openclaw-observability 2026.3.23 → 2026.3.24-1

package/dist/config.d.ts

@@ -58,6 +58,14 @@ export interface UiConfig {
     /** Optional access token: when set, requests must pass ?token=... or Authorization: Bearer ... */
     accessToken?: string;
 }
+export interface MetricsConfig {
+    /** Enable OTLP push ingest endpoint */
+    enabled: boolean;
+    /** OTLP base path mounted on plugin route (the receiver listens on ${otlpPath}/v1/metrics) */
+    otlpPath: string;
+    /** Max payload size for OTLP metrics requests */
+    maxPayloadBytes: number;
+}
 /** Full plugin config */
 export interface AuditPluginConfig {
     /** Storage mode: local (embedded, zero config) | remote (external MySQL) */
@@ -68,6 +76,7 @@ export interface AuditPluginConfig {
     redaction: RedactionConfig;
     security: SecurityPluginConfig;
     ui?: UiConfig;
+    metrics: MetricsConfig;
 }
 /** Default DuckDB path — use a 'data' subdirectory to avoid triggering
  *  OpenClaw's hot-reload file watcher on the top-level ~/.openclaw/ dir */

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,8BAA8B;AAC9B,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,0BAA0B;AAC1B,MAAM,WAAW,YAAY;IAC3B,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,oBAAoB;AACpB,MAAM,WAAW,YAAY;IAC3B,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,uBAAuB;AACvB,MAAM,WAAW,eAAe;IAC9B,mCAAmC;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,sDAAsD;IACtD,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,gCAAgC;AAChC,MAAM,WAAW,oBAAoB;IACnC,gBAAgB,EAAE,KAAK,CAAC;QACtB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,QAAQ,CAAC;QACpB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC,CAAC;IACH,2CAA2C;IAC3C,OAAO,EAAE,OAAO,CAAC;IACjB,8BAA8B;IAC9B,KAAK,EAAE;QACL,aAAa,EAAE,OAAO,CAAC;QACvB,WAAW,EAAE,OAAO,CAAC;QACrB,gBAAgB,EAAE,OAAO,CAAC;QAC1B,eAAe,EAAE,OAAO,CAAC;QACzB,WAAW,EAAE,OAAO,CAAC;QACrB,cAAc,EAAE,OAAO,CAAC;KACzB,CAAC;IACF,sDAAsD;IACtD,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,sCAAsC;AACtC,MAAM,WAAW,QAAQ;IACvB,kGAAkG;IAClG,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,yBAAyB;AACzB,MAAM,WAAW,iBAAiB;IAChC,4EAA4E;IAC5E,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAC;IACzB,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,eAAe,CAAC;IAC3B,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,EAAE,CAAC,EAAE,QAAQ,CAAC;CACf;AAED;2EAC2E;AAC3E,eAAO,MAAM,mBAAmB,QAE/B,CAAC;AAEF,qBAAqB;AACrB,eAAO,MAAM,cAAc,EAAE,iBAiD5B,CAAC;AAeF,wBAAgB,aAAa,CAC3B,UAAU,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,SAAS,GACjD,iBAAiB,CAuCnB"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,8BAA8B;AAC9B,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,0BAA0B;AAC1B,MAAM,WAAW,YAAY;IAC3B,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,oBAAoB;AACpB,MAAM,WAAW,YAAY;IAC3B,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,uBAAuB;AACvB,MAAM,WAAW,eAAe;IAC9B,mCAAmC;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,sDAAsD;IACtD,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,gCAAgC;AAChC,MAAM,WAAW,oBAAoB;IACnC,gBAAgB,EAAE,KAAK,CAAC;QACtB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,QAAQ,CAAC;QACpB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC,CAAC;IACH,2CAA2C;IAC3C,OAAO,EAAE,OAAO,CAAC;IACjB,8BAA8B;IAC9B,KAAK,EAAE;QACL,aAAa,EAAE,OAAO,CAAC;QACvB,WAAW,EAAE,OAAO,CAAC;QACrB,gBAAgB,EAAE,OAAO,CAAC;QAC1B,eAAe,EAAE,OAAO,CAAC;QACzB,WAAW,EAAE,OAAO,CAAC;QACrB,cAAc,EAAE,OAAO,CAAC;KACzB,CAAC;IACF,sDAAsD;IACtD,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,sCAAsC;AACtC,MAAM,WAAW,QAAQ;IACvB,kGAAkG;IAClG,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,uCAAuC;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,8FAA8F;IAC9F,QAAQ,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,yBAAyB;AACzB,MAAM,WAAW,iBAAiB;IAChC,4EAA4E;IAC5E,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAC;IACzB,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,eAAe,CAAC;IAC3B,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,EAAE,CAAC,EAAE,QAAQ,CAAC;IACd,OAAO,EAAE,aAAa,CAAC;CACxB;AAED;2EAC2E;AAC3E,eAAO,MAAM,mBAAmB,QAE/B,CAAC;AAEF,qBAAqB;AACrB,eAAO,MAAM,cAAc,EAAE,iBAsD5B,CAAC;AAeF,wBAAgB,aAAa,CAC3B,UAAU,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,SAAS,GACjD,iBAAiB,CA2CnB"}

package/dist/config.js

@@ -93,6 +93,11 @@ exports.DEFAULT_CONFIG = {
         domainWhitelist: [],
     },
     ui: {},
+    metrics: {
+        enabled: true,
+        otlpPath: '/plugins/observability/api/otel',
+        maxPayloadBytes: 2 * 1024 * 1024,
+    },
 };
 /**
  * Smart mode inference:
@@ -145,6 +150,10 @@ function resolveConfig(userConfig) {
             ...exports.DEFAULT_CONFIG.ui,
             ...userConfig.ui,
         },
+        metrics: {
+            ...exports.DEFAULT_CONFIG.metrics,
+            ...userConfig.metrics,
+        },
     };
 }
 //# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuJH,sCAyCC;AA9LD,2CAA6B;AAC7B,uCAAyB;AA6EzB;2EAC2E;AAC9D,QAAA,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAC1C,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,sBAAsB,CAC1D,CAAC;AAEF,qBAAqB;AACR,QAAA,cAAc,GAAsB;IAC/C,IAAI,EAAE,OAAO,EAAG,qCAAqC;IACrD,KAAK,EAAE;QACL,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,wBAAwB;KACnC;IACD,MAAM,EAAE;QACN,IAAI,EAAE,2BAAmB;KAC1B;IACD,MAAM,EAAE;QACN,SAAS,EAAE,EAAE;QACb,eAAe,EAAE,IAAI;KACtB;IACD,SAAS,EAAE;QACT,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE;YACR,SAAS;YACT,gBAAgB;YAChB,UAAU;YACV,QAAQ;YACR,cAAc;YACd,YAAY;YACZ,eAAe;YACf,cAAc;YACd,eAAe;YACf,YAAY;YACZ,YAAY;YACZ,eAAe;YACf,aAAa;YACb,YAAY;SACb;KACF;IACD,QAAQ,EAAE;QACR,gBAAgB,EAAE,EAAE;QACpB,OAAO,EAAE,IAAI;QACb,KAAK,EAAE;YACL,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,IAAI;YACjB,gBAAgB,EAAE,KAAK;YACvB,eAAe,EAAE,KAAK;YACtB,WAAW,EAAE,KAAK;YAClB,cAAc,EAAE,KAAK;SACtB;QACD,eAAe,EAAE,EAAE;KACpB;IACD,EAAE,EAAE,EAAE;CACP,CAAC;AAEF;;;;;GAKG;AACH,SAAS,SAAS,CAAC,UAAsC;IACvD,IAAI,UAAU,CAAC,IAAI;QAAE,OAAO,UAAU,CAAC,IAAI,CAAC;IAC5C,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;IAC3B,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACzE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAgB,aAAa,CAC3B,UAAkD;IAElD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,GAAG,sBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC;QAC3B,KAAK,EAAE;YACL,GAAG,sBAAc,CAAC,KAAK;YACvB,GAAG,UAAU,CAAC,KAAK;SACpB;QACD,MAAM,EAAE;YACN,GAAG,sBAAc,CAAC,MAAM;YACxB,GAAG,UAAU,CAAC,MAAM;SACrB;QACD,MAAM,EAAE;YACN,GAAG,sBAAc,CAAC,MAAM;YACxB,GAAG,UAAU,CAAC,MAAM;SACrB;QACD,SAAS,EAAE;YACT,GAAG,sBAAc,CAAC,SAAS;YAC3B,GAAG,UAAU,CAAC,SAAS;YACvB,QAAQ,EAAE,UAAU,CAAC,SAAS,EAAE,QAAQ,IAAI,sBAAc,CAAC,SAAS,CAAC,QAAQ;SAC9E;QACD,QAAQ,EAAE;YACR,GAAG,sBAAc,CAAC,QAAQ;YAC1B,GAAG,UAAU,CAAC,QAAQ;YACtB,KAAK,EAAE;gBACL,GAAG,sBAAc,CAAC,QAAQ,CAAC,KAAK;gBAChC,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC;aAChC;YACD,gBAAgB,EAAE,UAAU,CAAC,QAAQ,EAAE,gBAAgB,IAAI,sBAAc,CAAC,QAAQ,CAAC,gBAAgB;YACnG,eAAe,EAAE,UAAU,CAAC,QAAQ,EAAE,eAAe,IAAI,sBAAc,CAAC,QAAQ,CAAC,eAAe;SACjG;QACD,EAAE,EAAE;YACF,GAAG,sBAAc,CAAC,EAAE;YACpB,GAAG,UAAU,CAAC,EAAE;SACjB;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsKH,sCA6CC;AAjND,2CAA6B;AAC7B,uCAAyB;AAuFzB;2EAC2E;AAC9D,QAAA,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAC1C,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,sBAAsB,CAC1D,CAAC;AAEF,qBAAqB;AACR,QAAA,cAAc,GAAsB;IAC/C,IAAI,EAAE,OAAO,EAAG,qCAAqC;IACrD,KAAK,EAAE;QACL,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,wBAAwB;KACnC;IACD,MAAM,EAAE;QACN,IAAI,EAAE,2BAAmB;KAC1B;IACD,MAAM,EAAE;QACN,SAAS,EAAE,EAAE;QACb,eAAe,EAAE,IAAI;KACtB;IACD,SAAS,EAAE;QACT,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE;YACR,SAAS;YACT,gBAAgB;YAChB,UAAU;YACV,QAAQ;YACR,cAAc;YACd,YAAY;YACZ,eAAe;YACf,cAAc;YACd,eAAe;YACf,YAAY;YACZ,YAAY;YACZ,eAAe;YACf,aAAa;YACb,YAAY;SACb;KACF;IACD,QAAQ,EAAE;QACR,gBAAgB,EAAE,EAAE;QACpB,OAAO,EAAE,IAAI;QACb,KAAK,EAAE;YACL,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,IAAI;YACjB,gBAAgB,EAAE,KAAK;YACvB,eAAe,EAAE,KAAK;YACtB,WAAW,EAAE,KAAK;YAClB,cAAc,EAAE,KAAK;SACtB;QACD,eAAe,EAAE,EAAE;KACpB;IACD,EAAE,EAAE,EAAE;IACN,OAAO,EAAE;QACP,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,iCAAiC;QAC3C,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;KACjC;CACF,CAAC;AAEF;;;;;GAKG;AACH,SAAS,SAAS,CAAC,UAAsC;IACvD,IAAI,UAAU,CAAC,IAAI;QAAE,OAAO,UAAU,CAAC,IAAI,CAAC;IAC5C,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;IAC3B,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACzE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAgB,aAAa,CAC3B,UAAkD;IAElD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,GAAG,sBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC;QAC3B,KAAK,EAAE;YACL,GAAG,sBAAc,CAAC,KAAK;YACvB,GAAG,UAAU,CAAC,KAAK;SACpB;QACD,MAAM,EAAE;YACN,GAAG,sBAAc,CAAC,MAAM;YACxB,GAAG,UAAU,CAAC,MAAM;SACrB;QACD,MAAM,EAAE;YACN,GAAG,sBAAc,CAAC,MAAM;YACxB,GAAG,UAAU,CAAC,MAAM;SACrB;QACD,SAAS,EAAE;YACT,GAAG,sBAAc,CAAC,SAAS;YAC3B,GAAG,UAAU,CAAC,SAAS;YACvB,QAAQ,EAAE,UAAU,CAAC,SAAS,EAAE,QAAQ,IAAI,sBAAc,CAAC,SAAS,CAAC,QAAQ;SAC9E;QACD,QAAQ,EAAE;YACR,GAAG,sBAAc,CAAC,QAAQ;YAC1B,GAAG,UAAU,CAAC,QAAQ;YACtB,KAAK,EAAE;gBACL,GAAG,sBAAc,CAAC,QAAQ,CAAC,KAAK;gBAChC,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC;aAChC;YACD,gBAAgB,EAAE,UAAU,CAAC,QAAQ,EAAE,gBAAgB,IAAI,sBAAc,CAAC,QAAQ,CAAC,gBAAgB;YACnG,eAAe,EAAE,UAAU,CAAC,QAAQ,EAAE,eAAe,IAAI,sBAAc,CAAC,QAAQ,CAAC,eAAe;SACjG;QACD,EAAE,EAAE;YACF,GAAG,sBAAc,CAAC,EAAE;YACpB,GAAG,UAAU,CAAC,EAAE;SACjB;QACD,OAAO,EAAE;YACP,GAAG,sBAAc,CAAC,OAAO;YACzB,GAAG,UAAU,CAAC,OAAO;SACtB;KACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -27,6 +27,11 @@ interface PluginAPI {
         match?: 'exact' | 'prefix';
         replaceExisting?: boolean;
     }) => void;
+    registerGatewayMethod?: (method: string, handler: (ctx: {
+        params?: unknown;
+        respond: (ok: boolean, payload: unknown) => void;
+        [key: string]: unknown;
+    }) => void | Promise<void>) => void;
     runtime?: {
         events?: {
             onAgentEvent?: (listener: (evt: {

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,iBAAiB,EAAiB,MAAM,UAAU,CAAC;AAmB5D,UAAU,SAAS;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,YAAY,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC1C,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,GAAG,IAAI,CAAC;IACjE,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE;QAC3B,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,WAAW,EAAE,eAAe,EAAE,GAAG,EAAE,OAAO,WAAW,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,OAAO,GAAG,IAAI,CAAC;QACzI,IAAI,EAAE,SAAS,GAAG,QAAQ,CAAC;QAC3B,KAAK,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;QAC3B,eAAe,CAAC,EAAE,OAAO,CAAC;KAC3B,KAAK,IAAI,CAAC;IACX,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE;YACP,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE;gBAC9B,KAAK,EAAE,MAAM,CAAC;gBACd,MAAM,EAAE,MAAM,CAAC;gBACf,EAAE,EAAE,MAAM,CAAC;gBACX,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;aACrB,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC;SACpC,CAAC;KACH,CAAC;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAu5BD,iBAAS,QAAQ,CAAC,GAAG,EAAE,SAAS,GAAG;IAAE,UAAU,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAy7CrE;AAED,OAAO,EAAE,QAAQ,EAAE,CAAC;AACpB,eAAe,QAAQ,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,iBAAiB,EAAiB,MAAM,UAAU,CAAC;AAiC5D,UAAU,SAAS;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,YAAY,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC1C,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,GAAG,IAAI,CAAC;IACjE,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE;QAC3B,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,WAAW,EAAE,eAAe,EAAE,GAAG,EAAE,OAAO,WAAW,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,OAAO,GAAG,IAAI,CAAC;QACzI,IAAI,EAAE,SAAS,GAAG,QAAQ,CAAC;QAC3B,KAAK,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;QAC3B,eAAe,CAAC,EAAE,OAAO,CAAC;KAC3B,KAAK,IAAI,CAAC;IACX,qBAAqB,CAAC,EAAE,CACtB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,CAAC,GAAG,EAAE;QACb,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;QACjD,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KACvB,IAAI,CAAC;IACV,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE;YACP,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE;gBAC9B,KAAK,EAAE,MAAM,CAAC;gBACd,MAAM,EAAE,MAAM,CAAC;gBACf,EAAE,EAAE,MAAM,CAAC;gBACX,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;aACrB,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC;SACpC,CAAC;KACH,CAAC;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAu5BD,iBAAS,QAAQ,CAAC,GAAG,EAAE,SAAS,GAAG;IAAE,UAAU,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CA2vDrE;AAED,OAAO,EAAE,QAAQ,EAAE,CAAC;AACpB,eAAe,QAAQ,CAAC"}

package/dist/index.js

@@ -55,6 +55,7 @@ const mysql_writer_1 = require("./storage/mysql-writer");
 const duckdb_local_writer_1 = require("./storage/duckdb-local-writer");
 const buffer_1 = require("./storage/buffer");
 const routes_1 = require("./web/routes");
+const api_1 = require("./web/api");
 const scanner_1 = require("./security/scanner");
 const fs = __importStar(require("node:fs"));
 const path = __importStar(require("node:path"));
@@ -907,7 +908,8 @@ function activate(api) {
                 'Please configure via Dashboard (Settings → Plugins → openclaw-observability Config) then restart.');
         }
     }
-    // Observability UI auth: read gateway.auth.token from same config file as gateway; if missing or empty, no auth (allow all)
+    // UI shell stays directly open; legacy HTTP APIs still accept gateway token
+    // for backward compatibility. WS data access is authenticated at gateway connect.
     const openclawConfigPath = process.env.OPENCLAW_CONFIG_PATH ?? path.join(stateDir, 'openclaw.json');
     let observabilityToken;
     try {
@@ -919,7 +921,6 @@ function activate(api) {
                 t = parsed?.gateway?.auth?.token;
             }
             catch {
-                // Config may be JSON5 (comments, unescaped newlines in strings); extract token with regex
                 const m = raw.match(/"gateway"\s*:\s*\{[\s\S]*?"auth"\s*:\s*\{[\s\S]*?"token"\s*:\s*"((?:[^"\\]|\\.)*)"/);
                 t = m?.[1]?.replace(/\\(.)/g, '$1');
             }
@@ -931,10 +932,10 @@ function activate(api) {
         console.warn('[openclaw-observability] Failed to read gateway token from config:', e.message);
     }
     if (observabilityToken) {
-        console.log('[openclaw-observability] Observability UI auth: token required (from ' + openclawConfigPath + ')');
+        console.log('[openclaw-observability] Observability HTTP API auth: token compatibility enabled (from ' + openclawConfigPath + ')');
     }
     else {
-        console.log('[openclaw-observability] Observability UI auth: no token, allow all');
+        console.log('[openclaw-observability] Observability HTTP API auth: no token configured');
     }
     // Always register HTTP routes on the current api (the latest api serves HTTP)
     if (typeof api.registerHttpRoute === 'function') {
@@ -949,11 +950,325 @@ function activate(api) {
                     `customRegexRules=${next.customRegexRules.length}`);
                 return next;
             },
-        });
+        }, config.metrics);
     }
     else {
         console.warn('[openclaw-observability] registerHttpRoute not available — observability UI disabled');
     }
+    if (typeof api.registerGatewayMethod === 'function') {
+        const toInt = (value, defaultValue) => {
+            const n = Number(value);
+            if (!Number.isFinite(n))
+                return defaultValue;
+            const i = Math.floor(n);
+            return i > 0 ? i : defaultValue;
+        };
+        const toStringOrUndefined = (value) => {
+            if (typeof value !== 'string')
+                return undefined;
+            const trimmed = value.trim();
+            return trimmed.length > 0 ? trimmed : undefined;
+        };
+        const toRecord = (value) => {
+            if (value && typeof value === 'object' && !Array.isArray(value)) {
+                return value;
+            }
+            return {};
+        };
+        const toBool = (value, defaultValue = false) => {
+            if (typeof value === 'boolean')
+                return value;
+            if (typeof value === 'number')
+                return value !== 0;
+            if (typeof value === 'string') {
+                const v = value.trim().toLowerCase();
+                if (!v)
+                    return defaultValue;
+                if (v === '1' || v === 'true' || v === 'yes' || v === 'y' || v === 'on')
+                    return true;
+                if (v === '0' || v === 'false' || v === 'no' || v === 'n' || v === 'off')
+                    return false;
+            }
+            return defaultValue;
+        };
+        const resolveLogPath = (sourceRaw) => {
+            const source = toStringOrUndefined(sourceRaw) || 'gateway';
+            const logsDir = path.join(os.homedir(), '.openclaw', 'logs');
+            if (source === 'gateway') {
+                return { source, path: path.join(logsDir, 'gateway.log') };
+            }
+            if (source === 'gateway.err' || source === 'gateway_error') {
+                return { source: 'gateway.err', path: path.join(logsDir, 'gateway.err.log') };
+            }
+            if (source === 'runtime') {
+                const runtimeDir = path.join(os.tmpdir(), 'openclaw');
+                try {
+                    const files = fs
+                        .readdirSync(runtimeDir)
+                        .filter((f) => /^openclaw-\d{4}-\d{2}-\d{2}\.log$/.test(f))
+                        .map((f) => ({
+                        file: f,
+                        mtime: fs.statSync(path.join(runtimeDir, f)).mtimeMs,
+                    }))
+                        .sort((a, b) => b.mtime - a.mtime);
+                    if (files.length > 0) {
+                        return { source, path: path.join(runtimeDir, files[0].file) };
+                    }
+                }
+                catch {
+                    return { source, path: null };
+                }
+                return { source, path: null };
+            }
+            return { source, path: null };
+        };
+        const registerGateway = (method, handler) => {
+            try {
+                api.registerGatewayMethod(method, async ({ params, respond }) => {
+                    try {
+                        await writer.ensureReady();
+                        const pool = writer.getPool();
+                        if (!pool) {
+                            respond(false, { error: 'Database not ready — will retry automatically' });
+                            return;
+                        }
+                        await handler({ params, respond });
+                    }
+                    catch (e) {
+                        respond(false, {
+                            error: e?.message || `Failed to call ${method}`,
+                        });
+                    }
+                });
+            }
+            catch (e) {
+                console.warn(`[openclaw-observability] Failed to register gateway method ${method}:`, e.message);
+            }
+        };
+        registerGateway('observability.stats', async ({ respond }) => {
+            const pool = writer.getPool();
+            const stats = await (0, api_1.getStats)(pool);
+            respond(true, stats);
+        });
+        registerGateway('observability.sessions', async ({ params, respond }) => {
+            const pool = writer.getPool();
+            const p = toRecord(params);
+            const result = await (0, api_1.getSessions)(pool, {
+                page: toInt(p.page, 1),
+                limit: toInt(p.limit, 20),
+                userId: toStringOrUndefined(p.user_id),
+                model: toStringOrUndefined(p.model),
+                sessionId: toStringOrUndefined(p.sessionId),
+                search: toStringOrUndefined(p.search),
+                timeFrom: toStringOrUndefined(p.timeFrom),
+                timeTo: toStringOrUndefined(p.timeTo),
+            });
+            respond(true, result);
+        });
+        registerGateway('observability.session.actions', async ({ params, respond }) => {
+            const pool = writer.getPool();
+            const p = toRecord(params);
+            const sessionId = toStringOrUndefined(p.sessionId);
+            if (!sessionId) {
+                respond(false, { error: 'sessionId is required' });
+                return;
+            }
+            const fields = toStringOrUndefined(p.fields);
+            const limit = p.limit == null ? undefined : toInt(p.limit, 1000);
+            const actions = await (0, api_1.getSessionActions)(pool, sessionId, { fields, limit });
+            respond(true, { actions });
+        });
+        registerGateway('observability.session.tree', async ({ params, respond }) => {
+            const pool = writer.getPool();
+            const p = toRecord(params);
+            const sessionId = toStringOrUndefined(p.sessionId);
+            if (!sessionId) {
+                respond(false, { error: 'sessionId is required' });
+                return;
+            }
+            const tree = await (0, api_1.getTraceObservationTree)(pool, sessionId);
+            respond(true, tree);
+        });
+        registerGateway('observability.session.graph', async ({ params, respond }) => {
+            const pool = writer.getPool();
+            const p = toRecord(params);
+            const sessionId = toStringOrUndefined(p.sessionId);
+            if (!sessionId) {
+                respond(false, { error: 'sessionId is required' });
+                return;
+            }
+            const graph = await (0, api_1.getTraceObservationTree)(pool, sessionId);
+            respond(true, graph);
+        });
+        registerGateway('observability.actions', async ({ params, respond }) => {
+            const pool = writer.getPool();
+            const p = toRecord(params);
+            const result = await (0, api_1.getActions)(pool, {
+                page: toInt(p.page, 1),
+                limit: toInt(p.limit, 50),
+                actionType: toStringOrUndefined(p.action_type),
+                sessionId: toStringOrUndefined(p.session_id),
+            });
+            respond(true, result);
+        });
+        registerGateway('observability.alerts.stats', async ({ respond }) => {
+            const pool = writer.getPool();
+            const stats = await (0, api_1.getAlertStats)(pool);
+            respond(true, stats);
+        });
+        registerGateway('observability.alerts', async ({ params, respond }) => {
+            const pool = writer.getPool();
+            const p = toRecord(params);
+            const result = await (0, api_1.getAlerts)(pool, {
+                page: toInt(p.page, 1),
+                limit: toInt(p.limit, 20),
+                severity: toStringOrUndefined(p.severity),
+                category: toStringOrUndefined(p.category),
+                status: toStringOrUndefined(p.status),
+                sessionId: toStringOrUndefined(p.session_id),
+                ruleId: toStringOrUndefined(p.rule_id),
+                search: toStringOrUndefined(p.search),
+                timeFrom: toStringOrUndefined(p.timeFrom),
+                timeTo: toStringOrUndefined(p.timeTo),
+            });
+            respond(true, result);
+        });
+        registerGateway('observability.alerts.updateStatus', async ({ params, respond }) => {
+            const pool = writer.getPool();
+            const p = toRecord(params);
+            const alertId = toStringOrUndefined(p.alertId);
+            const status = toStringOrUndefined(p.status);
+            const resolvedBy = toStringOrUndefined(p.resolvedBy);
+            if (!alertId || !status) {
+                respond(false, { error: 'alertId and status are required' });
+                return;
+            }
+            const ok = await (0, api_1.updateAlertStatus)(pool, alertId, status, resolvedBy);
+            respond(true, { success: ok });
+        });
+        registerGateway('observability.session.alerts', async ({ params, respond }) => {
+            const pool = writer.getPool();
+            const p = toRecord(params);
+            const sessionId = toStringOrUndefined(p.sessionId);
+            if (!sessionId) {
+                respond(false, { error: 'sessionId is required' });
+                return;
+            }
+            const alerts = await (0, api_1.getSessionAlerts)(pool, sessionId);
+            respond(true, { alerts });
+        });
+        registerGateway('observability.analytics', async ({ params, respond }) => {
+            const pool = writer.getPool();
+            const p = toRecord(params);
+            const result = await (0, api_1.getAnalytics)(pool, {
+                timeFrom: toStringOrUndefined(p.timeFrom),
+                timeTo: toStringOrUndefined(p.timeTo),
+            });
+            respond(true, result);
+        });
+        registerGateway('observability.security.config.get', async ({ respond }) => {
+            respond(true, { config: securityScanner.getConfig() });
+        });
+        registerGateway('observability.security.config.update', async ({ params, respond }) => {
+            const p = toRecord(params);
+            const next = securityScanner.updateConfig(p);
+            persistSecurityConfig(next);
+            respond(true, { config: next });
+        });
+        registerGateway('observability.metrics.overview', async ({ params, respond }) => {
+            const pool = writer.getPool();
+            if (!(config.metrics.enabled && typeof writer.writeMetricSamples === 'function')) {
+                respond(true, {
+                    enabled: false,
+                    otlpPath: config.metrics.otlpPath,
+                    totalMetrics: 0,
+                    totalSamples: 0,
+                    items: [],
+                    lastIngestAt: null,
+                    lastError: 'metrics.disabled',
+                });
+                return;
+            }
+            const p = toRecord(params);
+            const minutes = toInt(p.minutes, 60);
+            const limit = toInt(p.limit, 100);
+            const overview = await (0, api_1.getMetricsOverview)(pool, { minutes, limit });
+            respond(true, {
+                enabled: true,
+                otlpPath: config.metrics.otlpPath,
+                otlpMetricsEndpoint: `${config.metrics.otlpPath}/v1/metrics`,
+                ...overview,
+            });
+        });
+        registerGateway('observability.metrics.series', async ({ params, respond }) => {
+            const pool = writer.getPool();
+            const p = toRecord(params);
+            const metricName = toStringOrUndefined(p.metricName);
+            if (!metricName) {
+                respond(false, { error: 'metricName is required' });
+                return;
+            }
+            const minutes = toInt(p.minutes, 60);
+            const stepSec = toInt(p.stepSec, 30);
+            const result = await (0, api_1.getMetricSeries)(pool, { metricName, minutes, stepSec });
+            respond(true, result);
+        });
+        registerGateway('observability.logs', async ({ params, respond }) => {
+            const p = toRecord(params);
+            const { source, path: logPath } = resolveLogPath(p.source);
+            if (!logPath) {
+                respond(false, { error: `unsupported log source: ${String(p.source || '')}` });
+                return;
+            }
+            if (!fs.existsSync(logPath)) {
+                respond(false, { error: `log file not found: ${logPath}` });
+                return;
+            }
+            const limit = Math.min(toInt(p.limit, 200), 2000);
+            const search = toStringOrUndefined(p.search);
+            const sessionId = toStringOrUndefined(p.sessionId);
+            const caseSensitive = toBool(p.caseSensitive, false);
+            const beforeLine = Math.max(0, Number(p.beforeLine || 0));
+            const hasBefore = Number.isFinite(beforeLine) && beforeLine > 0;
+            const raw = fs.readFileSync(logPath, 'utf8');
+            const lines = raw.split(/\r?\n/);
+            const endExclusive = hasBefore ? Math.min(beforeLine, lines.length) : lines.length;
+            const filtered = [];
+            const needleRaw = (search || sessionId || '').trim();
+            const needle = caseSensitive ? needleRaw : needleRaw.toLowerCase();
+            for (let i = 0; i < endExclusive; i++) {
+                const lineText = lines[i] || '';
+                if (!lineText)
+                    continue;
+                if (needle) {
+                    const hay = caseSensitive ? lineText : lineText.toLowerCase();
+                    if (!hay.includes(needle))
+                        continue;
+                }
+                const tsMatch = lineText.match(/^(\d{4}-\d{2}-\d{2}T[^\s]+)/);
+                filtered.push({
+                    line: i + 1,
+                    text: lineText,
+                    timestamp: tsMatch ? tsMatch[1] : null,
+                });
+            }
+            const items = filtered.slice(Math.max(0, filtered.length - limit));
+            const nextBeforeLine = items.length > 0 ? items[0].line : 0;
+            respond(true, {
+                source,
+                path: logPath,
+                totalLines: lines.length,
+                totalMatched: filtered.length,
+                returned: items.length,
+                nextBeforeLine,
+                items,
+            });
+        });
+        console.log('[openclaw-observability] Gateway methods registered: observability.*');
+    }
+    else {
+        console.warn('[openclaw-observability] registerGatewayMethod not available — RPC observability.* disabled');
+    }
     // ====================== Helper functions ======================
     /** Record action, update session stats, and run security scan */
     function recordAction(action, tokens = 0) {