=Math.floor(n/60);return`${t}m ${n%60}s`}let i=Math.round(t/6e4),s=Math.floor(i/60);return`${s}h ${i%60}m`}function m(t){let e=(0,u.formatDate)(t),n=t.getMilliseconds().toString().padStart(3,"0");return`${e}.${n}`}function p(t,e,n,i){return{_source:i,uuid:t.uuid||"",parentUuid:t.parentUuid??null,timestamp:e,timestampMs:n.getTime(),timestampFormatted:m(n)}}async function f(t,e){let n=t.split("\n").filter(t=>""!==t.trim()),i=new Map,s=[],r=[],a=new Set,o=!1;for(let t=0;t<n.length;t++){let u;t>0&&t%200==0&&await new Promise(t=>setImmediate(t));let l=n[t];try{u=JSON.parse(l)}catch{continue}let m={...u,_source:e};r.push(m);let f=u.type,c=u.timestamp;if(!c)continue;let d=new Date(c),y=d.getTime();if("user"===f){let t=u.message;if(Array.isArray(t?.content)){let e=t.content;if(e.some(t=>"tool_result"===t.type)){let t=u.toolUseResult,n="string"==typeof t?.agentId?t.agentId:void 0;for(let t of(n&&/^[a-f0-9]+$/.test(n)&&a.add(n),e)){if("tool_result"!==t.type)continue;let e=t.tool_use_id;if(!e)continue;let{text:s,images:r}=function(t){let e=t.content;if("string"==typeof e)return{text:e};if(Array.isArray(e)){let t=e.filter(t=>"text"===t.type).map(t=>t.text),n=e.filter(t=>"image"===t.type).map(t=>{let e=t.source;return{base64:e.data,mediaType:e.media_type}}).filter(t=>t.base64&&t.mediaType);return{text:t.length>0?t.join("\n"):void 0,images:n.length>0?n:void 0}}return{}}(t);i.set(e,{timestamp:c,timestampMs:y,content:s,images:r,agentId:n})}continue}}let n="string"==typeof t?.content?t.content:"";s.push({type:"user",...p(u,c,d,e),message:{role:"user",content:n}});continue}if("assistant"===f){let t=u.message,n=[];if(Array.isArray(t?.content)&&(n=t.content.filter(t=>["text","tool_use","thinking"].includes(t.type)).map(t=>{if("text"===t.type)return{type:"text",text:t.text};if("tool_use"===t.type){let e=t.input;return{type:"tool_use",id:t.id,name:t.name,input:t.input??{},..."Task"===t.name&&e?{subagentType:e.subagent_type,subagentDescription:e.description}:{}}}return{type:"thinking",thinking:t.thinking,signature:t.signature}})),0===n.length)continue;s.push({type:"assistant",...p(u,c,d,e),message:{role:"assistant",content:n,model:t?.model}});continue}if("file-history-snapshot"===f||"progress"===f||"system"===f){s.push({type:f,...p(u,c,d,e),raw:{...u}});continue}if("queue-operation"===f){let t=o?"Session Resumed":"Session Started";o=!0,s.push({type:"queue-operation",...p(u,c,d,e),label:t});continue}}let u=0;for(let t of s)if("assistant"===t.type)for(let e of(++u%200==0&&await new Promise(t=>setImmediate(t)),t.message.content)){if("tool_use"!==e.type)continue;let n=i.get(e.id);if(!n)continue;let s=new Date(n.timestamp),r=Math.max(0,n.timestampMs-t.timestampMs);e.result={timestamp:n.timestamp,timestampFormatted:m(s),content:n.content,images:n.images,durationMs:r,durationFormatted:l(r)},n.agentId&&(e.subagentId=n.agentId)}return s.length>500&&await new Promise(t=>setImmediate(t)),s.sort((t,e)=>t.timestampMs-e.timestampMs),{entries:s,rawLines:r,subagentIds:Array.from(a)}}async function c(t,e="session"){return(await f(t,e)).entries}async function d(t,a){let u=(0,s.resolveProjectPath)(t),l=(0,i.getClaudeProjectsPath)(),m=(0,n.join)(u,`${a}.jsonl`),p=await (0,e.readFile)(m,"utf-8"),{entries:c,rawLines:d,subagentIds:y}=await f(p,"session");if(0===y.length)return{entries:c,rawLines:d,subagentIds:[]};let g=await (0,o.batchAll)(y.map(n=>async()=>{let i=`agent-${n}`,s=await r(l,t,a,n);if(!s)return null;let o=await (0,e.readFile)(s,"utf-8"),{entries:u,rawLines:m}=await f(o,i);return{entries:u,rawLines:m}}),4),h=[...c],w=[...d];for(let t of g)"fulfilled"===t.status&&t.value&&(h.push(...t.value.entries),w.push(...t.value.rawLines));return h.length>500&&await new Promise(t=>setImmediate(t)),h.sort((t,e)=>t.timestampMs-e.timestampMs),{entries:h,rawLines:w,subagentIds:y}}t.s(["formatDuration",0,l],67405),(0,a.runtimeCache)((t,e)=>d(t,e),60,{maxSize:50}),t.s(["baseEntry",0,p,"formatTimestamp",0,m,"parseLogContent",0,c,"parseRawLines",0,function(t,e){return t.split("\n").filter(t=>""!==t.trim()).flatMap(t=>{try{let n=JSON.parse(t);return void 0!==e&&(n._source=e),[n]}catch{return[]}})}],54214)},64199,t=>{"use strict";var e=t.i(12714),n=t.i(2157),i=t.i(60526),s=t.i(50227),r=t.i(83534),a=t.i(54214),o=t.i(67405);let u=/^[0-9a-fA-F-]{36}$/;function l(){return process.env.OPENCLAW_HOME||(0,s.join)((0,i.homedir)(),".openclaw")}function m(t){return!!t&&"object"==typeof t&&!Array.isArray(t)}function p(t){return"string"==typeof t?t:Array.isArray(t)?t.map(t=>m(t)&&"string"==typeof t.text?t.text:"").filter(Boolean).join("\n"):""}function f(){let t,e=(0,s.join)(l(),"agents"),i=[];try{t=(0,n.readdirSync)(e,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name)}catch{return i}for(let r of t){let t,a=(0,s.join)(e,r,"sessions");try{t=(0,n.readdirSync)(a)}catch{continue}for(let e of t){if(!e.endsWith(".jsonl")||e.endsWith(".trajectory.jsonl"))continue;let t=e.slice(0,-6);if(!u.test(t))continue;let o=(0,s.join)(a,e);try{let e=(0,n.statSync)(o);i.push({agentId:r,sessionId:t,transcriptPath:o,mtimeMs:e.mtimeMs,sizeBytes:e.size})}catch{}}}return i}function c(t){if(!u.test(t))return null;for(let e of f())if(e.sessionId===t)return e.transcriptPath;return null}async function d(t){let n,i,s=c(t);if(!s)return null;try{n=await (0,e.readFile)(s,"utf-8")}catch{return null}let r=(0,a.parseRawLines)(n,"session"),u=function(t,e="session"){let n=[],i=new Map,s=new Map,r=Date.now();for(let u=0;u<t.length;u++){let l=t[u];if(!m(l)||"message"!==l.type)continue;let f=m(l.message)?l.message:void 0;if(!f)continue;let c="string"==typeof f.role?f.role:"system",d=function(t,e){if("number"==typeof t&&Number.isFinite(t)){if(t>1e12)return new Date(t);if(t>1e9)return new Date(1e3*t)}if("string"==typeof t){let e=Date.parse(t);if(!Number.isNaN(e))return new Date(e)}return new Date(e)}(l.timestamp??f.timestamp,r+u),y=d.toISOString(),g={uuid:null!=l.id?String(l.id):`openclaw-${u}`,parentUuid:null!=l.parentId?String(l.parentId):null},h=(0,a.baseEntry)(g,y,d,e);if("user"===c){n.push({type:"user",...h,message:{role:"user",content:p(f.content)}});continue}if("assistant"===c){let t=[],e=f.content;if(Array.isArray(e)){for(let n of e)if(m(n)){if("text"===n.type&&"string"==typeof n.text)t.push({type:"text",text:n.text});else if("toolCall"===n.type){let e="string"==typeof n.id?n.id:`${String(n.name??"tool")}-${t.length}`,r={type:"tool_use",id:e,name:"string"==typeof n.name?n.name:"tool",input:m(n.arguments)?n.arguments:{}};t.push(r),i.set(e,r),s.set(e,d.getTime())}}}else{let n=p(e);n&&t.push({type:"text",text:n})}if(0===t.length)continue;n.push({type:"assistant",...h,message:{role:"assistant",content:t,model:"string"==typeof f.model?f.model:void 0}});continue}if("toolResult"===c){let t="string"==typeof f.toolCallId?f.toolCallId:void 0,e=t?i.get(t):void 0;if(e){let n=m(f.details)?f.details:void 0,i=t&&s.get(t)||d.getTime(),r=n&&"number"==typeof n.durationMs?n.durationMs:Math.max(0,d.getTime()-i);e.result={timestamp:y,timestampFormatted:(0,a.formatTimestamp)(d),content:p(f.content),durationMs:r,durationFormatted:(0,o.formatDuration)(r)};continue}}n.push({type:"system",...h,raw:g})}return n.sort((t,e)=>t.timestampMs-e.timestampMs),n}(r,"session");for(let t of r)if(m(t)&&"session"===t.type&&"string"==typeof t.cwd&&t.cwd.length>0){i=t.cwd;break}return{entries:u,rawLines:r,cwd:i,filePath:s}}(0,r.runtimeCache)(t=>d(t),2,{maxSize:50}),t.s(["findOpenClawTranscript",0,c,"getOpenClawSessionLog",0,d,"listOpenClawAgents",0,function(){try{return(0,n.readdirSync)((0,s.join)(l(),"agents"),{withFileTypes:!0}).filter(t=>t.isDirectory()&&!t.name.startsWith(".")).map(t=>t.name).sort()}catch{return[]}},"listOpenClawTranscripts",0,f,"openclawHome",0,l])}];
-
-//# sourceMappingURL=%5Broot-of-the-server%5D__0-219ec._.js.map

package/.next/standalone/.next/server/chunks/[root-of-the-server]__04_h-a5._.js

@@ -1,3 +0,0 @@
-module.exports=[2157,(e,t,n)=>{t.exports=e.x("node:fs",()=>require("node:fs"))},60526,(e,t,n)=>{t.exports=e.x("node:os",()=>require("node:os"))},54214,67405,e=>{"use strict";var t=e.i(24868),n=e.i(14747),i=e.i(81580),s=e.i(56936);async function a(e,i,s,a){let r=`agent-${a}.jsonl`;for(let a of[(0,n.join)(e,i,r),(0,n.join)(e,i,s,r),(0,n.join)(e,i,s,"subagents",r)])if(!(0,n.relative)(e,a).startsWith(".."))try{return await (0,t.access)(a),a}catch(e){if("ENOENT"===e.code)continue;break}return null}var r=e.i(83534),o=e.i(71809),l=e.i(28557);function u(e){if(e<1e3)return`${e}ms`;let t=Math.round(e/100);if(t<600)return`${(t/10).toFixed(1)}s`;let n=Math.round(e/1e3);if(n<3600){let e=Math.floor(n/60);return`${e}m ${n%60}s`}let i=Math.round(e/6e4),s=Math.floor(i/60);return`${s}h ${i%60}m`}function c(e){let t=(0,l.formatDate)(e),n=e.getMilliseconds().toString().padStart(3,"0");return`${t}.${n}`}function p(e,t,n,i){return{_source:i,uuid:e.uuid||"",parentUuid:e.parentUuid??null,timestamp:t,timestampMs:n.getTime(),timestampFormatted:c(n)}}async function f(e,t){let n=e.split("\n").filter(e=>""!==e.trim()),i=new Map,s=[],a=[],r=new Set,o=!1;for(let e=0;e<n.length;e++){let l;e>0&&e%200==0&&await new Promise(e=>setImmediate(e));let u=n[e];try{l=JSON.parse(u)}catch{continue}let c={...l,_source:t};a.push(c);let f=l.type,m=l.timestamp;if(!m)continue;let d=new Date(m),g=d.getTime();if("user"===f){let e=l.message;if(Array.isArray(e?.content)){let t=e.content;if(t.some(e=>"tool_result"===e.type)){let e=l.toolUseResult,n="string"==typeof e?.agentId?e.agentId:void 0;for(let e of(n&&/^[a-f0-9]+$/.test(n)&&r.add(n),t)){if("tool_result"!==e.type)continue;let t=e.tool_use_id;if(!t)continue;let{text:s,images:a}=function(e){let t=e.content;if("string"==typeof t)return{text:t};if(Array.isArray(t)){let e=t.filter(e=>"text"===e.type).map(e=>e.text),n=t.filter(e=>"image"===e.type).map(e=>{let t=e.source;return{base64:t.data,mediaType:t.media_type}}).filter(e=>e.base64&&e.mediaType);return{text:e.length>0?e.join("\n"):void 0,images:n.length>0?n:void 0}}return{}}(e);i.set(t,{timestamp:m,timestampMs:g,content:s,images:a,agentId:n})}continue}}let n="string"==typeof e?.content?e.content:"";s.push({type:"user",...p(l,m,d,t),message:{role:"user",content:n}});continue}if("assistant"===f){let e=l.message,n=[];if(Array.isArray(e?.content)&&(n=e.content.filter(e=>["text","tool_use","thinking"].includes(e.type)).map(e=>{if("text"===e.type)return{type:"text",text:e.text};if("tool_use"===e.type){let t=e.input;return{type:"tool_use",id:e.id,name:e.name,input:e.input??{},..."Task"===e.name&&t?{subagentType:t.subagent_type,subagentDescription:t.description}:{}}}return{type:"thinking",thinking:e.thinking,signature:e.signature}})),0===n.length)continue;s.push({type:"assistant",...p(l,m,d,t),message:{role:"assistant",content:n,model:e?.model}});continue}if("file-history-snapshot"===f||"progress"===f||"system"===f){s.push({type:f,...p(l,m,d,t),raw:{...l}});continue}if("queue-operation"===f){let e=o?"Session Resumed":"Session Started";o=!0,s.push({type:"queue-operation",...p(l,m,d,t),label:e});continue}}let l=0;for(let e of s)if("assistant"===e.type)for(let t of(++l%200==0&&await new Promise(e=>setImmediate(e)),e.message.content)){if("tool_use"!==t.type)continue;let n=i.get(t.id);if(!n)continue;let s=new Date(n.timestamp),a=Math.max(0,n.timestampMs-e.timestampMs);t.result={timestamp:n.timestamp,timestampFormatted:c(s),content:n.content,images:n.images,durationMs:a,durationFormatted:u(a)},n.agentId&&(t.subagentId=n.agentId)}return s.length>500&&await new Promise(e=>setImmediate(e)),s.sort((e,t)=>e.timestampMs-t.timestampMs),{entries:s,rawLines:a,subagentIds:Array.from(r)}}async function m(e,t="session"){return(await f(e,t)).entries}async function d(e,r){let l=(0,s.resolveProjectPath)(e),u=(0,i.getClaudeProjectsPath)(),c=(0,n.join)(l,`${r}.jsonl`),p=await (0,t.readFile)(c,"utf-8"),{entries:m,rawLines:d,subagentIds:g}=await f(p,"session");if(0===g.length)return{entries:m,rawLines:d,subagentIds:[]};let y=await (0,o.batchAll)(g.map(n=>async()=>{let i=`agent-${n}`,s=await a(u,e,r,n);if(!s)return null;let o=await (0,t.readFile)(s,"utf-8"),{entries:l,rawLines:c}=await f(o,i);return{entries:l,rawLines:c}}),4),h=[...m],w=[...d];for(let e of y)"fulfilled"===e.status&&e.value&&(h.push(...e.value.entries),w.push(...e.value.rawLines));return h.length>500&&await new Promise(e=>setImmediate(e)),h.sort((e,t)=>e.timestampMs-t.timestampMs),{entries:h,rawLines:w,subagentIds:g}}e.s(["formatDuration",0,u],67405),(0,r.runtimeCache)((e,t)=>d(e,t),60,{maxSize:50}),e.s(["baseEntry",0,p,"formatTimestamp",0,c,"parseLogContent",0,m,"parseRawLines",0,function(e,t){return e.split("\n").filter(e=>""!==e.trim()).flatMap(e=>{try{let n=JSON.parse(e);return void 0!==t&&(n._source=t),[n]}catch{return[]}})}],54214)},90624,e=>{"use strict";var t=e.i(2157),n=e.i(50227),i=e.i(83534),s=e.i(64199),a=e.i(28557);function r(e){return"string"==typeof e&&e.length>0?e:void 0}async function o(){let e=(0,s.listOpenClawTranscripts)(),i=new Map,a=[];for(let o of e){let e=i.get(o.agentId);e||(e=function(e){let i,a=new Map,o=(0,n.join)((0,s.openclawHome)(),"agents",e,"sessions","sessions.json");try{i=JSON.parse((0,t.readFileSync)(o,"utf-8"))}catch{return a}if(!i||"object"!=typeof i)return a;for(let e of Object.values(i)){if(!e||"object"!=typeof e)continue;let t=r(e.sessionId);if(!t)continue;let n=e.origin&&"object"==typeof e.origin?e.origin:{},i="number"==typeof e.lastInteractionAt?e.lastInteractionAt:"number"==typeof e.updatedAt?e.updatedAt:void 0;a.set(t,{lastMs:i,channel:r(e.lastChannel)??r(n.provider)??r(n.surface),chatType:r(e.chatType)??r(n.chatType),label:r(n.label),chatId:r(e.lastTo)??r(n.from)})}return a}(o.agentId),i.set(o.agentId,e));let l=e.get(o.sessionId);a.push({sessionId:o.sessionId,agentId:o.agentId,channel:l?.channel??"local",label:l?.label,chatType:l?.chatType,chatId:l?.chatId,transcriptPath:o.transcriptPath,mtimeMs:l?.lastMs??o.mtimeMs,sizeBytes:o.sizeBytes})}return a.sort((e,t)=>t.mtimeMs-e.mtimeMs),a}let l=(0,i.runtimeCache)(o,2);function u(e,t){return`openclaw-${e}-${t}`}function c(e,t){return`openclaw:${e}:${t}`}function p(e){if(!e.startsWith("openclaw-"))return[];let t=e.slice(9);if(!t)return[];let n=[];for(let e of(0,s.listOpenClawAgents)().sort((e,t)=>t.length-e.length)){let i=`${e}-`;t.startsWith(i)&&t.length>i.length&&n.push({agentId:e,channel:t.slice(i.length)})}return n.push({agentId:null,channel:t}),n}async function f(){let e=await o(),t=new Map;for(let n of e){let e=JSON.stringify([n.agentId,n.channel]),i=t.get(e);i?(i.latest=Math.max(i.latest,n.mtimeMs),i.count+=1):t.set(e,{agentId:n.agentId,channel:n.channel,latest:n.mtimeMs,count:1})}let n=[];for(let{agentId:e,channel:i,latest:s,count:r}of t.values()){let t=new Date(s);n.push({name:u(e,i),path:c(e,i),isDirectory:!0,lastModified:t,lastModifiedFormatted:(0,a.formatDate)(t),cli:["openclaw"],sessionCount:r})}return n.sort((e,t)=>t.lastModified.getTime()-e.lastModified.getTime()),n}async function m(e){let t=p(e);if(0===t.length)return{cwd:null,sessions:[]};let n=await o(),i=e=>n.filter(t=>t.channel===e.channel&&(null===e.agentId||t.agentId===e.agentId)),s=t[0],r=i(s);if(0===r.length)for(let e of t.slice(1)){let t=i(e);if(t.length>0){s=e,r=t;break}}let{agentId:l,channel:u}=s;return{cwd:null===l?`openclaw:${u}`:c(l,u),sessions:r.map(e=>{let t=new Date(e.mtimeMs);return{name:e.label??e.chatId??e.sessionId,path:e.sessionId,lastModified:t,lastModifiedFormatted:(0,a.formatDate)(t),sessionId:e.sessionId,cli:"openclaw",channelId:e.chatId,channelType:e.chatType}})}}let d=(0,i.runtimeCache)(f,2),g=(0,i.runtimeCache)(e=>m(e),2,{maxSize:50});e.s(["getCachedOpenClawProjects",0,d,"getCachedOpenClawSessions",0,l,"getCachedOpenClawSessionsByEncodedName",0,g,"getOpenClawProjects",0,f,"getOpenClawSessions",0,o,"getOpenClawSessionsByEncodedName",0,m,"openClawProjectName",0,u,"openClawProjectNameCandidates",0,p,"openClawProjectPath",0,c,"parseOpenClawProjectName",0,function(e){return p(e)[0]??null}])},64199,e=>{"use strict";var t=e.i(12714),n=e.i(2157),i=e.i(60526),s=e.i(50227),a=e.i(83534),r=e.i(54214),o=e.i(67405);let l=/^[0-9a-fA-F-]{36}$/;function u(){return process.env.OPENCLAW_HOME||(0,s.join)((0,i.homedir)(),".openclaw")}function c(e){return!!e&&"object"==typeof e&&!Array.isArray(e)}function p(e){return"string"==typeof e?e:Array.isArray(e)?e.map(e=>c(e)&&"string"==typeof e.text?e.text:"").filter(Boolean).join("\n"):""}function f(){let e,t=(0,s.join)(u(),"agents"),i=[];try{e=(0,n.readdirSync)(t,{withFileTypes:!0}).filter(e=>e.isDirectory()).map(e=>e.name)}catch{return i}for(let a of e){let e,r=(0,s.join)(t,a,"sessions");try{e=(0,n.readdirSync)(r)}catch{continue}for(let t of e){if(!t.endsWith(".jsonl")||t.endsWith(".trajectory.jsonl"))continue;let e=t.slice(0,-6);if(!l.test(e))continue;let o=(0,s.join)(r,t);try{let t=(0,n.statSync)(o);i.push({agentId:a,sessionId:e,transcriptPath:o,mtimeMs:t.mtimeMs,sizeBytes:t.size})}catch{}}}return i}function m(e){if(!l.test(e))return null;for(let t of f())if(t.sessionId===e)return t.transcriptPath;return null}async function d(e){let n,i,s=m(e);if(!s)return null;try{n=await (0,t.readFile)(s,"utf-8")}catch{return null}let a=(0,r.parseRawLines)(n,"session"),l=function(e,t="session"){let n=[],i=new Map,s=new Map,a=Date.now();for(let l=0;l<e.length;l++){let u=e[l];if(!c(u)||"message"!==u.type)continue;let f=c(u.message)?u.message:void 0;if(!f)continue;let m="string"==typeof f.role?f.role:"system",d=function(e,t){if("number"==typeof e&&Number.isFinite(e)){if(e>1e12)return new Date(e);if(e>1e9)return new Date(1e3*e)}if("string"==typeof e){let t=Date.parse(e);if(!Number.isNaN(t))return new Date(t)}return new Date(t)}(u.timestamp??f.timestamp,a+l),g=d.toISOString(),y={uuid:null!=u.id?String(u.id):`openclaw-${l}`,parentUuid:null!=u.parentId?String(u.parentId):null},h=(0,r.baseEntry)(y,g,d,t);if("user"===m){n.push({type:"user",...h,message:{role:"user",content:p(f.content)}});continue}if("assistant"===m){let e=[],t=f.content;if(Array.isArray(t)){for(let n of t)if(c(n)){if("text"===n.type&&"string"==typeof n.text)e.push({type:"text",text:n.text});else if("toolCall"===n.type){let t="string"==typeof n.id?n.id:`${String(n.name??"tool")}-${e.length}`,a={type:"tool_use",id:t,name:"string"==typeof n.name?n.name:"tool",input:c(n.arguments)?n.arguments:{}};e.push(a),i.set(t,a),s.set(t,d.getTime())}}}else{let n=p(t);n&&e.push({type:"text",text:n})}if(0===e.length)continue;n.push({type:"assistant",...h,message:{role:"assistant",content:e,model:"string"==typeof f.model?f.model:void 0}});continue}if("toolResult"===m){let e="string"==typeof f.toolCallId?f.toolCallId:void 0,t=e?i.get(e):void 0;if(t){let n=c(f.details)?f.details:void 0,i=e&&s.get(e)||d.getTime(),a=n&&"number"==typeof n.durationMs?n.durationMs:Math.max(0,d.getTime()-i);t.result={timestamp:g,timestampFormatted:(0,r.formatTimestamp)(d),content:p(f.content),durationMs:a,durationFormatted:(0,o.formatDuration)(a)};continue}}n.push({type:"system",...h,raw:y})}return n.sort((e,t)=>e.timestampMs-t.timestampMs),n}(a,"session");for(let e of a)if(c(e)&&"session"===e.type&&"string"==typeof e.cwd&&e.cwd.length>0){i=e.cwd;break}return{entries:l,rawLines:a,cwd:i,filePath:s}}(0,a.runtimeCache)(e=>d(e),2,{maxSize:50}),e.s(["findOpenClawTranscript",0,m,"getOpenClawSessionLog",0,d,"listOpenClawAgents",0,function(){try{return(0,n.readdirSync)((0,s.join)(u(),"agents"),{withFileTypes:!0}).filter(e=>e.isDirectory()&&!e.name.startsWith(".")).map(e=>e.name).sort()}catch{return[]}},"listOpenClawTranscripts",0,f,"openclawHome",0,u])}];
-
-//# sourceMappingURL=%5Broot-of-the-server%5D__04_h-a5._.js.map