@blockrun/franklin 3.7.1 → 3.7.2

package/dist/agent/loop.js

@@ -14,6 +14,7 @@ import { classifyAgentError } from './error-classifier.js';
 import { SessionToolGuard } from './tool-guard.js';
 import { recordUsage } from '../stats/tracker.js';
 import { recordSessionUsage } from '../stats/session-tracker.js';
+import { appendAudit, extractLastUserPrompt } from '../stats/audit.js';
 import { estimateCost, OPUS_PRICING } from '../pricing.js';
 import { maybeMidSessionExtract } from '../learnings/extractor.js';
 import { routeRequest, parseRoutingProfile } from '../router/index.js';
@@ -656,6 +657,18 @@ export async function interactiveSession(config, getUserInput, onEvent, onAbortR
             const costEstimate = estimateCost(resolvedModel, inputTokens, usage.outputTokens, 1);
             recordUsage(resolvedModel, inputTokens, usage.outputTokens, costEstimate, 0);
             recordSessionUsage(resolvedModel, inputTokens, usage.outputTokens, costEstimate, routingTier);
+            appendAudit({
+                ts: Date.now(),
+                sessionId,
+                model: resolvedModel,
+                inputTokens,
+                outputTokens: usage.outputTokens,
+                costUsd: costEstimate,
+                source: 'agent',
+                workDir,
+                prompt: extractLastUserPrompt(history),
+                routingTier,
+            });
             // Accumulate session-level totals for session meta
             sessionInputTokens += inputTokens;
             sessionOutputTokens += usage.outputTokens;

package/dist/panel/html.js

@@ -383,6 +383,10 @@ a:hover { text-decoration:underline; }
       <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="M2 3h6a4 4 0 0 1 4 4v14a3 3 0 0 0-3-3H2z"/><path d="M22 3h-6a4 4 0 0 0-4 4v14a3 3 0 0 1 3-3h7z"/></svg>
       Learnings
     </button>
+    <button class="nav-item" data-tab="audit">
+      <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><circle cx="11" cy="11" r="7"/><path d="M21 21l-4.3-4.3"/><path d="M11 8v3l2 1"/></svg>
+      Audit Log
+    </button>
   </div>
 
   <div class="sidebar-footer">
@@ -559,6 +563,31 @@ a:hover { text-decoration:underline; }
     </div>
     <div id="learnings-list"></div>
   </div>
+
+  <!-- Audit Log -->
+  <div class="tab" id="tab-audit">
+    <div class="content-header">
+      <h2>Audit Log</h2>
+      <p>Every LLM call: prompt, model, tokens, cost. Where the money actually went.</p>
+    </div>
+    <div style="display:flex;gap:8px;align-items:center;margin-bottom:16px;flex-wrap:wrap;">
+      <label style="display:flex;align-items:center;gap:6px;font-size:13px;color:var(--text-dim);cursor:pointer;">
+        <input type="checkbox" id="audit-paid-only" style="margin:0;" /> Paid only
+      </label>
+      <select id="audit-since" style="padding:4px 8px;background:var(--bg-card);color:var(--text);border:1px solid var(--border);border-radius:6px;font-size:13px;">
+        <option value="0">All time</option>
+        <option value="3600000">Last hour</option>
+        <option value="86400000" selected>Last 24h</option>
+        <option value="604800000">Last 7 days</option>
+        <option value="2592000000">Last 30 days</option>
+      </select>
+      <input id="audit-model" placeholder="Filter by model…" style="padding:4px 8px;background:var(--bg-card);color:var(--text);border:1px solid var(--border);border-radius:6px;font-size:13px;width:180px;" />
+      <input id="audit-session" placeholder="Filter by session prefix…" style="padding:4px 8px;background:var(--bg-card);color:var(--text);border:1px solid var(--border);border-radius:6px;font-size:13px;width:180px;" />
+      <button id="audit-refresh" style="padding:4px 10px;background:var(--bg-card);color:var(--text);border:1px solid var(--border);border-radius:6px;font-size:13px;cursor:pointer;">Refresh</button>
+      <span id="audit-summary" style="margin-left:auto;font-size:13px;color:var(--text-dim);"></span>
+    </div>
+    <div id="audit-list" style="font-family:ui-monospace,SFMono-Regular,Consolas,monospace;font-size:12px;"></div>
+  </div>
 </div>
 
 <script>
@@ -827,6 +856,57 @@ es.onmessage = (e) => {
   try { if (JSON.parse(e.data).type === 'stats.updated') loadOverview(); } catch {}
 };
 
+async function loadAudit() {
+  const list = document.getElementById('audit-list');
+  const summary = document.getElementById('audit-summary');
+  if (!list) return;
+  const params = new URLSearchParams({ limit: '300' });
+  if (document.getElementById('audit-paid-only').checked) params.set('paidOnly', '1');
+  const sinceMs = parseInt(document.getElementById('audit-since').value, 10);
+  if (sinceMs > 0) params.set('since', String(Date.now() - sinceMs));
+  const model = document.getElementById('audit-model').value.trim();
+  if (model) params.set('model', model);
+  const session = document.getElementById('audit-session').value.trim();
+  if (session) params.set('session', session);
+
+  list.innerHTML = '<div style="color:var(--text-dim);padding:12px;">Loading…</div>';
+  const data = await fetch('/api/audit?' + params.toString()).then(r => r.json()).catch(() => null);
+  if (!data) { list.innerHTML = '<div style="color:var(--text-dim);padding:12px;">API offline</div>'; return; }
+  if (!data.entries.length) {
+    list.innerHTML = '<div style="color:var(--text-dim);padding:12px;">No audit entries match these filters. Run franklin and make a request.</div>';
+    summary.textContent = '0 calls';
+    return;
+  }
+  summary.textContent = data.returned + ' / ' + data.total + ' calls · $' + data.totalCostUsd.toFixed(4) + ' · ' +
+    (data.totalInputTokens/1000).toFixed(1) + 'k in / ' + (data.totalOutputTokens/1000).toFixed(1) + 'k out';
+
+  list.innerHTML = data.entries.map(e => {
+    const ts = new Date(e.ts).toLocaleString('en-US', { hour12: false });
+    const cost = e.costUsd > 0
+      ? '<span style="color:#fbbf24;">$' + e.costUsd.toFixed(4) + '</span>'
+      : '<span style="color:#10b981;">FREE</span>';
+    const fb = e.fallback ? ' <span style="color:#f97316;">·fb</span>' : '';
+    const sid = e.sessionId ? ' <span style="color:var(--text-dim);">' + esc(e.sessionId.slice(0,8)) + '</span>' : '';
+    const prompt = e.prompt
+      ? '<div style="color:var(--text-dim);padding:2px 0 4px 16px;white-space:pre-wrap;word-break:break-word;">"' + esc(e.prompt) + '"</div>'
+      : '';
+    const dir = e.workDir ? '<div style="color:var(--text-dim);padding:0 0 0 16px;font-size:11px;">📁 ' + esc(e.workDir) + '</div>' : '';
+    return '<div style="padding:8px 12px;border-bottom:1px solid var(--border);">' +
+      '<div><span style="color:var(--text-dim);">' + ts + '</span>  ' + cost + '  <span style="color:#60a5fa;">' + esc(e.model) + '</span>  ' +
+      '<span style="color:var(--text-dim);">in=' + e.inputTokens + ' out=' + e.outputTokens + '</span>  ' +
+      '<span style="color:var(--text-dim);">[' + esc(e.source) + ']' + fb + '</span>' + sid + '</div>' +
+      prompt + dir +
+      '</div>';
+  }).join('');
+}
+
+['audit-paid-only','audit-since','audit-model','audit-session'].forEach(id => {
+  const el = document.getElementById(id);
+  if (el) el.addEventListener(el.tagName === 'INPUT' && el.type === 'text' ? 'input' : 'change', () => loadAudit());
+});
+document.getElementById('audit-refresh')?.addEventListener('click', loadAudit);
+document.querySelector('[data-tab="audit"]')?.addEventListener('click', loadAudit);
+
 loadOverview();
 loadSessions();
 loadSocial();

package/dist/panel/server.js

@@ -12,6 +12,7 @@ import { generateInsights } from '../stats/insights.js';
 import { listSessions, loadSessionHistory } from '../session/storage.js';
 import { searchSessions } from '../session/search.js';
 import { loadLearnings } from '../learnings/store.js';
+import { readAudit } from '../stats/audit.js';
 import { getStats as getSocialStats } from '../social/db.js';
 import { getHTML } from './html.js';
 const sseClients = new Set();
@@ -129,6 +130,37 @@ export function createPanelServer(port) {
                     json(res, report);
                     return;
                 }
+                if (p === '/api/audit') {
+                    // Per-call LLM audit log — prompt, model, tokens, cost per call.
+                    // Supports ?limit=N&paidOnly=1&since=<ms>&session=<prefix>&model=<substr>
+                    const limit = Math.min(parseInt(url.searchParams.get('limit') || '200', 10), 2000);
+                    const paidOnly = url.searchParams.get('paidOnly') === '1';
+                    const since = parseInt(url.searchParams.get('since') || '0', 10);
+                    const sessionFilter = url.searchParams.get('session') || '';
+                    const modelFilter = url.searchParams.get('model') || '';
+                    let entries = readAudit();
+                    if (since > 0)
+                        entries = entries.filter(e => e.ts >= since);
+                    if (paidOnly)
+                        entries = entries.filter(e => e.costUsd > 0);
+                    if (sessionFilter)
+                        entries = entries.filter(e => e.sessionId?.startsWith(sessionFilter));
+                    if (modelFilter)
+                        entries = entries.filter(e => e.model.includes(modelFilter));
+                    const recent = entries.slice(-limit).reverse(); // newest first
+                    const totalCost = entries.reduce((s, e) => s + e.costUsd, 0);
+                    const totalIn = entries.reduce((s, e) => s + e.inputTokens, 0);
+                    const totalOut = entries.reduce((s, e) => s + e.outputTokens, 0);
+                    json(res, {
+                        total: entries.length,
+                        returned: recent.length,
+                        totalCostUsd: totalCost,
+                        totalInputTokens: totalIn,
+                        totalOutputTokens: totalOut,
+                        entries: recent,
+                    });
+                    return;
+                }
                 if (p === '/api/sessions') {
                     const sessions = listSessions();
                     json(res, sessions);
@@ -310,13 +342,18 @@ export function createPanelServer(port) {
             console.error('[panel] request error:', err.message);
         }
     });
-    // Swallow socket errors (client disconnects, etc.) so they don't crash the process
+    // Swallow socket errors (client disconnects, etc.) so they don't crash the process.
+    // ECONNRESET / EPIPE happen every time a browser tab closes an SSE stream — pure noise.
     server.on('clientError', (err, socket) => {
         try {
             socket.destroy();
         }
         catch { /* already closed */ }
-        console.error('[panel] client error:', err.message);
+        if (err.code === 'ECONNRESET' || err.code === 'EPIPE')
+            return;
+        if (process.env.FRANKLIN_PANEL_DEBUG) {
+            console.error('[panel] client error:', err.message);
+        }
     });
     // Watch stats file for changes → push to SSE clients
     const statsFile = fs.existsSync(path.join(BLOCKRUN_DIR, 'franklin-stats.json'))

package/dist/proxy/server.js

@@ -4,6 +4,7 @@ import path from 'node:path';
 import os from 'node:os';
 import { getOrCreateWallet, getOrCreateSolanaWallet, createPaymentPayload, createSolanaPaymentPayload, parsePaymentRequired, extractPaymentDetails, solanaKeyToBytes, SOLANA_NETWORK, } from '@blockrun/llm';
 import { recordUsage } from '../stats/tracker.js';
+import { appendAudit } from '../stats/audit.js';
 import { fetchWithFallback, buildFallbackChain, DEFAULT_FALLBACK_CONFIG, ROUTING_PROFILES, } from './fallback.js';
 import { routeRequest, parseRoutingProfile, } from '../router/index.js';
 import { estimateCost } from '../pricing.js';
@@ -481,6 +482,16 @@ export function createProxy(options) {
                                         const latencyMs = Date.now() - requestStartTime;
                                         const cost = estimateCost(finalModel, inputTokens, outputTokens);
                                         recordUsage(finalModel, inputTokens, outputTokens, cost, latencyMs, usedFallback);
+                                        appendAudit({
+                                            ts: Date.now(),
+                                            model: finalModel,
+                                            inputTokens,
+                                            outputTokens,
+                                            costUsd: cost,
+                                            latencyMs,
+                                            fallback: usedFallback,
+                                            source: 'proxy',
+                                        });
                                         debug(options, `recorded: model=${finalModel} in=${inputTokens} out=${outputTokens} cost=$${cost.toFixed(4)} fallback=${usedFallback}`);
                                     }
                                 }
@@ -510,6 +521,16 @@ export function createProxy(options) {
                             const latencyMs = Date.now() - requestStartTime;
                             const cost = estimateCost(finalModel, inputTokens, outputTokens);
                             recordUsage(finalModel, inputTokens, outputTokens, cost, latencyMs, usedFallback);
+                            appendAudit({
+                                ts: Date.now(),
+                                model: finalModel,
+                                inputTokens,
+                                outputTokens,
+                                costUsd: cost,
+                                latencyMs,
+                                fallback: usedFallback,
+                                source: 'proxy',
+                            });
                             debug(options, `recorded: model=${finalModel} in=${inputTokens} out=${outputTokens} cost=$${cost.toFixed(4)} fallback=${usedFallback}`);
                         }
                     }

package/dist/stats/audit.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Audit log — append-only forensic record of every LLM call.
+ *
+ * Lives at ~/.blockrun/franklin-audit.jsonl. One line per call, JSONL.
+ * Unlike franklin-stats.json (aggregates), this file lets you answer
+ * "what was I actually doing when $1.50 disappeared on Apr 12?".
+ *
+ * Fields kept intentionally small (truncated prompt, no tool args) so the
+ * file stays readable and doesn't leak large tool outputs to disk.
+ */
+export interface AuditEntry {
+    ts: number;
+    sessionId?: string;
+    model: string;
+    inputTokens: number;
+    outputTokens: number;
+    costUsd: number;
+    latencyMs?: number;
+    fallback?: boolean;
+    source: 'agent' | 'proxy' | 'subagent' | 'moa' | 'plugin';
+    workDir?: string;
+    prompt?: string;
+    toolCalls?: string[];
+    routingTier?: string;
+}
+export declare function appendAudit(entry: AuditEntry): void;
+export declare function getAuditFilePath(): string;
+export declare function readAudit(): AuditEntry[];
+/** Pull the last user message from a Dialogue history, flatten, and strip newlines. */
+export declare function extractLastUserPrompt(history: Array<{
+    role: string;
+    content: unknown;
+}>): string | undefined;

package/dist/stats/audit.js

@@ -0,0 +1,86 @@
+/**
+ * Audit log — append-only forensic record of every LLM call.
+ *
+ * Lives at ~/.blockrun/franklin-audit.jsonl. One line per call, JSONL.
+ * Unlike franklin-stats.json (aggregates), this file lets you answer
+ * "what was I actually doing when $1.50 disappeared on Apr 12?".
+ *
+ * Fields kept intentionally small (truncated prompt, no tool args) so the
+ * file stays readable and doesn't leak large tool outputs to disk.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { BLOCKRUN_DIR } from '../config.js';
+const AUDIT_FILE = path.join(BLOCKRUN_DIR, 'franklin-audit.jsonl');
+const PROMPT_PREVIEW_CHARS = 240;
+export function appendAudit(entry) {
+    try {
+        fs.mkdirSync(BLOCKRUN_DIR, { recursive: true });
+        const safe = {
+            ...entry,
+            prompt: entry.prompt ? truncate(entry.prompt, PROMPT_PREVIEW_CHARS) : undefined,
+        };
+        fs.appendFileSync(AUDIT_FILE, JSON.stringify(safe) + '\n');
+    }
+    catch {
+        /* best-effort — never break the agent loop on audit-write failure */
+    }
+}
+export function getAuditFilePath() {
+    return AUDIT_FILE;
+}
+export function readAudit() {
+    try {
+        if (!fs.existsSync(AUDIT_FILE))
+            return [];
+        const lines = fs.readFileSync(AUDIT_FILE, 'utf-8').split('\n');
+        const out = [];
+        for (const line of lines) {
+            if (!line.trim())
+                continue;
+            try {
+                out.push(JSON.parse(line));
+            }
+            catch { /* skip malformed line */ }
+        }
+        return out;
+    }
+    catch {
+        return [];
+    }
+}
+/** Pull the last user message from a Dialogue history, flatten, and strip newlines. */
+export function extractLastUserPrompt(history) {
+    for (let i = history.length - 1; i >= 0; i--) {
+        const msg = history[i];
+        if (msg.role !== 'user')
+            continue;
+        const text = flattenContent(msg.content);
+        if (!text)
+            continue;
+        return text.replace(/\s+/g, ' ').trim();
+    }
+    return undefined;
+}
+function flattenContent(content) {
+    if (typeof content === 'string')
+        return content;
+    if (!Array.isArray(content))
+        return '';
+    const parts = [];
+    for (const block of content) {
+        if (typeof block === 'string') {
+            parts.push(block);
+        }
+        else if (block && typeof block === 'object') {
+            const b = block;
+            // Skip tool_result blocks — they're tool output, not user intent
+            if (b.type === 'text' && typeof b.text === 'string')
+                parts.push(b.text);
+        }
+    }
+    return parts.join(' ');
+}
+function truncate(s, n) {
+    return s.length > n ? s.slice(0, n) + '…' : s;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blockrun/franklin",
-  "version": "3.7.1",
+  "version": "3.7.2",
   "description": "Franklin — The AI agent with a wallet. Spends USDC autonomously to get real work done. Pay per action, no subscriptions.",
   "type": "module",
   "exports": {