openclaw-observability 2026.3.26 → 2026.4.16

package/README.md

@@ -1,6 +1,6 @@
 # openclaw-observability
 
-Full-stack observability plugin for [OpenClaw](https://openclaw.ai) — automatically records every LLM call, tool invocation, and agent lifecycle event into a local DuckDB or remote MySQL database, with a built-in web dashboard for tracing, analytics, and security auditing.
+Full-stack observability plugin for [OpenClaw](https://openclaw.ai) — automatically records every LLM call, tool invocation, and agent lifecycle event into a local DuckDB or remote MySQL database, with a built-in web dashboard for tracing, analytics, and security monitoring.
 
 ## ✨ Features
 
@@ -144,9 +144,9 @@ Configure via OpenClaw Dashboard (Settings → Plugins → openclaw-observabilit
 
 The plugin automatically creates three tables:
 
-- **`audit_actions`** — Every recorded action (LLM call, tool invocation, etc.)
-- **`audit_sessions`** — Aggregated session summaries (auto-updated)
-- **`audit_alerts`** — Security alert records
+- **`observation_actions`** — Every recorded action (LLM call, tool invocation, etc.)
+- **`observation_sessions`** — Aggregated session summaries (auto-updated)
+- **`observation_alerts`** — Security alert records
 
 Schema is identical between DuckDB and MySQL backends.
 

package/dist/cloud/api-key-auth.d.ts

@@ -0,0 +1,6 @@
+import { QueryPool } from '../storage/writer';
+import { ApiKeyScope } from './types';
+export declare function authenticateCloudApiKey(pool: QueryPool, authorization: string | undefined, opts?: {
+    secretSalt?: string;
+}): Promise<ApiKeyScope>;
+//# sourceMappingURL=api-key-auth.d.ts.map

package/dist/cloud/api-key-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-auth.d.ts","sourceRoot":"","sources":["../../src/cloud/api-key-auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAwCtC,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,SAAS,EACf,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7B,OAAO,CAAC,WAAW,CAAC,CAsBtB"}

package/dist/cloud/api-key-auth.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authenticateCloudApiKey = authenticateCloudApiKey;
+const node_crypto_1 = require("node:crypto");
+function sha256(value) {
+    return (0, node_crypto_1.createHash)('sha256').update(value).digest('hex');
+}
+function parseAuth(authorization) {
+    const header = String(authorization || '').trim();
+    if (!header)
+        throw new Error('missing authorization header');
+    if (header.startsWith('Basic ')) {
+        const raw = Buffer.from(header.slice(6), 'base64').toString('utf8');
+        const i = raw.indexOf(':');
+        if (i <= 0)
+            throw new Error('invalid basic authorization format');
+        return {
+            publicKey: raw.slice(0, i),
+            secret: raw.slice(i + 1),
+        };
+    }
+    if (header.startsWith('Bearer ')) {
+        const raw = header.slice(7).trim();
+        const i = raw.indexOf('.');
+        if (i <= 0)
+            throw new Error('invalid bearer authorization format');
+        return {
+            publicKey: raw.slice(0, i),
+            secret: raw.slice(i + 1),
+        };
+    }
+    throw new Error('unsupported authorization scheme');
+}
+async function authenticateCloudApiKey(pool, authorization, opts) {
+    const { publicKey, secret } = parseAuth(authorization);
+    const hashed = sha256(`${secret}${opts?.secretSalt || ''}`);
+    const [rows] = await pool.query(`SELECT scope_id, hashed_secret_key, status, expires_at
+       FROM scope_api_keys
+      WHERE public_key = ?
+      LIMIT 1`, [publicKey]);
+    const row = (rows[0] || null);
+    if (!row)
+        throw new Error('api key not found');
+    if (String(row.status || '').toLowerCase() !== 'active')
+        throw new Error('api key is disabled');
+    if (row.expires_at && Date.parse(String(row.expires_at)) <= Date.now())
+        throw new Error('api key expired');
+    if (String(row.hashed_secret_key || '') !== hashed)
+        throw new Error('invalid api key secret');
+    return {
+        accessLevel: 'scope',
+        scopeId: row.scope_id,
+    };
+}
+//# sourceMappingURL=api-key-auth.js.map

package/dist/cloud/api-key-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-auth.js","sourceRoot":"","sources":["../../src/cloud/api-key-auth.ts"],"names":[],"mappings":";;AA0CA,0DA0BC;AApED,6CAAyC;AAWzC,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,SAAS,CAAC,aAAiC;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAE7D,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAClE,OAAO;YACL,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1B,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;SACzB,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACnE,OAAO;YACL,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1B,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;SACzB,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;AACtD,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAC3C,IAAe,EACf,aAAiC,EACjC,IAA8B;IAE9B,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC;IAE5D,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B;;;cAGU,EACV,CAAC,SAAS,CAAC,CACZ,CAAC;IAEF,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAqB,CAAC;IAClD,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAChG,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC3G,IAAI,MAAM,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAE9F,OAAO;QACL,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,GAAG,CAAC,QAAQ;KACtB,CAAC;AACJ,CAAC"}

package/dist/cloud/auth.d.ts

@@ -0,0 +1,11 @@
+import { CloudPrincipal } from './types';
+export interface HeaderAuthInput {
+    authorization?: string;
+    organizationId?: string;
+    projectId?: string;
+    environment?: string;
+    userId?: string;
+    role?: CloudPrincipal['role'];
+}
+export declare function resolvePrincipalFromHeaders(input: HeaderAuthInput): CloudPrincipal;
+//# sourceMappingURL=auth.d.ts.map

package/dist/cloud/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/cloud/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAc,MAAM,SAAS,CAAC;AAerD,MAAM,WAAW,eAAe;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;CAC/B;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,eAAe,GAAG,cAAc,CAiBlF"}

package/dist/cloud/auth.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolvePrincipalFromHeaders = resolvePrincipalFromHeaders;
+const ROLE_SCOPES = {
+    OWNER: [
+        'project:read', 'project:write', 'api-keys:read', 'api-keys:write',
+        'alerts:read', 'alerts:write', 'security-rules:read', 'security-rules:write', 'usage:read',
+    ],
+    ADMIN: [
+        'project:read', 'project:write', 'api-keys:read', 'alerts:read', 'alerts:write',
+        'security-rules:read', 'security-rules:write', 'usage:read',
+    ],
+    MEMBER: ['project:read', 'alerts:read', 'security-rules:read', 'usage:read'],
+    VIEWER: ['project:read', 'alerts:read', 'usage:read'],
+};
+function resolvePrincipalFromHeaders(input) {
+    const token = String(input.authorization || '');
+    if (!token.startsWith('Bearer ') || token.trim().length <= 10) {
+        throw new Error('unauthorized: missing bearer token');
+    }
+    const role = input.role || 'OWNER';
+    return {
+        principalId: input.userId || 'cloud-user',
+        role,
+        scopes: ROLE_SCOPES[role],
+        tenant: {
+            organizationId: input.organizationId || 'local',
+            projectId: input.projectId || 'default',
+            environment: input.environment || 'prod',
+        },
+    };
+}
+//# sourceMappingURL=auth.js.map

package/dist/cloud/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/cloud/auth.ts"],"names":[],"mappings":";;AAwBA,kEAiBC;AAvCD,MAAM,WAAW,GAAiD;IAChE,KAAK,EAAE;QACL,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB;QAClE,aAAa,EAAE,cAAc,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,YAAY;KAC3F;IACD,KAAK,EAAE;QACL,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc;QAC/E,qBAAqB,EAAE,sBAAsB,EAAE,YAAY;KAC5D;IACD,MAAM,EAAE,CAAC,cAAc,EAAE,aAAa,EAAE,qBAAqB,EAAE,YAAY,CAAC;IAC5E,MAAM,EAAE,CAAC,cAAc,EAAE,aAAa,EAAE,YAAY,CAAC;CACtD,CAAC;AAWF,SAAgB,2BAA2B,CAAC,KAAsB;IAChE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC;IACnC,OAAO;QACL,WAAW,EAAE,KAAK,CAAC,MAAM,IAAI,YAAY;QACzC,IAAI;QACJ,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC;QACzB,MAAM,EAAE;YACN,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,OAAO;YAC/C,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,SAAS;YACvC,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,MAAM;SACzC;KACF,CAAC;AACJ,CAAC"}

package/dist/cloud/contracts.d.ts

@@ -0,0 +1,26 @@
+import { ObservabilityAction } from '../types';
+import { CloudPrincipal, IngestionEnvelope, TenantContext } from './types';
+export interface CloudIngestionService {
+    authenticate(authorizationHeader: string | undefined): Promise<CloudPrincipal>;
+    ingest(batch: IngestionEnvelope[], principal: CloudPrincipal): Promise<{
+        accepted: number;
+        rejected: number;
+    }>;
+}
+export interface CloudExporter {
+    exportActions(actions: ObservabilityAction[], tenant: TenantContext): Promise<void>;
+}
+export interface CloudQueryScope {
+    tenant: TenantContext;
+    principal: CloudPrincipal;
+}
+export interface CloudAuthorizer {
+    requireScope(principal: CloudPrincipal, scope: string): void;
+}
+export declare class ScopeDeniedError extends Error {
+    constructor(scope: string);
+}
+export declare class DefaultCloudAuthorizer implements CloudAuthorizer {
+    requireScope(principal: CloudPrincipal, scope: string): void;
+}
+//# sourceMappingURL=contracts.d.ts.map

package/dist/cloud/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/cloud/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE3E,MAAM,WAAW,qBAAqB;IACpC,YAAY,CAAC,mBAAmB,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/E,MAAM,CAAC,KAAK,EAAE,iBAAiB,EAAE,EAAE,SAAS,EAAE,cAAc,GAAG,OAAO,CAAC;QACrE,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,CAAC,OAAO,EAAE,mBAAmB,EAAE,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrF;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,EAAE,cAAc,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,CAAC,SAAS,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9D;AAED,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,KAAK,EAAE,MAAM;CAI1B;AAED,qBAAa,sBAAuB,YAAW,eAAe;IAC5D,YAAY,CAAC,SAAS,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;CAK7D"}

package/dist/cloud/contracts.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DefaultCloudAuthorizer = exports.ScopeDeniedError = void 0;
+class ScopeDeniedError extends Error {
+    constructor(scope) {
+        super(`permission denied for scope: ${scope}`);
+        this.name = 'ScopeDeniedError';
+    }
+}
+exports.ScopeDeniedError = ScopeDeniedError;
+class DefaultCloudAuthorizer {
+    requireScope(principal, scope) {
+        if (!principal.scopes.includes(scope)) {
+            throw new ScopeDeniedError(scope);
+        }
+    }
+}
+exports.DefaultCloudAuthorizer = DefaultCloudAuthorizer;
+//# sourceMappingURL=contracts.js.map

package/dist/cloud/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../src/cloud/contracts.ts"],"names":[],"mappings":";;;AAwBA,MAAa,gBAAiB,SAAQ,KAAK;IACzC,YAAY,KAAa;QACvB,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AALD,4CAKC;AAED,MAAa,sBAAsB;IACjC,YAAY,CAAC,SAAyB,EAAE,KAAa;QACnD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAY,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;CACF;AAND,wDAMC"}

package/dist/cloud/index.d.ts

@@ -0,0 +1,5 @@
+export * from './types';
+export * from './contracts';
+export * from './auth';
+export * from './api-key-auth';
+//# sourceMappingURL=index.d.ts.map

package/dist/cloud/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cloud/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,QAAQ,CAAC;AACvB,cAAc,gBAAgB,CAAC"}

package/dist/cloud/index.js

@@ -0,0 +1,21 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./types"), exports);
+__exportStar(require("./contracts"), exports);
+__exportStar(require("./auth"), exports);
+__exportStar(require("./api-key-auth"), exports);
+//# sourceMappingURL=index.js.map

package/dist/cloud/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cloud/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAwB;AACxB,8CAA4B;AAC5B,yCAAuB;AACvB,iDAA+B"}

package/dist/cloud/types.d.ts

@@ -0,0 +1,29 @@
+export type CloudRole = 'OWNER' | 'ADMIN' | 'MEMBER' | 'VIEWER';
+export type CloudScope = 'project:read' | 'project:write' | 'api-keys:read' | 'api-keys:write' | 'alerts:read' | 'alerts:write' | 'security-rules:read' | 'security-rules:write' | 'usage:read';
+export interface TenantContext {
+    organizationId: string;
+    projectId: string;
+    environment: string;
+}
+export interface CloudPrincipal {
+    principalId: string;
+    role: CloudRole;
+    scopes: CloudScope[];
+    tenant: TenantContext;
+}
+export interface ApiKeyScope {
+    accessLevel: 'scope';
+    scopeId: string | null;
+}
+export interface IngestionEnvelope {
+    eventId: string;
+    idempotencyKey: string;
+    occurredAt: string;
+    source: string;
+    tenant: TenantContext;
+    sessionId?: string;
+    traceId?: string;
+    type: string;
+    payload: Record<string, unknown>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/cloud/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/cloud/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEhE,MAAM,MAAM,UAAU,GAClB,cAAc,GACd,eAAe,GACf,eAAe,GACf,gBAAgB,GAChB,aAAa,GACb,cAAc,GACd,qBAAqB,GACrB,sBAAsB,GACtB,YAAY,CAAC;AAEjB,MAAM,WAAW,aAAa;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC"}

package/dist/cloud/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/cloud/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/cloud/types.ts"],"names":[],"mappings":""}

package/dist/config.d.ts

@@ -65,13 +65,37 @@ export interface MetricsConfig {
     otlpPath: string;
     /** Max payload size for OTLP metrics requests */
     maxPayloadBytes: number;
+    /** Keep metrics data for at most N days (<=0 disables cleanup) */
+    retentionDays: number;
+}
+/** Cloud mode config */
+export interface CloudConfig {
+    enabled: boolean;
+    endpoint: string;
+    apiKey: string;
+    organizationId: string;
+    projectId: string;
+    environment: string;
+    batchMaxBytes: number;
+    flushIntervalMs: number;
 }
 /** Full plugin config */
-export interface AuditPluginConfig {
-    /** Storage mode: local (embedded, zero config) | remote (external MySQL) */
-    mode: 'local' | 'remote';
+export interface ObservabilityPluginConfig {
+    /** Storage mode: local (embedded, zero config) | remote (external MySQL) | cloud (export-only) */
+    mode: 'local' | 'remote' | 'cloud';
+    /** Delete observation/security/trace data older than N days during writer startup (<=0 disables cleanup) */
+    dataRetentionDays: number;
+    /** Tenant scope identifier used for writes and query defaults */
+    scopeId: string;
+    /** Secret token used to prove ownership of scopeId in shared remote DB */
+    scopeToken: string;
+    /** Optional compatibility fields kept for existing data model */
+    organizationId: string;
+    /** Optional environment marker */
+    environment: string;
     mysql: MySQLConfig;
     duckdb: DuckDBConfig;
+    cloud: CloudConfig;
     buffer: BufferConfig;
     redaction: RedactionConfig;
     security: SecurityPluginConfig;
@@ -82,6 +106,6 @@ export interface AuditPluginConfig {
  *  OpenClaw's hot-reload file watcher on the top-level ~/.openclaw/ dir */
 export declare const DEFAULT_DUCKDB_PATH: string;
 /** Default config */
-export declare const DEFAULT_CONFIG: AuditPluginConfig;
-export declare function resolveConfig(userConfig: Partial<AuditPluginConfig> | undefined): AuditPluginConfig;
+export declare const DEFAULT_CONFIG: ObservabilityPluginConfig;
+export declare function resolveConfig(userConfig: Partial<ObservabilityPluginConfig> | undefined): ObservabilityPluginConfig;
 //# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,8BAA8B;AAC9B,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,0BAA0B;AAC1B,MAAM,WAAW,YAAY;IAC3B,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,oBAAoB;AACpB,MAAM,WAAW,YAAY;IAC3B,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,uBAAuB;AACvB,MAAM,WAAW,eAAe;IAC9B,mCAAmC;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,sDAAsD;IACtD,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,gCAAgC;AAChC,MAAM,WAAW,oBAAoB;IACnC,gBAAgB,EAAE,KAAK,CAAC;QACtB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,QAAQ,CAAC;QACpB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC,CAAC;IACH,2CAA2C;IAC3C,OAAO,EAAE,OAAO,CAAC;IACjB,8BAA8B;IAC9B,KAAK,EAAE;QACL,aAAa,EAAE,OAAO,CAAC;QACvB,WAAW,EAAE,OAAO,CAAC;QACrB,gBAAgB,EAAE,OAAO,CAAC;QAC1B,eAAe,EAAE,OAAO,CAAC;QACzB,WAAW,EAAE,OAAO,CAAC;QACrB,cAAc,EAAE,OAAO,CAAC;KACzB,CAAC;IACF,sDAAsD;IACtD,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,sCAAsC;AACtC,MAAM,WAAW,QAAQ;IACvB,kGAAkG;IAClG,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,uCAAuC;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,8FAA8F;IAC9F,QAAQ,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,yBAAyB;AACzB,MAAM,WAAW,iBAAiB;IAChC,4EAA4E;IAC5E,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAC;IACzB,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,eAAe,CAAC;IAC3B,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,EAAE,CAAC,EAAE,QAAQ,CAAC;IACd,OAAO,EAAE,aAAa,CAAC;CACxB;AAED;2EAC2E;AAC3E,eAAO,MAAM,mBAAmB,QAE/B,CAAC;AAEF,qBAAqB;AACrB,eAAO,MAAM,cAAc,EAAE,iBAsD5B,CAAC;AAeF,wBAAgB,aAAa,CAC3B,UAAU,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,SAAS,GACjD,iBAAiB,CA2CnB"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,8BAA8B;AAC9B,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,0BAA0B;AAC1B,MAAM,WAAW,YAAY;IAC3B,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,oBAAoB;AACpB,MAAM,WAAW,YAAY;IAC3B,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,uBAAuB;AACvB,MAAM,WAAW,eAAe;IAC9B,mCAAmC;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,sDAAsD;IACtD,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,gCAAgC;AAChC,MAAM,WAAW,oBAAoB;IACnC,gBAAgB,EAAE,KAAK,CAAC;QACtB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,QAAQ,CAAC;QACpB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC,CAAC;IACH,2CAA2C;IAC3C,OAAO,EAAE,OAAO,CAAC;IACjB,8BAA8B;IAC9B,KAAK,EAAE;QACL,aAAa,EAAE,OAAO,CAAC;QACvB,WAAW,EAAE,OAAO,CAAC;QACrB,gBAAgB,EAAE,OAAO,CAAC;QAC1B,eAAe,EAAE,OAAO,CAAC;QACzB,WAAW,EAAE,OAAO,CAAC;QACrB,cAAc,EAAE,OAAO,CAAC;KACzB,CAAC;IACF,sDAAsD;IACtD,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,sCAAsC;AACtC,MAAM,WAAW,QAAQ;IACvB,kGAAkG;IAClG,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,uCAAuC;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,8FAA8F;IAC9F,QAAQ,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,eAAe,EAAE,MAAM,CAAC;IACxB,kEAAkE;IAClE,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,wBAAwB;AACxB,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,yBAAyB;AACzB,MAAM,WAAW,yBAAyB;IACxC,kGAAkG;IAClG,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;IACnC,4GAA4G;IAC5G,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAC;IACnB,iEAAiE;IACjE,cAAc,EAAE,MAAM,CAAC;IACvB,kCAAkC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,eAAe,CAAC;IAC3B,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,EAAE,CAAC,EAAE,QAAQ,CAAC;IACd,OAAO,EAAE,aAAa,CAAC;CACxB;AAED;2EAC2E;AAC3E,eAAO,MAAM,mBAAmB,QAE/B,CAAC;AAEF,qBAAqB;AACrB,eAAO,MAAM,cAAc,EAAE,yBAsE5B,CAAC;AAiBF,wBAAgB,aAAa,CAC3B,UAAU,EAAE,OAAO,CAAC,yBAAyB,CAAC,GAAG,SAAS,GACzD,yBAAyB,CAsD3B"}

package/dist/config.js

@@ -46,6 +46,11 @@ exports.DEFAULT_DUCKDB_PATH = path.join(os.homedir(), '.openclaw', 'data', 'obse
 /** Default config */
 exports.DEFAULT_CONFIG = {
     mode: 'local', // default: local DuckDB, zero config
+    dataRetentionDays: 30,
+    scopeId: 'local',
+    scopeToken: '',
+    organizationId: 'local',
+    environment: 'prod',
     mysql: {
         host: 'localhost',
         port: 3306,
@@ -56,6 +61,16 @@ exports.DEFAULT_CONFIG = {
     duckdb: {
         path: exports.DEFAULT_DUCKDB_PATH,
     },
+    cloud: {
+        enabled: false,
+        endpoint: '',
+        apiKey: '',
+        organizationId: 'local',
+        projectId: 'default',
+        environment: 'prod',
+        batchMaxBytes: 512 * 1024,
+        flushIntervalMs: 2000,
+    },
     buffer: {
         batchSize: 50,
         flushIntervalMs: 5000,
@@ -97,17 +112,21 @@ exports.DEFAULT_CONFIG = {
         enabled: true,
         otlpPath: '/plugins/observability/api/otel',
         maxPayloadBytes: 2 * 1024 * 1024,
+        retentionDays: 30,
     },
 };
 /**
  * Smart mode inference:
  *  - User explicitly specified -> use user value
+ *  - cloud.enabled=true -> cloud mode
  *  - Not specified but valid MySQL config provided -> auto-switch to remote
  *  - Otherwise -> local (zero config)
  */
 function inferMode(userConfig) {
     if (userConfig.mode)
         return userConfig.mode;
+    if (userConfig.cloud?.enabled)
+        return 'cloud';
     const m = userConfig.mysql;
     if (m && m.host && m.host !== 'localhost' && m.password)
         return 'remote';
@@ -119,6 +138,13 @@ function resolveConfig(userConfig) {
     }
     return {
         mode: inferMode(userConfig),
+        dataRetentionDays: Number.isFinite(Number(userConfig.dataRetentionDays))
+            ? Math.max(0, Math.floor(Number(userConfig.dataRetentionDays)))
+            : exports.DEFAULT_CONFIG.dataRetentionDays,
+        scopeId: String((userConfig.scopeId ?? exports.DEFAULT_CONFIG.scopeId) || 'local'),
+        scopeToken: String((userConfig.scopeToken ?? exports.DEFAULT_CONFIG.scopeToken) || ''),
+        organizationId: String((userConfig.organizationId ?? exports.DEFAULT_CONFIG.organizationId) || 'local'),
+        environment: String((userConfig.environment ?? exports.DEFAULT_CONFIG.environment) || 'prod'),
         mysql: {
             ...exports.DEFAULT_CONFIG.mysql,
             ...userConfig.mysql,
@@ -127,6 +153,10 @@ function resolveConfig(userConfig) {
             ...exports.DEFAULT_CONFIG.duckdb,
             ...userConfig.duckdb,
         },
+        cloud: {
+            ...exports.DEFAULT_CONFIG.cloud,
+            ...userConfig.cloud,
+        },
         buffer: {
             ...exports.DEFAULT_CONFIG.buffer,
             ...userConfig.buffer,

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsKH,sCA6CC;AAjND,2CAA6B;AAC7B,uCAAyB;AAuFzB;2EAC2E;AAC9D,QAAA,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAC1C,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,sBAAsB,CAC1D,CAAC;AAEF,qBAAqB;AACR,QAAA,cAAc,GAAsB;IAC/C,IAAI,EAAE,OAAO,EAAG,qCAAqC;IACrD,KAAK,EAAE;QACL,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,wBAAwB;KACnC;IACD,MAAM,EAAE;QACN,IAAI,EAAE,2BAAmB;KAC1B;IACD,MAAM,EAAE;QACN,SAAS,EAAE,EAAE;QACb,eAAe,EAAE,IAAI;KACtB;IACD,SAAS,EAAE;QACT,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE;YACR,SAAS;YACT,gBAAgB;YAChB,UAAU;YACV,QAAQ;YACR,cAAc;YACd,YAAY;YACZ,eAAe;YACf,cAAc;YACd,eAAe;YACf,YAAY;YACZ,YAAY;YACZ,eAAe;YACf,aAAa;YACb,YAAY;SACb;KACF;IACD,QAAQ,EAAE;QACR,gBAAgB,EAAE,EAAE;QACpB,OAAO,EAAE,IAAI;QACb,KAAK,EAAE;YACL,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,IAAI;YACjB,gBAAgB,EAAE,KAAK;YACvB,eAAe,EAAE,KAAK;YACtB,WAAW,EAAE,KAAK;YAClB,cAAc,EAAE,KAAK;SACtB;QACD,eAAe,EAAE,EAAE;KACpB;IACD,EAAE,EAAE,EAAE;IACN,OAAO,EAAE;QACP,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,iCAAiC;QAC3C,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;KACjC;CACF,CAAC;AAEF;;;;;GAKG;AACH,SAAS,SAAS,CAAC,UAAsC;IACvD,IAAI,UAAU,CAAC,IAAI;QAAE,OAAO,UAAU,CAAC,IAAI,CAAC;IAC5C,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;IAC3B,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACzE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAgB,aAAa,CAC3B,UAAkD;IAElD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,GAAG,sBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC;QAC3B,KAAK,EAAE;YACL,GAAG,sBAAc,CAAC,KAAK;YACvB,GAAG,UAAU,CAAC,KAAK;SACpB;QACD,MAAM,EAAE;YACN,GAAG,sBAAc,CAAC,MAAM;YACxB,GAAG,UAAU,CAAC,MAAM;SACrB;QACD,MAAM,EAAE;YACN,GAAG,sBAAc,CAAC,MAAM;YACxB,GAAG,UAAU,CAAC,MAAM;SACrB;QACD,SAAS,EAAE;YACT,GAAG,sBAAc,CAAC,SAAS;YAC3B,GAAG,UAAU,CAAC,SAAS;YACvB,QAAQ,EAAE,UAAU,CAAC,SAAS,EAAE,QAAQ,IAAI,sBAAc,CAAC,SAAS,CAAC,QAAQ;SAC9E;QACD,QAAQ,EAAE;YACR,GAAG,sBAAc,CAAC,QAAQ;YAC1B,GAAG,UAAU,CAAC,QAAQ;YACtB,KAAK,EAAE;gBACL,GAAG,sBAAc,CAAC,QAAQ,CAAC,KAAK;gBAChC,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC;aAChC;YACD,gBAAgB,EAAE,UAAU,CAAC,QAAQ,EAAE,gBAAgB,IAAI,sBAAc,CAAC,QAAQ,CAAC,gBAAgB;YACnG,eAAe,EAAE,UAAU,CAAC,QAAQ,EAAE,eAAe,IAAI,sBAAc,CAAC,QAAQ,CAAC,eAAe;SACjG;QACD,EAAE,EAAE;YACF,GAAG,sBAAc,CAAC,EAAE;YACpB,GAAG,UAAU,CAAC,EAAE;SACjB;QACD,OAAO,EAAE;YACP,GAAG,sBAAc,CAAC,OAAO;YACzB,GAAG,UAAU,CAAC,OAAO;SACtB;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiNH,sCAwDC;AAvQD,2CAA6B;AAC7B,uCAAyB;AAgHzB;2EAC2E;AAC9D,QAAA,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAC1C,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,sBAAsB,CAC1D,CAAC;AAEF,qBAAqB;AACR,QAAA,cAAc,GAA8B;IACvD,IAAI,EAAE,OAAO,EAAG,qCAAqC;IACrD,iBAAiB,EAAE,EAAE;IACrB,OAAO,EAAE,OAAO;IAChB,UAAU,EAAE,EAAE;IACd,cAAc,EAAE,OAAO;IACvB,WAAW,EAAE,MAAM;IACnB,KAAK,EAAE;QACL,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,wBAAwB;KACnC;IACD,MAAM,EAAE;QACN,IAAI,EAAE,2BAAmB;KAC1B;IACD,KAAK,EAAE;QACL,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE,EAAE;QACV,cAAc,EAAE,OAAO;QACvB,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,MAAM;QACnB,aAAa,EAAE,GAAG,GAAG,IAAI;QACzB,eAAe,EAAE,IAAI;KACtB;IACD,MAAM,EAAE;QACN,SAAS,EAAE,EAAE;QACb,eAAe,EAAE,IAAI;KACtB;IACD,SAAS,EAAE;QACT,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE;YACR,SAAS;YACT,gBAAgB;YAChB,UAAU;YACV,QAAQ;YACR,cAAc;YACd,YAAY;YACZ,eAAe;YACf,cAAc;YACd,eAAe;YACf,YAAY;YACZ,YAAY;YACZ,eAAe;YACf,aAAa;YACb,YAAY;SACb;KACF;IACD,QAAQ,EAAE;QACR,gBAAgB,EAAE,EAAE;QACpB,OAAO,EAAE,IAAI;QACb,KAAK,EAAE;YACL,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,IAAI;YACjB,gBAAgB,EAAE,KAAK;YACvB,eAAe,EAAE,KAAK;YACtB,WAAW,EAAE,KAAK;YAClB,cAAc,EAAE,KAAK;SACtB;QACD,eAAe,EAAE,EAAE;KACpB;IACD,EAAE,EAAE,EAAE;IACN,OAAO,EAAE;QACP,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,iCAAiC;QAC3C,eAAe,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;QAChC,aAAa,EAAE,EAAE;KAClB;CACF,CAAC;AAEF;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,UAA8C;IAC/D,IAAI,UAAU,CAAC,IAAI;QAAE,OAAO,UAAU,CAAC,IAAI,CAAC;IAC5C,IAAI,UAAU,CAAC,KAAK,EAAE,OAAO;QAAE,OAAO,OAAO,CAAC;IAC9C,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;IAC3B,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACzE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAgB,aAAa,CAC3B,UAA0D;IAE1D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,GAAG,sBAAc,EAAE,CAAC;IAC/B,CAAC;IAED,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC;QAC3B,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAE,UAAkB,CAAC,iBAAiB,CAAC,CAAC;YAC/E,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAE,UAAkB,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACxE,CAAC,CAAC,sBAAc,CAAC,iBAAiB;QACpC,OAAO,EAAE,MAAM,CAAC,CAAE,UAAkB,CAAC,OAAO,IAAI,sBAAc,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC;QACnF,UAAU,EAAE,MAAM,CAAC,CAAE,UAAkB,CAAC,UAAU,IAAI,sBAAc,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACvF,cAAc,EAAE,MAAM,CAAC,CAAE,UAAkB,CAAC,cAAc,IAAI,sBAAc,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC;QACxG,WAAW,EAAE,MAAM,CAAC,CAAE,UAAkB,CAAC,WAAW,IAAI,sBAAc,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC;QAC9F,KAAK,EAAE;YACL,GAAG,sBAAc,CAAC,KAAK;YACvB,GAAG,UAAU,CAAC,KAAK;SACpB;QACD,MAAM,EAAE;YACN,GAAG,sBAAc,CAAC,MAAM;YACxB,GAAG,UAAU,CAAC,MAAM;SACrB;QACD,KAAK,EAAE;YACL,GAAG,sBAAc,CAAC,KAAK;YACvB,GAAG,UAAU,CAAC,KAAK;SACpB;QACD,MAAM,EAAE;YACN,GAAG,sBAAc,CAAC,MAAM;YACxB,GAAG,UAAU,CAAC,MAAM;SACrB;QACD,SAAS,EAAE;YACT,GAAG,sBAAc,CAAC,SAAS;YAC3B,GAAG,UAAU,CAAC,SAAS;YACvB,QAAQ,EAAE,UAAU,CAAC,SAAS,EAAE,QAAQ,IAAI,sBAAc,CAAC,SAAS,CAAC,QAAQ;SAC9E;QACD,QAAQ,EAAE;YACR,GAAG,sBAAc,CAAC,QAAQ;YAC1B,GAAG,UAAU,CAAC,QAAQ;YACtB,KAAK,EAAE;gBACL,GAAG,sBAAc,CAAC,QAAQ,CAAC,KAAK;gBAChC,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC;aAChC;YACD,gBAAgB,EAAE,UAAU,CAAC,QAAQ,EAAE,gBAAgB,IAAI,sBAAc,CAAC,QAAQ,CAAC,gBAAgB;YACnG,eAAe,EAAE,UAAU,CAAC,QAAQ,EAAE,eAAe,IAAI,sBAAc,CAAC,QAAQ,CAAC,eAAe;SACjG;QACD,EAAE,EAAE;YACF,GAAG,sBAAc,CAAC,EAAE;YACpB,GAAG,UAAU,CAAC,EAAE;SACjB;QACD,OAAO,EAAE;YACP,GAAG,sBAAc,CAAC,OAAO;YACzB,GAAG,UAAU,CAAC,OAAO;SACtB;KACF,CAAC;AACJ,CAAC"}

package/dist/gateway/register-observability-gateway.d.ts

@@ -1,15 +1,17 @@
-import { AuditPluginConfig } from '../config';
+import { ObservabilityPluginConfig } from '../config';
 import { SecurityConfig, SecurityScanner } from '../security/scanner';
-import { AuditWriter } from '../storage/writer';
+import { ObservabilityWriter } from '../storage/writer';
 export declare function registerObservabilityGatewayMethods(params: {
     registerGatewayMethod: (method: string, handler: (ctx: {
         params?: unknown;
         respond: (ok: boolean, payload: unknown) => void;
         [key: string]: unknown;
     }) => void | Promise<void>) => void;
-    writer: AuditWriter;
-    config: AuditPluginConfig;
+    writer: ObservabilityWriter;
+    config: ObservabilityPluginConfig;
     securityScanner: SecurityScanner;
     persistSecurityConfig: (next: SecurityConfig) => void;
+    openclawConfigPath: string;
+    runtime?: unknown;
 }): void;
 //# sourceMappingURL=register-observability-gateway.d.ts.map

package/dist/gateway/register-observability-gateway.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register-observability-gateway.d.ts","sourceRoot":"","sources":["../../src/gateway/register-observability-gateway.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAgBhD,wBAAgB,mCAAmC,CAAC,MAAM,EAAE;IAC1D,qBAAqB,EAAE,CACrB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,CAAC,GAAG,EAAE;QACb,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;QACjD,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KACvB,IAAI,CAAC;IACV,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,eAAe,EAAE,eAAe,CAAC;IACjC,qBAAqB,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,IAAI,CAAC;CACvD,GAAG,IAAI,CA6WP"}
+{"version":3,"file":"register-observability-gateway.d.ts","sourceRoot":"","sources":["../../src/gateway/register-observability-gateway.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAqBxD,wBAAgB,mCAAmC,CAAC,MAAM,EAAE;IAC1D,qBAAqB,EAAE,CACrB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,CAAC,GAAG,EAAE;QACb,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;QACjD,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KACvB,IAAI,CAAC;IACV,MAAM,EAAE,mBAAmB,CAAC;IAC5B,MAAM,EAAE,yBAAyB,CAAC;IAClC,eAAe,EAAE,eAAe,CAAC;IACjC,qBAAqB,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,IAAI,CAAC;IACtD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,GAAG,IAAI,CA2fP"}