Files
openclaw/src/trajectory/runtime.ts
Josh Lehman 0a8e3604ba refactor: flip sessions and transcripts to sqlite storage (#98236)
* refactor(sessions): migrate runtime storage to sqlite

* test(sessions): fix sqlite CI regressions

* test(sessions): align remaining sqlite fixtures

* fix(codex): require sqlite trajectory recorder

* test(sessions): align orphan recovery sqlite fixture

* test(sessions): align sqlite rebase fixtures

* fix(sessions): finish current-main integration of the sqlite flip

Resolve the whole-store SDK removal across its owner boundary: drop the
loadSessionStore re-export and the registry whole-store wrappers, wire
hasTrackedActiveSessionRun into gateway chat, complete the
preserveLockedHarnessIds cleanup contract, flip the codex thread-history
import to storePath targets, and port remaining main-side tests from
file-store helpers to session accessor reads.

* chore: drop committed pebbles log, revert plugin-inspector bump, refresh generated docs

Remove the 1.8k-line .pebbles/events.jsonl work log from the branch, restore
the plugin-inspector advisory lane to main's pinned 0.3.10 so the supply-chain
bump gets its own review, and regenerate docs_map, the plugin SDK API baseline,
and the export-surface ratchet for the merged tree.

* feat(sessions): keep archived transcripts by default with zstd cold storage

Codex-style retention: deleting or resetting a session archives its
transcript as a zstd-compressed JSONL artifact (plain when the runtime
lacks node:zlib zstd) and keeps it until the disk budget evicts oldest
first. resetArchiveRetention now governs both deleted and reset archives
and defaults to keep; maxDiskBytes defaults to 2gb so retention stays
bounded, with archives evicted before live sessions. The cron reaper
follows the same knob instead of deleting archives on its own timer.

* fix(state): converge agent DB migration lineages and bound database growth

Merge coherence: run both structure-gated legacy memory-schema repairs
(flip-lineage drop, main-lineage identity rebuild) before the flip
migration so pre-flip v1/v2 and pre-merge flip v1/v4 databases all
converge, and hoist foreign_keys=OFF outside the schema transaction
where the pragma was silently ignored and the v1 sessions rebuild
cascade-deleted session_entries.

Growth guards: fresh agent DBs enable auto_vacuum=INCREMENTAL, WAL
maintenance releases freed pages in bounded passes (never a blocking
full VACUUM), and doctor reports state/agent DB bloat from freelist
stats.

* fix(codex): resolve the store path for thread-history import via the SDK

The supervision catalog passed the legacy sessionFile locator to the
storePath-targeted transcript mirror; resolve the agent store path with
the session-store SDK helper instead of a runtime-object seam so test
fakes and headless callers need no extra surface. Drop the obsolete
missing-session-id preprocessing case: sessions rows are NOT NULL on
session_id and upsert repairs id-less patches at write time.

* fix(sessions): fail safe on malformed disk-budget config and doctor stat errors

A malformed explicit maxDiskBytes disables the budget instead of
falling back to the destructive 2gb default the user never chose, and
the doctor bloat check skips databases whose paths stat-fail instead of
aborting doctor.

* fix(sessions): complete sqlite conflict translations

* test(sqlite): align hardening checks with maintenance

* test(sessions): inspect compressed transcript archives

* fix(tests): await session seeds and drop unused helpers flagged by CI lint

The five unawaited writeSessionStoreSeed calls raced their SQLite seeds
against the assertions, failing compact shards; the bloat probe drops a
useless initializer and the merged tests drop now-unused helpers.

* test(sessions): type legacy proof events directly

* test(sessions): align hardening contracts

* perf(sessions): read usage transcript sizes from SQL aggregates

Usage/cost scans walked every session and materialized every transcript
event just to re-stringify it for a byte estimate — the #86718 stall
class reborn on the DB. readTranscriptStatsSync sums stored JSON bytes
in SQLite without loading a single row.

* fix(sessions): re-root foreign-root transcript paths onto the current sessions dir

Restored backups, moved OPENCLAW_STATE_DIR, and rehearsal copies carry
absolute sessionFile paths from the old root; the containment fallback
kept those foreign paths, so migration read (and would archive) files in
the original root and reported local copies missing. Re-root the
canonical agents/<id>/sessions suffix onto the current dir when the file
exists there; genuine cross-root layouts still fall through unchanged.

* test(agents): seed harness admission through sqlite

* fix(sqlite): close agent db on pragma setup failure

* fix(doctor): compact and retrofit incremental auto-vacuum after session import

The migration is the sanctioned offline window: post-import compact
reclaims import churn and applies auto_vacuum=INCREMENTAL to databases
created before the fresh-DB pragma existed, so runtime maintenance can
release pages in bounded passes on every install.

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-07-11 14:50:37 -07:00

370 lines
11 KiB
TypeScript

// Trajectory runtime records bounded session events into SQLite-backed storage.
import { sanitizeDiagnosticPayload } from "../agents/payload-redaction.js";
import type {
QueuedFileWriter,
QueuedFileWriterDiagnostics,
} from "../agents/queued-file-writer.js";
import { parseSqliteSessionFileMarker } from "../config/sessions/sqlite-marker.js";
import type { OpenClawConfig } from "../config/types.openclaw.js";
import { redactSecrets } from "../logging/redact.js";
import { parseBooleanValue } from "../utils/boolean.js";
import { safeJsonStringify } from "../utils/safe-json.js";
import {
TRAJECTORY_RUNTIME_CAPTURE_MAX_BYTES,
TRAJECTORY_RUNTIME_EVENT_MAX_BYTES,
} from "./paths.js";
import { appendSqliteTrajectoryRuntimeEvents } from "./runtime-store.sqlite.js";
import type { TrajectoryEvent, TrajectoryToolDefinition } from "./types.js";
type TrajectoryRuntimeInit = {
cfg?: OpenClawConfig;
env?: NodeJS.ProcessEnv;
maxRuntimeFileBytes?: number;
runId?: string;
sessionId: string;
sessionKey?: string;
sessionFile?: string;
provider?: string;
modelId?: string;
modelApi?: string | null;
workspaceDir?: string;
writer?: TrajectoryRuntimeWriter;
};
type TrajectoryRuntimeRecorder = {
enabled: true;
recordEvent: (type: string, data?: Record<string, unknown>) => void;
flush: () => Promise<void>;
describeFlushState: () => string | undefined;
};
const TRAJECTORY_RUNTIME_DATA_STRING_MAX_CHARS = 32_768;
const TRAJECTORY_RUNTIME_DATA_ARRAY_MAX_ITEMS = 64;
const TRAJECTORY_RUNTIME_DATA_OBJECT_MAX_KEYS = 64;
const TRAJECTORY_RUNTIME_DATA_MAX_DEPTH = 6;
const TRAJECTORY_RUNTIME_OVERSIZE_PRESERVED_DATA_KEYS = ["usage", "promptCache"] as const;
type TrajectoryRuntimeWriterDiagnostics = QueuedFileWriterDiagnostics;
type TrajectoryRuntimeWriter = Omit<QueuedFileWriter, "describeQueue"> & {
describeQueue?: () => TrajectoryRuntimeWriterDiagnostics;
nextSourceSeq?: () => number;
};
type TrajectoryRuntimeSink = {
describeFlushState: () => string | undefined;
flush: () => Promise<void>;
nextSourceSeq?: () => number;
write: (event: TrajectoryEvent, line: string) => void;
};
function truncateOversizedTrajectoryEvent(
event: TrajectoryEvent,
line: string,
): string | undefined {
const bytes = Buffer.byteLength(line, "utf8");
if (bytes <= TRAJECTORY_RUNTIME_EVENT_MAX_BYTES) {
return line;
}
const originalData = event.data ?? {};
const originalDataKeys = Object.keys(originalData);
const preservedDataKeys = new Set<string>();
const baseData = {
truncated: true,
originalBytes: bytes,
limitBytes: TRAJECTORY_RUNTIME_EVENT_MAX_BYTES,
reason: "trajectory-event-size-limit",
};
const buildTruncatedEventLine = (includeDroppedFields: boolean): string | undefined => {
const data: Record<string, unknown> = { ...baseData };
for (const key of TRAJECTORY_RUNTIME_OVERSIZE_PRESERVED_DATA_KEYS) {
if (preservedDataKeys.has(key)) {
data[key] = originalData[key];
}
}
if (includeDroppedFields) {
const droppedFields = originalDataKeys.filter((key) => !preservedDataKeys.has(key));
if (droppedFields.length > 0) {
data.droppedFields = droppedFields;
}
}
const truncated = safeJsonStringify({ ...event, data });
if (truncated && Buffer.byteLength(truncated, "utf8") <= TRAJECTORY_RUNTIME_EVENT_MAX_BYTES) {
return truncated;
}
return undefined;
};
let best = buildTruncatedEventLine(true) ?? buildTruncatedEventLine(false);
if (!best) {
return undefined;
}
for (const key of TRAJECTORY_RUNTIME_OVERSIZE_PRESERVED_DATA_KEYS) {
if (!Object.hasOwn(originalData, key)) {
continue;
}
preservedDataKeys.add(key);
const next = buildTruncatedEventLine(true) ?? buildTruncatedEventLine(false);
if (next) {
best = next;
continue;
}
preservedDataKeys.delete(key);
}
return best;
}
function truncatedTrajectoryValue(reason: string, details: Record<string, unknown> = {}): unknown {
return {
truncated: true,
reason,
...details,
};
}
function limitTrajectoryPayloadValue(
value: unknown,
depth = 0,
seen: WeakSet<object> = new WeakSet(),
): unknown {
if (typeof value === "string") {
if (value.length > TRAJECTORY_RUNTIME_DATA_STRING_MAX_CHARS) {
return truncatedTrajectoryValue("trajectory-field-size-limit", {
originalChars: value.length,
limitChars: TRAJECTORY_RUNTIME_DATA_STRING_MAX_CHARS,
});
}
return value;
}
if (typeof value !== "object" || value === null) {
return value;
}
if (seen.has(value)) {
return truncatedTrajectoryValue("trajectory-circular-reference");
}
if (depth >= TRAJECTORY_RUNTIME_DATA_MAX_DEPTH) {
return truncatedTrajectoryValue("trajectory-depth-limit", {
limitDepth: TRAJECTORY_RUNTIME_DATA_MAX_DEPTH,
});
}
seen.add(value);
if (Array.isArray(value)) {
const limited = value
.slice(0, TRAJECTORY_RUNTIME_DATA_ARRAY_MAX_ITEMS)
.map((item) => limitTrajectoryPayloadValue(item, depth + 1, seen));
if (value.length > TRAJECTORY_RUNTIME_DATA_ARRAY_MAX_ITEMS) {
limited.push(
truncatedTrajectoryValue("trajectory-array-size-limit", {
originalLength: value.length,
limitItems: TRAJECTORY_RUNTIME_DATA_ARRAY_MAX_ITEMS,
}),
);
}
seen.delete(value);
return limited;
}
const record = value as Record<string, unknown>;
const keys = Object.keys(record);
const limited: Record<string, unknown> = {};
for (const key of keys.slice(0, TRAJECTORY_RUNTIME_DATA_OBJECT_MAX_KEYS)) {
limited[key] = limitTrajectoryPayloadValue(record[key], depth + 1, seen);
}
if (keys.length > TRAJECTORY_RUNTIME_DATA_OBJECT_MAX_KEYS) {
limited["_truncated"] = truncatedTrajectoryValue("trajectory-object-size-limit", {
originalKeys: keys.length,
limitKeys: TRAJECTORY_RUNTIME_DATA_OBJECT_MAX_KEYS,
});
}
seen.delete(value);
return limited;
}
function sanitizeTrajectoryPayload(data: Record<string, unknown>): Record<string, unknown> {
return redactSecrets(sanitizeDiagnosticPayload(limitTrajectoryPayloadValue(data))) as Record<
string,
unknown
>;
}
function describeTrajectoryWriterFlushState(writer: TrajectoryRuntimeWriter): string | undefined {
const diagnostics = writer.describeQueue?.();
if (!diagnostics) {
return undefined;
}
const parts = [
`pendingWrites=${diagnostics.pendingWrites}`,
`queuedBytes=${diagnostics.queuedBytes}`,
`activeOperation=${diagnostics.activeOperation}`,
`yieldBeforeWrite=${diagnostics.yieldBeforeWrite}`,
];
if (diagnostics.activeWriteBytes !== undefined) {
parts.push(`activeWriteBytes=${diagnostics.activeWriteBytes}`);
}
if (diagnostics.maxQueuedBytes !== undefined) {
parts.push(`maxQueuedBytes=${diagnostics.maxQueuedBytes}`);
}
if (diagnostics.maxFileBytes !== undefined) {
parts.push(`maxFileBytes=${diagnostics.maxFileBytes}`);
}
return parts.join(" ");
}
function createFileTrajectoryRuntimeSink(writer: TrajectoryRuntimeWriter): TrajectoryRuntimeSink {
return {
describeFlushState: () => describeTrajectoryWriterFlushState(writer),
flush: async () => {
await writer.flush();
},
nextSourceSeq: writer.nextSourceSeq,
write: (_event, line) => {
writer.write(`${line}\n`);
},
};
}
function createSqliteTrajectoryRuntimeSink(params: {
env: NodeJS.ProcessEnv;
maxRuntimeFileBytes: number;
sessionFile?: string;
sessionId: string;
}): TrajectoryRuntimeSink | null {
const marker = parseSqliteSessionFileMarker(params.sessionFile);
if (!marker || marker.sessionId !== params.sessionId) {
return null;
}
let pendingEvents: TrajectoryEvent[] = [];
let queuedBytes = 0;
return {
describeFlushState: () =>
pendingEvents.length > 0
? `pendingRows=${pendingEvents.length} queuedBytes=${queuedBytes} activeOperation=sqlite-append`
: undefined,
flush: async () => {
if (pendingEvents.length === 0) {
return;
}
const events = pendingEvents;
pendingEvents = [];
queuedBytes = 0;
appendSqliteTrajectoryRuntimeEvents(
{
agentId: marker.agentId,
env: params.env,
maxRuntimeBytes: params.maxRuntimeFileBytes,
sessionId: marker.sessionId,
storePath: marker.storePath,
},
events,
);
},
write: (event, line) => {
pendingEvents.push(event);
queuedBytes += Buffer.byteLength(line, "utf8") + 1;
},
};
}
export function toTrajectoryToolDefinitions(
tools: ReadonlyArray<{ name?: string; description?: string; parameters?: unknown }>,
): TrajectoryToolDefinition[] {
return tools
.flatMap((tool) => {
const name = tool.name?.trim();
if (!name) {
return [];
}
return [
{
name,
description: tool.description,
parameters: sanitizeDiagnosticPayload(limitTrajectoryPayloadValue(tool.parameters)),
},
];
})
.toSorted((left, right) => left.name.localeCompare(right.name));
}
export function createTrajectoryRuntimeRecorder(
params: TrajectoryRuntimeInit,
): TrajectoryRuntimeRecorder | null {
const env = params.env ?? process.env;
// Trajectory capture is now default-on. The env var remains as an explicit
// override so operators can still disable recording with OPENCLAW_TRAJECTORY=0.
const enabled = parseBooleanValue(env.OPENCLAW_TRAJECTORY) ?? true;
if (!enabled) {
return null;
}
const maxRuntimeFileBytes = Math.max(
1,
Math.floor(params.maxRuntimeFileBytes ?? TRAJECTORY_RUNTIME_CAPTURE_MAX_BYTES),
);
const sink = params.writer
? createFileTrajectoryRuntimeSink(params.writer)
: createSqliteTrajectoryRuntimeSink({
env,
maxRuntimeFileBytes,
sessionFile: params.sessionFile,
sessionId: params.sessionId,
});
if (!sink) {
return null;
}
let seq = 0;
const traceId = params.sessionId;
const buildEvent = (
type: string,
data?: Record<string, unknown>,
): { event: TrajectoryEvent; line: string } | undefined => {
const nextSeq = seq + 1;
const sourceSeq = sink.nextSourceSeq?.() ?? nextSeq;
const event: TrajectoryEvent = {
traceSchema: "openclaw-trajectory",
schemaVersion: 1,
traceId,
source: "runtime",
type,
ts: new Date().toISOString(),
seq: nextSeq,
sourceSeq,
sessionId: params.sessionId,
sessionKey: params.sessionKey,
runId: params.runId,
workspaceDir: params.workspaceDir,
provider: params.provider,
modelId: params.modelId,
modelApi: params.modelApi,
data: data ? sanitizeTrajectoryPayload(data) : undefined,
};
const line = safeJsonStringify(event);
if (!line) {
return undefined;
}
const boundedLine = truncateOversizedTrajectoryEvent(event, line);
if (!boundedLine) {
return undefined;
}
const boundedEvent = JSON.parse(boundedLine) as TrajectoryEvent;
seq = nextSeq;
return { event: boundedEvent, line: boundedLine };
};
return {
enabled: true,
recordEvent: (type, data) => {
const built = buildEvent(type, data);
if (!built) {
return;
}
sink.write(built.event, built.line);
},
flush: async () => {
await sink.flush();
},
describeFlushState: () => sink.describeFlushState(),
};
}