openclaw-observability 1.0.0

package/dist/web/api.d.ts

@@ -0,0 +1,115 @@
+/**
+ * Audit Web API — query database and return structured data
+ * Compatible with both MySQL and DuckDB backends
+ */
+import { QueryPool } from '../storage/writer';
+export interface StatsResult {
+    totalSessions: number;
+    totalActions: number;
+    totalTokens: number;
+    avgLatencyMs: number;
+    successRate: number;
+    actionTypeCounts: Record<string, number>;
+}
+export interface SessionRow {
+    session_id: string;
+    user_id: string;
+    model_name: string;
+    start_time: string;
+    end_time: string | null;
+    total_actions: number;
+    total_tokens: number;
+}
+export interface ActionRow {
+    id: number;
+    session_id: string;
+    action_type: string;
+    action_name: string;
+    model_name: string;
+    input_params: string | null;
+    output_result: string | null;
+    prompt_tokens: number | null;
+    completion_tokens: number | null;
+    duration_ms: number | null;
+    user_id: string;
+    created_at: string;
+}
+/** Get summary statistics */
+export declare function getStats(pool: QueryPool): Promise<StatsResult>;
+/** Get session list */
+export declare function getSessions(pool: QueryPool, params: {
+    page?: number;
+    limit?: number;
+    userId?: string;
+    model?: string;
+    sessionId?: string;
+    search?: string;
+    timeFrom?: string;
+    timeTo?: string;
+}): Promise<{
+    sessions: SessionRow[];
+    total: number;
+}>;
+/** Get actions for a session (supports field selection and limit) */
+export declare function getSessionActions(pool: QueryPool, sessionId: string, options?: {
+    fields?: string;
+    limit?: number;
+}): Promise<ActionRow[]>;
+/** Get action list */
+export declare function getActions(pool: QueryPool, params: {
+    page?: number;
+    limit?: number;
+    actionType?: string;
+    sessionId?: string;
+}): Promise<{
+    actions: ActionRow[];
+    total: number;
+}>;
+export interface AlertRow {
+    id: number;
+    alert_id: string;
+    session_id: string;
+    action_type: string;
+    action_name: string;
+    rule_id: string;
+    rule_name: string;
+    category: string;
+    severity: string;
+    finding: string;
+    context: string;
+    status: string;
+    resolved_by: string | null;
+    resolved_at: string | null;
+    user_id: string;
+    model_name: string;
+    created_at: string;
+}
+/** Get security alert list */
+export declare function getAlerts(pool: QueryPool, params: {
+    page?: number;
+    limit?: number;
+    severity?: string;
+    category?: string;
+    status?: string;
+    sessionId?: string;
+    ruleId?: string;
+    search?: string;
+    timeFrom?: string;
+    timeTo?: string;
+}): Promise<{
+    alerts: AlertRow[];
+    total: number;
+}>;
+/** Get security alert statistics */
+export declare function getAlertStats(pool: QueryPool): Promise<{
+    total: number;
+    bySeverity: Record<string, number>;
+    byCategory: Record<string, number>;
+    byStatus: Record<string, number>;
+    recent24h: number;
+}>;
+/** Update alert status */
+export declare function updateAlertStatus(pool: QueryPool, alertId: string, status: string, resolvedBy?: string): Promise<boolean>;
+/** Get alerts for a session */
+export declare function getSessionAlerts(pool: QueryPool, sessionId: string): Promise<AlertRow[]>;
+//# sourceMappingURL=api.d.ts.map

package/dist/web/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/web/api.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAM9C,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD,6BAA6B;AAC7B,wBAAsB,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CA2CpE;AAED,uBAAuB;AACvB,wBAAsB,WAAW,CAC/B,IAAI,EAAE,SAAS,EACf,MAAM,EAAE;IACN,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CACzE,GACA,OAAO,CAAC;IAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAwDpD;AAED,qEAAqE;AACrE,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,SAAS,EACf,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C,OAAO,CAAC,SAAS,EAAE,CAAC,CAWtB;AAED,sBAAsB;AACtB,wBAAsB,UAAU,CAC9B,IAAI,EAAE,SAAS,EACf,MAAM,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GACjF,OAAO,CAAC;IAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CA+BlD;AAMD,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,8BAA8B;AAC9B,wBAAsB,SAAS,CAC7B,IAAI,EAAE,SAAS,EACf,MAAM,EAAE;IACN,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CACpC,GACA,OAAO,CAAC;IAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CA4DhD;AAED,oCAAoC;AACpC,wBAAsB,aAAa,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CAsCD;AAED,0BAA0B;AAC1B,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,SAAS,EACf,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAED,+BAA+B;AAC/B,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAM9F"}

package/dist/web/api.js

@@ -0,0 +1,219 @@
+"use strict";
+/**
+ * Audit Web API — query database and return structured data
+ * Compatible with both MySQL and DuckDB backends
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getStats = getStats;
+exports.getSessions = getSessions;
+exports.getSessionActions = getSessionActions;
+exports.getActions = getActions;
+exports.getAlerts = getAlerts;
+exports.getAlertStats = getAlertStats;
+exports.updateAlertStatus = updateAlertStatus;
+exports.getSessionAlerts = getSessionAlerts;
+/* ------------------------------------------------------------------ */
+/*  API functions                                                       */
+/* ------------------------------------------------------------------ */
+/** Get summary statistics */
+async function getStats(pool) {
+    const [sessionRows] = await pool.query('SELECT COUNT(*) as cnt FROM audit_sessions');
+    const [actionRows] = await pool.query(`SELECT COUNT(*) as cnt,
+            COALESCE(SUM(COALESCE(prompt_tokens,0) + COALESCE(completion_tokens,0)), 0) as tokens,
+            COALESCE(AVG(NULLIF(duration_ms, 0)), 0) as avg_latency
+     FROM audit_actions`);
+    const [successRows] = await pool.query(`SELECT COUNT(*) as cnt FROM audit_actions
+     WHERE action_type = 'agent_end' AND output_result LIKE '%"success":true%'`);
+    const [totalEndRows] = await pool.query(`SELECT COUNT(*) as cnt FROM audit_actions WHERE action_type = 'agent_end'`);
+    // Count by action_type
+    const [typeCounts] = await pool.query('SELECT action_type, COUNT(*) as cnt FROM audit_actions GROUP BY action_type ORDER BY cnt DESC');
+    const actionTypeCounts = {};
+    for (const row of typeCounts) {
+        actionTypeCounts[row.action_type] = Number(row.cnt);
+    }
+    const totalEnd = Number(totalEndRows[0]?.cnt ?? 0);
+    return {
+        totalSessions: Number(sessionRows[0]?.cnt ?? 0),
+        totalActions: Number(actionRows[0]?.cnt ?? 0),
+        totalTokens: Number(actionRows[0]?.tokens ?? 0),
+        avgLatencyMs: Math.round(Number(actionRows[0]?.avg_latency ?? 0)),
+        successRate: totalEnd > 0
+            ? Math.round(Number(successRows[0]?.cnt ?? 0) / totalEnd * 100)
+            : 100,
+        actionTypeCounts,
+    };
+}
+/** Get session list */
+async function getSessions(pool, params) {
+    const page = params.page || 1;
+    const limit = Math.min(params.limit || 20, 100);
+    const offset = (page - 1) * limit;
+    let where = '1=1';
+    const values = [];
+    if (params.sessionId) {
+        where += ' AND session_id = ?';
+        values.push(params.sessionId);
+    }
+    if (params.userId) {
+        where += ' AND user_id = ?';
+        values.push(params.userId);
+    }
+    if (params.model) {
+        where += ' AND model_name LIKE ?';
+        values.push('%' + params.model + '%');
+    }
+    // Full-text search: search session metadata first, then action content (input_params / output_result)
+    if (params.search) {
+        const like = '%' + params.search + '%';
+        where += ` AND (
+      session_id LIKE ? OR user_id LIKE ? OR model_name LIKE ?
+      OR session_id IN (
+        SELECT DISTINCT session_id FROM audit_actions
+        WHERE input_params LIKE ? OR output_result LIKE ? OR action_name LIKE ?
+      )
+    )`;
+        values.push(like, like, like, like, like, like);
+    }
+    // Time range filter
+    if (params.timeFrom) {
+        where += ' AND start_time >= ?';
+        values.push(params.timeFrom);
+    }
+    if (params.timeTo) {
+        where += ' AND start_time <= ?';
+        values.push(params.timeTo);
+    }
+    const [countRows] = await pool.query('SELECT COUNT(*) as cnt FROM audit_sessions WHERE ' + where, values);
+    const [rows] = await pool.query('SELECT * FROM audit_sessions WHERE ' + where + ' ORDER BY start_time DESC LIMIT ? OFFSET ?', [...values, limit, offset]);
+    return {
+        sessions: rows,
+        total: Number(countRows[0]?.cnt ?? 0),
+    };
+}
+/** Get actions for a session (supports field selection and limit) */
+async function getSessionActions(pool, sessionId, options) {
+    // If fields=action_type, return only minimal fields (for mini trace)
+    const selectCols = options?.fields === 'action_type'
+        ? 'action_type, created_at'
+        : '*';
+    const limitClause = options?.limit ? ` LIMIT ${Math.min(options.limit, 1000)}` : '';
+    const [rows] = await pool.query(`SELECT ${selectCols} FROM audit_actions WHERE session_id = ? ORDER BY created_at ASC, id ASC${limitClause}`, [sessionId]);
+    return rows;
+}
+/** Get action list */
+async function getActions(pool, params) {
+    const page = params.page || 1;
+    const limit = Math.min(params.limit || 50, 200);
+    const offset = (page - 1) * limit;
+    let where = '1=1';
+    const values = [];
+    if (params.actionType) {
+        where += ' AND action_type = ?';
+        values.push(params.actionType);
+    }
+    if (params.sessionId) {
+        where += ' AND session_id = ?';
+        values.push(params.sessionId);
+    }
+    const [countRows] = await pool.query('SELECT COUNT(*) as cnt FROM audit_actions WHERE ' + where, values);
+    const [rows] = await pool.query('SELECT * FROM audit_actions WHERE ' + where + ' ORDER BY created_at DESC, id DESC LIMIT ? OFFSET ?', [...values, limit, offset]);
+    return {
+        actions: rows,
+        total: Number(countRows[0]?.cnt ?? 0),
+    };
+}
+/** Get security alert list */
+async function getAlerts(pool, params) {
+    const page = params.page || 1;
+    const limit = Math.min(params.limit || 20, 100);
+    const offset = (page - 1) * limit;
+    let where = '1=1';
+    const values = [];
+    if (params.severity) {
+        where += ' AND severity = ?';
+        values.push(params.severity);
+    }
+    if (params.category) {
+        where += ' AND category = ?';
+        values.push(params.category);
+    }
+    if (params.status) {
+        where += ' AND status = ?';
+        values.push(params.status);
+    }
+    if (params.sessionId) {
+        where += ' AND session_id = ?';
+        values.push(params.sessionId);
+    }
+    if (params.ruleId) {
+        where += ' AND rule_id = ?';
+        values.push(params.ruleId);
+    }
+    // Full-text search across alert fields
+    if (params.search) {
+        const like = '%' + params.search + '%';
+        where += ` AND (
+      rule_name LIKE ? OR rule_id LIKE ? OR finding LIKE ?
+      OR session_id LIKE ? OR action_name LIKE ? OR context LIKE ?
+    )`;
+        values.push(like, like, like, like, like, like);
+    }
+    if (params.timeFrom) {
+        where += ' AND created_at >= ?';
+        values.push(params.timeFrom);
+    }
+    if (params.timeTo) {
+        where += ' AND created_at <= ?';
+        values.push(params.timeTo);
+    }
+    const [countRows] = await pool.query('SELECT COUNT(*) as cnt FROM audit_alerts WHERE ' + where, values);
+    const [rows] = await pool.query('SELECT * FROM audit_alerts WHERE ' + where + ' ORDER BY created_at DESC LIMIT ? OFFSET ?', [...values, limit, offset]);
+    return {
+        alerts: rows,
+        total: Number(countRows[0]?.cnt ?? 0),
+    };
+}
+/** Get security alert statistics */
+async function getAlertStats(pool) {
+    const [totalRows] = await pool.query('SELECT COUNT(*) as cnt FROM audit_alerts');
+    const [sevRows] = await pool.query('SELECT severity, COUNT(*) as cnt FROM audit_alerts GROUP BY severity');
+    const [catRows] = await pool.query('SELECT category, COUNT(*) as cnt FROM audit_alerts GROUP BY category');
+    const [statusRows] = await pool.query('SELECT status, COUNT(*) as cnt FROM audit_alerts GROUP BY status');
+    // NOW() - INTERVAL 24 HOUR compatible with MySQL and DuckDB
+    const [recentRows] = await pool.query('SELECT COUNT(*) as cnt FROM audit_alerts WHERE created_at >= (NOW() - INTERVAL 24 HOUR)');
+    const bySeverity = {};
+    for (const r of sevRows)
+        bySeverity[r.severity] = Number(r.cnt);
+    const byCategory = {};
+    for (const r of catRows)
+        byCategory[r.category] = Number(r.cnt);
+    const byStatus = {};
+    for (const r of statusRows)
+        byStatus[r.status] = Number(r.cnt);
+    return {
+        total: Number(totalRows[0]?.cnt ?? 0),
+        bySeverity,
+        byCategory,
+        byStatus,
+        recent24h: Number(recentRows[0]?.cnt ?? 0),
+    };
+}
+/** Update alert status */
+async function updateAlertStatus(pool, alertId, status, resolvedBy) {
+    const validStatuses = ['open', 'acknowledged', 'resolved', 'false_positive'];
+    if (!validStatuses.includes(status))
+        return false;
+    const resolvedAt = (status === 'resolved' || status === 'false_positive')
+        ? new Date().toISOString().replace('T', ' ').slice(0, 19) // compatible with MySQL & DuckDB
+        : null;
+    await pool.query(`UPDATE audit_alerts SET status = ?, resolved_by = ?, resolved_at = ? WHERE alert_id = ?`, [status, resolvedBy || null, resolvedAt, alertId]);
+    // Verify update result (compatible with MySQL and DuckDB, not relying on affectedRows)
+    const [rows] = await pool.query('SELECT 1 FROM audit_alerts WHERE alert_id = ? AND status = ?', [alertId, status]);
+    return rows.length > 0;
+}
+/** Get alerts for a session */
+async function getSessionAlerts(pool, sessionId) {
+    const [rows] = await pool.query('SELECT * FROM audit_alerts WHERE session_id = ? ORDER BY created_at ASC', [sessionId]);
+    return rows;
+}
+//# sourceMappingURL=api.js.map

package/dist/web/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/web/api.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AA+CH,4BA2CC;AAGD,kCA8DC;AAGD,8CAeC;AAGD,gCAkCC;AA2BD,8BAoEC;AAGD,sCA4CC;AAGD,8CAwBC;AAGD,4CAMC;AA1VD,wEAAwE;AACxE,0EAA0E;AAC1E,wEAAwE;AAExE,6BAA6B;AACtB,KAAK,UAAU,QAAQ,CAAC,IAAe;IAC5C,MAAM,CAAC,WAAW,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CACpC,4CAA4C,CAC7C,CAAC;IAEF,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CACnC;;;wBAGoB,CACrB,CAAC;IAEF,MAAM,CAAC,WAAW,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CACpC;+EAC2E,CAC5E,CAAC;IAEF,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CACrC,2EAA2E,CAC5E,CAAC;IAEF,uBAAuB;IACvB,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CACnC,+FAA+F,CAChG,CAAC;IAEF,MAAM,gBAAgB,GAA2B,EAAE,CAAC;IACpD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAEnD,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;QAC/C,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;QAC7C,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;QAC/C,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,CAAC,CAAC,CAAC;QACjE,WAAW,EAAE,QAAQ,GAAG,CAAC;YACvB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,QAAQ,GAAG,GAAG,CAAC;YAC/D,CAAC,CAAC,GAAG;QACP,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,uBAAuB;AAChB,KAAK,UAAU,WAAW,CAC/B,IAAe,EACf,MAGC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;IAElC,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,MAAM,MAAM,GAAc,EAAE,CAAC;IAE7B,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,KAAK,IAAI,qBAAqB,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,IAAI,kBAAkB,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,KAAK,IAAI,wBAAwB,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,sGAAsG;IACtG,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC;QACvC,KAAK,IAAI;;;;;;MAMP,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IACD,oBAAoB;IACpB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,KAAK,IAAI,sBAAsB,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,IAAI,sBAAsB,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAClC,mDAAmD,GAAG,KAAK,EAC3D,MAAM,CACP,CAAC;IAEF,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,qCAAqC,GAAG,KAAK,GAAG,4CAA4C,EAC5F,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAC3B,CAAC;IAEF,OAAO;QACL,QAAQ,EAAE,IAA+B;QACzC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,qEAAqE;AAC9D,KAAK,UAAU,iBAAiB,CACrC,IAAe,EACf,SAAiB,EACjB,OAA6C;IAE7C,qEAAqE;IACrE,MAAM,UAAU,GAAG,OAAO,EAAE,MAAM,KAAK,aAAa;QAClD,CAAC,CAAC,yBAAyB;QAC3B,CAAC,CAAC,GAAG,CAAC;IACR,MAAM,WAAW,GAAG,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,UAAU,UAAU,2EAA2E,WAAW,EAAE,EAC5G,CAAC,SAAS,CAAC,CACZ,CAAC;IACF,OAAO,IAA8B,CAAC;AACxC,CAAC;AAED,sBAAsB;AACf,KAAK,UAAU,UAAU,CAC9B,IAAe,EACf,MAAkF;IAElF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;IAElC,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,MAAM,MAAM,GAAc,EAAE,CAAC;IAE7B,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,KAAK,IAAI,sBAAsB,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,KAAK,IAAI,qBAAqB,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAClC,kDAAkD,GAAG,KAAK,EAC1D,MAAM,CACP,CAAC;IAEF,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,oCAAoC,GAAG,KAAK,GAAG,qDAAqD,EACpG,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAC3B,CAAC;IAEF,OAAO;QACL,OAAO,EAAE,IAA8B;QACvC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;KACtC,CAAC;AACJ,CAAC;AA0BD,8BAA8B;AACvB,KAAK,UAAU,SAAS,CAC7B,IAAe,EACf,MAKC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;IAElC,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,MAAM,MAAM,GAAc,EAAE,CAAC;IAE7B,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,KAAK,IAAI,mBAAmB,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,KAAK,IAAI,mBAAmB,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,IAAI,iBAAiB,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,KAAK,IAAI,qBAAqB,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,IAAI,kBAAkB,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IACD,uCAAuC;IACvC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC;QACvC,KAAK,IAAI;;;MAGP,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,KAAK,IAAI,sBAAsB,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,IAAI,sBAAsB,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAClC,iDAAiD,GAAG,KAAK,EACzD,MAAM,CACP,CAAC;IAEF,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,mCAAmC,GAAG,KAAK,GAAG,4CAA4C,EAC1F,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAC3B,CAAC;IAEF,OAAO;QACL,MAAM,EAAE,IAA6B;QACrC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,oCAAoC;AAC7B,KAAK,UAAU,aAAa,CAAC,IAAe;IAOjD,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAClC,0CAA0C,CAC3C,CAAC;IAEF,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAChC,sEAAsE,CACvE,CAAC;IAEF,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAChC,sEAAsE,CACvE,CAAC;IAEF,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CACnC,kEAAkE,CACnE,CAAC;IAEF,4DAA4D;IAC5D,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CACnC,yFAAyF,CAC1F,CAAC;IAEF,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAEhE,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAEhE,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,UAAU;QAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAE/D,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;QACrC,UAAU;QACV,UAAU;QACV,QAAQ;QACR,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,0BAA0B;AACnB,KAAK,UAAU,iBAAiB,CACrC,IAAe,EACf,OAAe,EACf,MAAc,EACd,UAAmB;IAEnB,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAC7E,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAElD,MAAM,UAAU,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,gBAAgB,CAAC;QACvE,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAG,iCAAiC;QAC7F,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,IAAI,CAAC,KAAK,CACd,yFAAyF,EACzF,CAAC,MAAM,EAAE,UAAU,IAAI,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,CAClD,CAAC;IAEF,uFAAuF;IACvF,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,8DAA8D,EAC9D,CAAC,OAAO,EAAE,MAAM,CAAC,CAClB,CAAC;IACF,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,+BAA+B;AACxB,KAAK,UAAU,gBAAgB,CAAC,IAAe,EAAE,SAAiB;IACvE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,yEAAyE,EACzE,CAAC,SAAS,CAAC,CACZ,CAAC;IACF,OAAO,IAA6B,CAAC;AACvC,CAAC"}

package/dist/web/routes.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Audit panel HTTP route registration
+ * Mounts API and UI pages on the OpenClaw Gateway
+ */
+import { IncomingMessage, ServerResponse } from 'node:http';
+import { AuditWriter } from '../storage/writer';
+export interface RegisterHttpRoute {
+    (params: {
+        path: string;
+        handler: (req: IncomingMessage, res: ServerResponse) => Promise<boolean | void> | boolean | void;
+        auth: 'gateway' | 'plugin';
+        match?: 'exact' | 'prefix';
+        replaceExisting?: boolean;
+    }): void;
+}
+/**
+ * Register all audit panel HTTP routes
+ */
+export declare function registerAuditRoutes(registerHttpRoute: RegisterHttpRoute, writer: AuditWriter): void;
+//# sourceMappingURL=routes.d.ts.map

package/dist/web/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/web/routes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAG5D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAMhD,MAAM,WAAW,iBAAiB;IAChC,CAAC,MAAM,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,OAAO,GAAG,IAAI,CAAC;QACjG,IAAI,EAAE,SAAS,GAAG,QAAQ,CAAC;QAC3B,KAAK,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;QAC3B,eAAe,CAAC,EAAE,OAAO,CAAC;KAC3B,GAAG,IAAI,CAAC;CACV;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,iBAAiB,EAAE,iBAAiB,EACpC,MAAM,EAAE,WAAW,GAClB,IAAI,CAuIN"}

package/dist/web/routes.js

@@ -0,0 +1,175 @@
+"use strict";
+/**
+ * Audit panel HTTP route registration
+ * Mounts API and UI pages on the OpenClaw Gateway
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAuditRoutes = registerAuditRoutes;
+const api_1 = require("./api");
+const ui_1 = require("./ui");
+/**
+ * Register all audit panel HTTP routes
+ */
+function registerAuditRoutes(registerHttpRoute, writer) {
+    // Single prefix route handles all requests
+    registerHttpRoute({
+        path: '/plugins/audit',
+        handler: async (req, res) => {
+            try {
+                const url = parseUrl(req);
+                const path = url.pathname;
+                // Non-API paths return UI HTML directly (no database needed)
+                if (!path.startsWith('/plugins/audit/api/')) {
+                    sendHtml(res, (0, ui_1.getAppHtml)());
+                    return;
+                }
+                // API paths require database, attempt lazy initialization
+                await writer.ensureReady();
+                const pool = writer.getPool();
+                if (!pool) {
+                    sendJson(res, 503, { error: 'Database not ready — will retry automatically' });
+                    return;
+                }
+                // ---------- API routes ----------
+                // GET /plugins/audit/api/stats
+                if (path === '/plugins/audit/api/stats') {
+                    const stats = await (0, api_1.getStats)(pool);
+                    sendJson(res, 200, stats);
+                    return;
+                }
+                // GET /plugins/audit/api/sessions
+                if (path === '/plugins/audit/api/sessions') {
+                    const page = intParam(url, 'page', 1);
+                    const limit = intParam(url, 'limit', 20);
+                    const userId = url.searchParams.get('user_id') || undefined;
+                    const model = url.searchParams.get('model') || undefined;
+                    const sessionId = url.searchParams.get('sessionId') || undefined;
+                    const search = url.searchParams.get('search') || undefined;
+                    const timeFrom = url.searchParams.get('timeFrom') || undefined;
+                    const timeTo = url.searchParams.get('timeTo') || undefined;
+                    const result = await (0, api_1.getSessions)(pool, { page, limit, userId, model, sessionId, search, timeFrom, timeTo });
+                    sendJson(res, 200, result);
+                    return;
+                }
+                // GET /plugins/audit/api/sessions/:id/actions
+                const sessionActionsMatch = path.match(/^\/plugins\/audit\/api\/sessions\/([^/]+)\/actions$/);
+                if (sessionActionsMatch) {
+                    const sessionId = decodeURIComponent(sessionActionsMatch[1]);
+                    const fields = url.searchParams.get('fields') || undefined;
+                    const limitParam = url.searchParams.get('limit');
+                    const limit = limitParam ? parseInt(limitParam, 10) : undefined;
+                    const actions = await (0, api_1.getSessionActions)(pool, sessionId, { fields, limit });
+                    sendJson(res, 200, { actions });
+                    return;
+                }
+                // GET /plugins/audit/api/actions
+                if (path === '/plugins/audit/api/actions') {
+                    const page = intParam(url, 'page', 1);
+                    const limit = intParam(url, 'limit', 50);
+                    const actionType = url.searchParams.get('action_type') || undefined;
+                    const sessionId = url.searchParams.get('session_id') || undefined;
+                    const result = await (0, api_1.getActions)(pool, { page, limit, actionType, sessionId });
+                    sendJson(res, 200, result);
+                    return;
+                }
+                // ---------- Security Alert API routes ----------
+                // GET /plugins/audit/api/alerts/stats
+                if (path === '/plugins/audit/api/alerts/stats') {
+                    const stats = await (0, api_1.getAlertStats)(pool);
+                    sendJson(res, 200, stats);
+                    return;
+                }
+                // GET /plugins/audit/api/alerts
+                if (path === '/plugins/audit/api/alerts') {
+                    const page = intParam(url, 'page', 1);
+                    const limit = intParam(url, 'limit', 20);
+                    const severity = url.searchParams.get('severity') || undefined;
+                    const category = url.searchParams.get('category') || undefined;
+                    const status = url.searchParams.get('status') || undefined;
+                    const sessionId = url.searchParams.get('session_id') || undefined;
+                    const ruleId = url.searchParams.get('rule_id') || undefined;
+                    const search = url.searchParams.get('search') || undefined;
+                    const timeFrom = url.searchParams.get('timeFrom') || undefined;
+                    const timeTo = url.searchParams.get('timeTo') || undefined;
+                    const result = await (0, api_1.getAlerts)(pool, { page, limit, severity, category, status, sessionId, ruleId, search, timeFrom, timeTo });
+                    sendJson(res, 200, result);
+                    return;
+                }
+                // POST /plugins/audit/api/alerts/:id/status
+                const alertStatusMatch = path.match(/^\/plugins\/audit\/api\/alerts\/([^/]+)\/status$/);
+                if (alertStatusMatch && req.method === 'POST') {
+                    const alertId = decodeURIComponent(alertStatusMatch[1]);
+                    // Read POST body
+                    const body = await readBody(req);
+                    const { status: newStatus, resolvedBy } = JSON.parse(body);
+                    const ok = await (0, api_1.updateAlertStatus)(pool, alertId, newStatus, resolvedBy);
+                    sendJson(res, ok ? 200 : 404, { success: ok });
+                    return;
+                }
+                // GET /plugins/audit/api/sessions/:id/alerts
+                const sessionAlertsMatch = path.match(/^\/plugins\/audit\/api\/sessions\/([^/]+)\/alerts$/);
+                if (sessionAlertsMatch) {
+                    const sessionId = decodeURIComponent(sessionAlertsMatch[1]);
+                    const alerts = await (0, api_1.getSessionAlerts)(pool, sessionId);
+                    sendJson(res, 200, { alerts });
+                    return;
+                }
+                // No matching API route
+                sendJson(res, 404, { error: 'Not found' });
+            }
+            catch (err) {
+                console.error('[audit-duckdb] HTTP handler error:', err);
+                sendJson(res, 500, { error: String(err) });
+            }
+        },
+        auth: 'plugin',
+        match: 'prefix',
+    });
+    console.log('[audit-duckdb] Audit UI registered at /plugins/audit/');
+}
+/* ------------------------------------------------------------------ */
+/*  Helpers                                                            */
+/* ------------------------------------------------------------------ */
+function parseUrl(req) {
+    return new URL(req.url || '/', 'http://' + (req.headers.host || 'localhost'));
+}
+function intParam(url, name, defaultVal) {
+    const v = url.searchParams.get(name);
+    if (!v)
+        return defaultVal;
+    const n = parseInt(v, 10);
+    return isNaN(n) ? defaultVal : n;
+}
+function sendJson(res, status, data) {
+    res.writeHead(status, {
+        'Content-Type': 'application/json; charset=utf-8',
+        'Cache-Control': 'no-cache',
+    });
+    res.end(JSON.stringify(data));
+}
+function sendHtml(res, html) {
+    res.writeHead(200, {
+        'Content-Type': 'text/html; charset=utf-8',
+        'Cache-Control': 'no-cache',
+    });
+    res.end(html);
+}
+/** Read request body with max size limit to prevent DoS */
+function readBody(req, maxBytes = 1024 * 64 /* 64KB */) {
+    return new Promise((resolve, reject) => {
+        let data = '';
+        let bytes = 0;
+        req.on('data', (chunk) => {
+            bytes += chunk.length;
+            if (bytes > maxBytes) {
+                req.destroy();
+                reject(new Error(`Request body too large (max ${maxBytes} bytes)`));
+                return;
+            }
+            data += chunk.toString();
+        });
+        req.on('end', () => resolve(data));
+        req.on('error', reject);
+    });
+}
+//# sourceMappingURL=routes.js.map

package/dist/web/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/web/routes.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAwBH,kDA0IC;AA/JD,+BAA4I;AAC5I,6BAAkC;AAiBlC;;GAEG;AACH,SAAgB,mBAAmB,CACjC,iBAAoC,EACpC,MAAmB;IAEnB,2CAA2C;IAC3C,iBAAiB,CAAC;QAChB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAC1B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;gBAE1B,6DAA6D;gBAC7D,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;oBAC5C,QAAQ,CAAC,GAAG,EAAE,IAAA,eAAU,GAAE,CAAC,CAAC;oBAC5B,OAAO;gBACT,CAAC;gBAED,0DAA0D;gBAC1D,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC,CAAC;oBAC/E,OAAO;gBACT,CAAC;gBAED,mCAAmC;gBAEnC,+BAA+B;gBAC/B,IAAI,IAAI,KAAK,0BAA0B,EAAE,CAAC;oBACxC,MAAM,KAAK,GAAG,MAAM,IAAA,cAAQ,EAAC,IAAI,CAAC,CAAC;oBACnC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;oBAC1B,OAAO;gBACT,CAAC;gBAED,kCAAkC;gBAClC,IAAI,IAAI,KAAK,6BAA6B,EAAE,CAAC;oBAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;oBACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;oBACzC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC;oBAC5D,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;oBACzD,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;oBACjE,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;oBAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;oBAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;oBAC3D,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAW,EAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;oBAC5G,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;oBAC3B,OAAO;gBACT,CAAC;gBAED,8CAA8C;gBAC9C,MAAM,mBAAmB,GAAG,IAAI,CAAC,KAAK,CACpC,qDAAqD,CACtD,CAAC;gBACF,IAAI,mBAAmB,EAAE,CAAC;oBACxB,MAAM,SAAS,GAAG,kBAAkB,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC7D,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;oBAC3D,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBACjD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBAChE,MAAM,OAAO,GAAG,MAAM,IAAA,uBAAiB,EAAC,IAAI,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;oBAC5E,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;oBAChC,OAAO;gBACT,CAAC;gBAED,iCAAiC;gBACjC,IAAI,IAAI,KAAK,4BAA4B,EAAE,CAAC;oBAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;oBACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;oBACzC,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC;oBACpE,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC;oBAClE,MAAM,MAAM,GAAG,MAAM,IAAA,gBAAU,EAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;oBAC9E,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;oBAC3B,OAAO;gBACT,CAAC;gBAED,kDAAkD;gBAElD,sCAAsC;gBACtC,IAAI,IAAI,KAAK,iCAAiC,EAAE,CAAC;oBAC/C,MAAM,KAAK,GAAG,MAAM,IAAA,mBAAa,EAAC,IAAI,CAAC,CAAC;oBACxC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;oBAC1B,OAAO;gBACT,CAAC;gBAED,gCAAgC;gBAChC,IAAI,IAAI,KAAK,2BAA2B,EAAE,CAAC;oBACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;oBACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;oBACzC,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;oBAC/D,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;oBAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;oBAC3D,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC;oBAClE,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC;oBAC5D,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;oBAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;oBAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;oBAC3D,MAAM,MAAM,GAAG,MAAM,IAAA,eAAS,EAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;oBAC/H,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;oBAC3B,OAAO;gBACT,CAAC;gBAED,4CAA4C;gBAC5C,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CACjC,kDAAkD,CACnD,CAAC;gBACF,IAAI,gBAAgB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC9C,MAAM,OAAO,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;oBACxD,iBAAiB;oBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC3D,MAAM,EAAE,GAAG,MAAM,IAAA,uBAAiB,EAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;oBACzE,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;oBAC/C,OAAO;gBACT,CAAC;gBAED,6CAA6C;gBAC7C,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CACnC,oDAAoD,CACrD,CAAC;gBACF,IAAI,kBAAkB,EAAE,CAAC;oBACvB,MAAM,SAAS,GAAG,kBAAkB,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC5D,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAgB,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;oBACvD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;oBAC/B,OAAO;gBACT,CAAC;gBAED,wBAAwB;gBACxB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;gBACzD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;AACvE,CAAC;AAED,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE,SAAS,QAAQ,CAAC,GAAoB;IACpC,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,QAAQ,CAAC,GAAQ,EAAE,IAAY,EAAE,UAAkB;IAC1D,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC;IAC1B,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1B,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAClE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,cAAc,EAAE,iCAAiC;QACjD,eAAe,EAAE,UAAU;KAC5B,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,IAAY;IACjD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QACjB,cAAc,EAAE,0BAA0B;QAC1C,eAAe,EAAE,UAAU;KAC5B,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,2DAA2D;AAC3D,SAAS,QAAQ,CAAC,GAAoB,EAAE,QAAQ,GAAG,IAAI,GAAG,EAAE,CAAC,UAAU;IACrE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;gBACrB,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,QAAQ,SAAS,CAAC,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YACD,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/web/ui.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Audit panel SPA — single-page HTML application
+ * Contains Dashboard overview + Session Trace detail views
+ * Uses hash routing: #/ = Dashboard, #/trace/{sessionId} = Trace
+ *
+ * Fully aligned with OpenClaw Control design system (CSS variables + dark/light themes)
+ */
+export declare function getAppHtml(): string;
+//# sourceMappingURL=ui.d.ts.map

package/dist/web/ui.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui.d.ts","sourceRoot":"","sources":["../../src/web/ui.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,wBAAgB,UAAU,IAAI,MAAM,CAmBnC"}