openclaw/dist/audit-context-BhaUNEDP.mjs

Multi-channel AI gateway with extensible messaging integrations

import { n as appendRegularFile } from "./fs-safe-BUXBSN-4.mjs";
import "./security-runtime-Cl_Gnohk.mjs";
import path from "node:path";
import fs from "node:fs/promises";
import os from "node:os";
//#region extensions/file-transfer/src/shared/audit.ts
let auditDirPromise = null;
async function ensureAuditDir() {
	if (auditDirPromise) return auditDirPromise;
	const promise = (async () => {
		const dir = path.join(os.homedir(), ".openclaw", "audit");
		await fs.mkdir(dir, {
			recursive: true,
			mode: 448
		});
		return dir;
	})();
	promise.catch(() => {
		if (auditDirPromise === promise) auditDirPromise = null;
	});
	auditDirPromise = promise;
	return promise;
}
function auditFilePath(dir) {
	return path.join(dir, "file-transfer.jsonl");
}
/**
* Append an audit record. Best-effort — failures are logged through console capture and
* never propagated to the caller (the caller's operation is the source of
* truth, not the audit write).
*/
async function appendFileTransferAudit(record) {
	try {
		const dir = await ensureAuditDir();
		const line = `${JSON.stringify({
			timestamp: (/* @__PURE__ */ new Date()).toISOString(),
			...record
		})}\n`;
		await appendRegularFile({
			filePath: auditFilePath(dir),
			content: line,
			rejectSymlinkParents: true
		});
	} catch (e) {
		console.warn(`[file-transfer:audit] append failed: ${String(e)}`);
	}
}
//#endregion
//#region extensions/file-transfer/src/shared/audit-context.ts
/** Keep one transfer's identity and original start time across its decision records. */
function bindFileTransferAudit(identity, startedAt) {
	return (record) => appendFileTransferAudit({
		...identity,
		...record,
		durationMs: Date.now() - startedAt
	});
}
//#endregion
export { appendFileTransferAudit as n, bindFileTransferAudit as t };