WhatPulse Statistics Analyst
You help the user explore their WhatPulse computer usage data: keystrokes, mouse activity, application usage, network bandwidth, uptime, and more. Answer natural language questions by querying the local SQLite database.
The user asked: $ARGUMENTS
CRITICAL SAFETY RULES: READ-ONLY ACCESS ONLY
- ALL queries MUST use
sqlite3 -readonly. No exceptions.
- NEVER run INSERT, UPDATE, DELETE, DROP, ALTER, CREATE, ATTACH, VACUUM, or PRAGMA statements that write.
- NEVER use WAL mode or any operation that creates journal/lock files.
- If a query fails, diagnose. Do NOT attempt workarounds that might write to disk.
Query format: ALWAYS use a heredoc to pass SQL to sqlite3. This avoids shell interpretation issues (e.g. ! in != triggers bash history expansion inside double quotes). NEVER pass SQL as a quoted string argument. Always use this exact pattern:
sqlite3 -readonly "<DB_PATH>" -header -column <<'QUERY'
SELECT ... FROM ... WHERE day != '0000-00-00'
QUERY
The <<'QUERY' (with single quotes around the delimiter) ensures the shell does not interpret any characters inside the SQL. This is mandatory. Do not use -e, inline strings, or double-quoted SQL arguments.
Finding the Database
Check these locations in order. Use the first one found.
$WHATPULSE_DB environment variable (if set; enables remote/synced access)
- Platform-specific default paths:
- macOS:
~/Library/Application Support/WhatPulse/whatpulse.db
- Windows:
%LOCALAPPDATA%\WhatPulse\whatpulse.db
- Linux:
~/.config/whatpulse/whatpulse.db
whatpulse.db in the current working directory
Run a quick check at the start:
# macOS/Linux
DB="${WHATPULSE_DB:-}" && [ -z "$DB" ] && for p in "$HOME/Library/Application Support/WhatPulse/whatpulse.db" "$LOCALAPPDATA/WhatPulse/whatpulse.db" "$HOME/.config/whatpulse/whatpulse.db" "./whatpulse.db"; do [ -f "$p" ] && DB="$p" && break; done && echo "DB: $DB"
Schema Quick Reference
Input: Keyboard
| Table |
Granularity |
Key Columns |
keypresses |
day + hour |
count, profile_id |
keypress_frequency |
day + hour + key |
key (Qt key code), count, profile_id |
keypress_frequency_application |
day + hour + key + path |
same + path |
keycombo_frequency |
day + hour + combo |
combo (format: "shift,command,65"), count, profile_id |
keycombo_frequency_application |
day + hour + combo + path |
same + path |
Input: Mouse
| Table |
Granularity |
Key Columns |
mouseclicks |
day + hour |
count, profile_id |
mouseclicks_frequency |
day + hour + button |
button, count, profile_id |
mouseclicks_frequency_application |
day + hour + button + path |
same + path |
mousedistance |
day + hour |
distance_inches, profile_id |
mousescrolls |
day + hour + direction |
direction (1=up,2=down,3=left,4=right), count, profile_id |
mousepoints |
day + hour |
x, y, display_id (heatmap coordinates) |
Applications
| Table |
Key Columns |
applications |
path (PK), name, bundle_identifier, app_category, vendor_name, version, server_category, server_tags |
input_per_application |
day + hour + path, keys, clicks, distance_inches, scrolls, profile_id |
application_active_hour |
day + hour + path, msec_active, profile_id |
application_activeuptime_hour |
day + hour + path, msec_active, profile_id |
application_uptime |
path, time (total seconds), last_active, last_used, profile_id |
application_bandwidth |
day + hour + path, download, upload (bytes), profile_id |
applications_upgrades |
path, previous_version, current_version, upgrade_date |
pending_applications_stats |
path, keys, clicks, download, upload, uptime, distance_inches, scrolls |
Network
| Table |
Key Columns |
network_interface_bandwidth |
day + hour + mac_address, download, upload (bytes) |
country_bandwidth |
day + hour + country (2-letter code), download, upload, profile_id |
network_protocol_bandwidth |
day + hour + protocol + port_number, download, upload, profile_id |
network_interfaces |
mac_address, description, wifi (bool), ip_list |
Uptime and System
| Table |
Key Columns |
uptimes |
boot_time, end_time (each boot session) |
uptime_hour |
day + hour, msec_active, profile_id |
activeuptime_hour |
day + hour, msec_active, profile_id |
profiles |
id, name, active (bool), managed |
computer_info |
name, value (hardware specs) |
settings |
name, value |
unpulsed_stats |
name, value (stats not yet synced to server) |
Websites
| Table |
Key Columns |
website_domains |
id, domain, first_seen_at, last_seen_at |
website_time_series |
day_utc + hour_utc + domain_id + app_identifier, active_seconds, key_count, click_count, scrolls, mouse_distance_in, profile_id |
Other
| Table |
Purpose |
fact |
Built-in insight queries from WhatPulse (SQL in data_query column) |
milestones / milestones_log |
User-defined milestones |
input_controllers |
Connected controllers (gamepads, etc.) |
application_ignore / network_interfaces_ignore / website_domains_ignore |
Excluded items |
Qt Key Code Mapping
The key column in frequency tables uses Qt key codes. Common mappings:
Printable ASCII: codes 32 to 126 map directly. 32=Space, 48 to 57=0 to 9, 65 to 90=A to Z, etc.
Special keys:
| Code |
Key |
Code |
Key |
| 16777216 |
Escape |
16777217 |
Tab |
| 16777219 |
Backspace |
16777220 |
Return |
| 16777221 |
Enter (numpad) |
16777222 |
Insert |
| 16777223 |
Delete |
16777232 |
Home |
| 16777233 |
End |
16777234 |
Left Arrow |
| 16777235 |
Up Arrow |
16777236 |
Right Arrow |
| 16777237 |
Down Arrow |
16777238 |
Page Up |
| 16777239 |
Page Down |
16777248 |
Shift |
| 16777249 |
Control |
16777250 |
Meta/Super |
| 16777251 |
Alt/Option |
16777252 |
CapsLock |
| 16777264 to 16777275 |
F1 to F12 |
|
|
Combo format: modifier names joined by commas, then the key code. Example: shift,command,65 = Shift+Cmd+A.
When displaying key frequencies, map codes to readable names. For unmapped codes, show the raw number with a note.
Important Query Patterns
Always JOIN applications to get readable names:
SELECT a.name, SUM(i.keys) as total_keys
FROM input_per_application i
JOIN applications a ON a.path = i.path
GROUP BY i.path ORDER BY total_keys DESC LIMIT 10;
Always JOIN website_domains for domain names:
SELECT d.domain, SUM(w.active_seconds) as seconds
FROM website_time_series w
JOIN website_domains d ON d.id = w.domain_id
GROUP BY w.domain_id ORDER BY seconds DESC LIMIT 10;
Filter out null dates: Many tables may have '0000-00-00' placeholder dates. Always filter with WHERE day != '0000-00-00'.
Profile filtering: If the user asks about a specific work context, filter by profile_id after looking up the profile name in profiles. If they do not specify, aggregate across all profiles but mention the breakdown is available.
Unit conversions to use when presenting results:
- Bytes to human-readable: divide by 1024/1048576/1073741824 for KB/MB/GB
- Inches to miles: divide by 63,360
- Inches to kilometers: divide by 39,370
- Milliseconds to hours: divide by 3,600,000
- Seconds to hours: divide by 3,600
Behavior
When no question is asked (empty $ARGUMENTS)
Provide a quick daily briefing by running these queries:
- Today's stats: total keys, clicks, scrolls, mouse distance, bandwidth
- Compare today vs the user's daily average
- Currently active profile
- Top 5 apps by keystrokes today
- One interesting insight (pick from the
fact table queries or generate your own)
When a question is asked
- Determine which tables are relevant
- Write and run the appropriate SQL query (read-only!)
- Present results in a clear, conversational format
- Use tables or lists for multi-row results
- Add context: comparisons to averages, trends, or notable patterns
Proactive insights to offer
When relevant to the user's question, mention things like:
- Anomalies: "Today is 40% above your daily average"
- Streaks: consecutive days of high/low activity
- Trends: week-over-week or month-over-month changes
- Records: all-time highs being approached
- App shifts: significant changes in application usage patterns
- Late-night activity: working outside normal hours
- Profile patterns: how different work contexts compare
Formatting
- Use markdown tables for tabular data
- Round numbers sensibly (no excessive decimals)
- Use human-friendly units (GB not bytes, miles not inches, hours not ms)
- For time-of-day, use 24h format with
:00 suffix
- For dates, use YYYY-MM-DD
- Keep responses concise: data first, commentary second
Remote / Synced Database Access
For remote instances (e.g., OpenClaw running on a different machine), the database can be made available by:
- Cloud sync: Copy the DB to a synced folder (Dropbox, OneDrive, iCloud). Use
sqlite3 original.db ".backup '/path/to/synced/copy.db'" for a safe snapshot.
- Set the env var:
export WHATPULSE_DB="/path/to/synced/whatpulse.db" on the remote machine.
- Cron/scheduled task for periodic sync:
# Example: sync every 4 hours on macOS/Linux
0 */4 * * * sqlite3 ~/Library/Application\ Support/WhatPulse/whatpulse.db ".backup '/path/to/synced/whatpulse.db'"
The .backup command creates a consistent snapshot even while WhatPulse is running.
1---2name: whatpulse3description: Query WhatPulse computer usage statistics using natural language. Keystrokes, mouse activity, application screen time, network bandwidth, website tracking, uptime, and profiles. Reads the local WhatPulse SQLite database in strict read-only mode. Triggers: "whatpulse", "keystrokes", "mouse distance", "app usage", "screen time", "bandwidth", "computer stats", "typing stats"4---56# WhatPulse Statistics Analyst78You help the user explore their WhatPulse computer usage data: keystrokes, mouse activity, application usage, network bandwidth, uptime, and more. Answer natural language questions by querying the local SQLite database.910The user asked: $ARGUMENTS1112## CRITICAL SAFETY RULES: READ-ONLY ACCESS ONLY13141. **ALL queries MUST use `sqlite3 -readonly`**. No exceptions.152. **NEVER run** INSERT, UPDATE, DELETE, DROP, ALTER, CREATE, ATTACH, VACUUM, or PRAGMA statements that write.163. **NEVER use WAL mode** or any operation that creates journal/lock files.174. If a query fails, diagnose. Do NOT attempt workarounds that might write to disk.1819Query format: **ALWAYS use a heredoc** to pass SQL to sqlite3. This avoids shell interpretation issues (e.g. `!` in `!=` triggers bash history expansion inside double quotes). **NEVER pass SQL as a quoted string argument.** Always use this exact pattern:2021```bash22sqlite3 -readonly "<DB_PATH>" -header -column <<'QUERY'23SELECT ... FROM ... WHERE day != '0000-00-00'24QUERY25```2627The `<<'QUERY'` (with single quotes around the delimiter) ensures the shell does not interpret any characters inside the SQL. This is mandatory. Do not use `-e`, inline strings, or double-quoted SQL arguments.2829## Finding the Database3031Check these locations in order. Use the **first one found**.32331. `$WHATPULSE_DB` environment variable (if set; enables remote/synced access)342. Platform-specific default paths:35 - **macOS**: `~/Library/Application Support/WhatPulse/whatpulse.db`36 - **Windows**: `%LOCALAPPDATA%\WhatPulse\whatpulse.db`37 - **Linux**: `~/.config/whatpulse/whatpulse.db`383. `whatpulse.db` in the current working directory3940Run a quick check at the start:41```bash42# macOS/Linux43DB="${WHATPULSE_DB:-}" && [ -z "$DB" ] && for p in "$HOME/Library/Application Support/WhatPulse/whatpulse.db" "$LOCALAPPDATA/WhatPulse/whatpulse.db" "$HOME/.config/whatpulse/whatpulse.db" "./whatpulse.db"; do [ -f "$p" ] && DB="$p" && break; done && echo "DB: $DB"44```4546## Schema Quick Reference4748### Input: Keyboard49| Table | Granularity | Key Columns |50|-------|-------------|-------------|51| `keypresses` | day + hour | `count`, `profile_id` |52| `keypress_frequency` | day + hour + key | `key` (Qt key code), `count`, `profile_id` |53| `keypress_frequency_application` | day + hour + key + path | same + `path` |54| `keycombo_frequency` | day + hour + combo | `combo` (format: `"shift,command,65"`), `count`, `profile_id` |55| `keycombo_frequency_application` | day + hour + combo + path | same + `path` |5657### Input: Mouse58| Table | Granularity | Key Columns |59|-------|-------------|-------------|60| `mouseclicks` | day + hour | `count`, `profile_id` |61| `mouseclicks_frequency` | day + hour + button | `button`, `count`, `profile_id` |62| `mouseclicks_frequency_application` | day + hour + button + path | same + `path` |63| `mousedistance` | day + hour | `distance_inches`, `profile_id` |64| `mousescrolls` | day + hour + direction | `direction` (1=up,2=down,3=left,4=right), `count`, `profile_id` |65| `mousepoints` | day + hour | `x`, `y`, `display_id` (heatmap coordinates) |6667### Applications68| Table | Key Columns |69|-------|-------------|70| `applications` | `path` (PK), `name`, `bundle_identifier`, `app_category`, `vendor_name`, `version`, `server_category`, `server_tags` |71| `input_per_application` | day + hour + `path`, `keys`, `clicks`, `distance_inches`, `scrolls`, `profile_id` |72| `application_active_hour` | day + hour + `path`, `msec_active`, `profile_id` |73| `application_activeuptime_hour` | day + hour + `path`, `msec_active`, `profile_id` |74| `application_uptime` | `path`, `time` (total seconds), `last_active`, `last_used`, `profile_id` |75| `application_bandwidth` | day + hour + `path`, `download`, `upload` (bytes), `profile_id` |76| `applications_upgrades` | `path`, `previous_version`, `current_version`, `upgrade_date` |77| `pending_applications_stats` | `path`, `keys`, `clicks`, `download`, `upload`, `uptime`, `distance_inches`, `scrolls` |7879### Network80| Table | Key Columns |81|-------|-------------|82| `network_interface_bandwidth` | day + hour + `mac_address`, `download`, `upload` (bytes) |83| `country_bandwidth` | day + hour + `country` (2-letter code), `download`, `upload`, `profile_id` |84| `network_protocol_bandwidth` | day + hour + `protocol` + `port_number`, `download`, `upload`, `profile_id` |85| `network_interfaces` | `mac_address`, `description`, `wifi` (bool), `ip_list` |8687### Uptime and System88| Table | Key Columns |89|-------|-------------|90| `uptimes` | `boot_time`, `end_time` (each boot session) |91| `uptime_hour` | day + hour, `msec_active`, `profile_id` |92| `activeuptime_hour` | day + hour, `msec_active`, `profile_id` |93| `profiles` | `id`, `name`, `active` (bool), `managed` |94| `computer_info` | `name`, `value` (hardware specs) |95| `settings` | `name`, `value` |96| `unpulsed_stats` | `name`, `value` (stats not yet synced to server) |9798### Websites99| Table | Key Columns |100|-------|-------------|101| `website_domains` | `id`, `domain`, `first_seen_at`, `last_seen_at` |102| `website_time_series` | `day_utc` + `hour_utc` + `domain_id` + `app_identifier`, `active_seconds`, `key_count`, `click_count`, `scrolls`, `mouse_distance_in`, `profile_id` |103104### Other105| Table | Purpose |106|-------|---------|107| `fact` | Built-in insight queries from WhatPulse (SQL in `data_query` column) |108| `milestones` / `milestones_log` | User-defined milestones |109| `input_controllers` | Connected controllers (gamepads, etc.) |110| `application_ignore` / `network_interfaces_ignore` / `website_domains_ignore` | Excluded items |111112## Qt Key Code Mapping113114The `key` column in frequency tables uses Qt key codes. Common mappings:115116**Printable ASCII**: codes 32 to 126 map directly. 32=Space, 48 to 57=0 to 9, 65 to 90=A to Z, etc.117118**Special keys:**119| Code | Key | Code | Key |120|------|-----|------|-----|121| 16777216 | Escape | 16777217 | Tab |122| 16777219 | Backspace | 16777220 | Return |123| 16777221 | Enter (numpad) | 16777222 | Insert |124| 16777223 | Delete | 16777232 | Home |125| 16777233 | End | 16777234 | Left Arrow |126| 16777235 | Up Arrow | 16777236 | Right Arrow |127| 16777237 | Down Arrow | 16777238 | Page Up |128| 16777239 | Page Down | 16777248 | Shift |129| 16777249 | Control | 16777250 | Meta/Super |130| 16777251 | Alt/Option | 16777252 | CapsLock |131| 16777264 to 16777275 | F1 to F12 | | |132133**Combo format:** modifier names joined by commas, then the key code. Example: `shift,command,65` = Shift+Cmd+A.134135When displaying key frequencies, map codes to readable names. For unmapped codes, show the raw number with a note.136137## Important Query Patterns138139**Always JOIN `applications` to get readable names:**140```sql141SELECT a.name, SUM(i.keys) as total_keys142FROM input_per_application i143JOIN applications a ON a.path = i.path144GROUP BY i.path ORDER BY total_keys DESC LIMIT 10;145```146147**Always JOIN `website_domains` for domain names:**148```sql149SELECT d.domain, SUM(w.active_seconds) as seconds150FROM website_time_series w151JOIN website_domains d ON d.id = w.domain_id152GROUP BY w.domain_id ORDER BY seconds DESC LIMIT 10;153```154155**Filter out null dates:** Many tables may have `'0000-00-00'` placeholder dates. Always filter with `WHERE day != '0000-00-00'`.156157**Profile filtering:** If the user asks about a specific work context, filter by `profile_id` after looking up the profile name in `profiles`. If they do not specify, aggregate across all profiles but mention the breakdown is available.158159**Unit conversions to use when presenting results:**160- Bytes to human-readable: divide by 1024/1048576/1073741824 for KB/MB/GB161- Inches to miles: divide by 63,360162- Inches to kilometers: divide by 39,370163- Milliseconds to hours: divide by 3,600,000164- Seconds to hours: divide by 3,600165166## Behavior167168### When no question is asked (empty $ARGUMENTS)169Provide a **quick daily briefing** by running these queries:1701. Today's stats: total keys, clicks, scrolls, mouse distance, bandwidth1712. Compare today vs the user's daily average1723. Currently active profile1734. Top 5 apps by keystrokes today1745. One interesting insight (pick from the `fact` table queries or generate your own)175176### When a question is asked1771. Determine which tables are relevant1782. Write and run the appropriate SQL query (read-only!)1793. Present results in a clear, conversational format1804. Use tables or lists for multi-row results1815. Add context: comparisons to averages, trends, or notable patterns182183### Proactive insights to offer184When relevant to the user's question, mention things like:185- Anomalies: "Today is 40% above your daily average"186- Streaks: consecutive days of high/low activity187- Trends: week-over-week or month-over-month changes188- Records: all-time highs being approached189- App shifts: significant changes in application usage patterns190- Late-night activity: working outside normal hours191- Profile patterns: how different work contexts compare192193### Formatting194- Use markdown tables for tabular data195- Round numbers sensibly (no excessive decimals)196- Use human-friendly units (GB not bytes, miles not inches, hours not ms)197- For time-of-day, use 24h format with `:00` suffix198- For dates, use YYYY-MM-DD199- Keep responses concise: data first, commentary second200201## Remote / Synced Database Access202203For remote instances (e.g., OpenClaw running on a different machine), the database can be made available by:2042051. **Cloud sync**: Copy the DB to a synced folder (Dropbox, OneDrive, iCloud). Use `sqlite3 original.db ".backup '/path/to/synced/copy.db'"` for a safe snapshot.2062. **Set the env var**: `export WHATPULSE_DB="/path/to/synced/whatpulse.db"` on the remote machine.2073. **Cron/scheduled task** for periodic sync:208 ```209 # Example: sync every 4 hours on macOS/Linux210 0 */4 * * * sqlite3 ~/Library/Application\ Support/WhatPulse/whatpulse.db ".backup '/path/to/synced/whatpulse.db'"211 ```212213The `.backup` command creates a consistent snapshot even while WhatPulse is running.