@gethelio/proxy 0.10.0 → 0.11.1

package/dist/index.js

@@ -39,7 +39,7 @@ var upstreamSchema = z.object({
   request_timeout: durationSchema.default("30s"),
   forward_headers: z.array(z.string().min(1)).default([]),
   headers: z.record(z.string(), z.string()).default({})
-}).refine((data) => data.transport !== "stdio" || data.command !== void 0, {
+}).strict().refine((data) => data.transport !== "stdio" || data.command !== void 0, {
   message: '"command" is required when transport is "stdio"',
   path: ["command"]
 }).superRefine((data, ctx) => {
@@ -72,7 +72,7 @@ var upstreamSchema = z.object({
 var listenSchema = z.object({
   port: z.number().int().min(1).max(65535).default(3e3),
   host: z.string().default("127.0.0.1")
-});
+}).strict();
 function isLoopbackHost(host) {
   return host === "127.0.0.1" || host === "localhost" || host === "::1";
 }
@@ -86,7 +86,7 @@ var dashboardSchema = z.object({
   api_secret: z.string().optional(),
   allow_open_mode: z.boolean().default(false),
   sse_heartbeat_interval: durationSchema.default("30s")
-});
+}).strict();
 var inputConditionSchema = z.object({
   eq: z.unknown().optional(),
   neq: z.unknown().optional(),
@@ -216,12 +216,27 @@ var policiesSchema = z.object({
    */
   hot_reload: z.boolean().optional()
 }).strict();
-var budgetContributorSchema = z.object({
+var budgetContributorMatchSchema = z.object({
   tool: z.string().min(1),
   // picomatch glob, same engine as match.tool
+  // Same operators and AND-combination as rule `match.input`. Other rule
+  // matchers (annotations, environment, metadata) stay strict-rejected
+  // until the budget charge context can actually evaluate them.
+  input: z.record(z.string(), inputConditionSchema).optional()
+}).strict();
+var modernBudgetContributorSchema = z.object({
+  match: budgetContributorMatchSchema,
   field: z.string().min(1)
   // dot-path into tool arguments, e.g. "$.amount"
 }).strict();
+var budgetContributorSchema = z.unknown().superRefine((raw, ctx) => {
+  if (raw !== null && typeof raw === "object" && "tool" in raw) {
+    ctx.addIssue({
+      code: "custom",
+      message: 'contributor "tool" moved under "match" in v0.11.0 \u2014 write { match: { tool: "<glob>" }, field: "<path>" }'
+    });
+  }
+}).pipe(modernBudgetContributorSchema);
 var budgetSchema = z.object({
   // The name is embedded in bucket keys (`budget:<name>:<scope>`) and, later,
   // ledger rows — constrain it so keys stay parseable and scope classification
@@ -280,17 +295,17 @@ var slackChannelSchema = z.object({
   bot_token: z.string(),
   signing_secret: z.string(),
   channel: z.string()
-});
+}).strict();
 var webhookChannelSchema = z.object({
   type: z.literal("webhook"),
   name: z.string().min(1).optional(),
   url: z.string(),
   secret: z.string().optional()
-});
+}).strict();
 var dashboardChannelSchema = z.object({
   type: z.literal("dashboard"),
   name: z.string().min(1).optional()
-});
+}).strict();
 var approvalChannelSchema = z.discriminatedUnion("type", [
   slackChannelSchema,
   webhookChannelSchema,
@@ -300,13 +315,13 @@ var approvalSchema = z.object({
   timeout: durationSchema.default("300s"),
   default_on_timeout: z.enum(["deny", "allow"]).default("deny"),
   channels: z.array(approvalChannelSchema).default([])
-});
+}).strict();
 var auditSchema = z.object({
   storage: z.enum(["sqlite"]).default("sqlite"),
   path: z.string().default("./helio-audit.db"),
   retention: durationSchema.default("90d"),
   include_responses: z.boolean().default(true)
-});
+}).strict();
 var sdkSchema = z.object({
   enabled: z.boolean().default(false),
   port: z.number().int().min(1).max(65535).default(3200),
@@ -318,12 +333,11 @@ var sdkSchema = z.object({
    * decided-allowed call from the trail.
    */
   evaluation_ttl: durationSchema.default("10m")
-});
+}).strict();
 var helioConfigBaseSchema = z.object({
   version: z.literal("1"),
   upstream: upstreamSchema,
   listen: listenSchema.prefault({}),
-  dashboard: dashboardSchema.prefault({}),
   environment: z.string().optional(),
   policies: policiesSchema.prefault({}),
   // Budgets sit beside policies deliberately: they are the second half of the
@@ -331,9 +345,18 @@ var helioConfigBaseSchema = z.object({
   budgets: z.array(budgetSchema).default([]),
   approval: approvalSchema.prefault({}),
   audit: auditSchema.prefault({}),
+  // Dashboard follows audit deliberately: an operator surface, not part of
+  // the request path (canonical section order, #89/#163).
+  dashboard: dashboardSchema.prefault({}),
   sdk: sdkSchema.prefault({})
-});
-var helioConfigSchema = helioConfigBaseSchema.superRefine((cfg, ctx) => {
+}).strict();
+function stripRootExtensionKeys(value) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) return value;
+  return Object.fromEntries(
+    Object.entries(value).filter(([key]) => !key.startsWith("x-"))
+  );
+}
+var helioConfigRefinedSchema = helioConfigBaseSchema.superRefine((cfg, ctx) => {
   const hasConfiguredEnvironment = typeof cfg.environment === "string" && cfg.environment.trim().length > 0;
   const requiresSecret = cfg.policies.flag_destructive === "require_approval" || cfg.policies.on_tool_drift === "require_approval" || cfg.policies.rules.some((rule) => rule.action === "require_approval") || cfg.budgets.some((budget) => budget.on_exceed === "require_approval");
   const hasSecret = hasDashboardApiSecret(cfg.dashboard.api_secret);
@@ -448,6 +471,22 @@ var helioConfigSchema = helioConfigBaseSchema.superRefine((cfg, ctx) => {
       message: "dashboard.enabled must be true when approval.channels includes a webhook channel. Webhook notifications require the dashboard sideband approval API."
     });
   }
+  if (!cfg.dashboard.enabled) {
+    if (cfg.policies.flag_destructive === "require_approval") {
+      ctx.addIssue({
+        code: "custom",
+        path: ["policies", "flag_destructive"],
+        message: 'policies.flag_destructive: require_approval routes its escalation tickets to the dashboard channel, but dashboard.enabled is false \u2014 the tickets could never be resolved and would always time out. Enable the dashboard or use "log".'
+      });
+    }
+    if (cfg.policies.on_tool_drift === "require_approval") {
+      ctx.addIssue({
+        code: "custom",
+        path: ["policies", "on_tool_drift"],
+        message: 'policies.on_tool_drift: require_approval routes its escalation tickets to the dashboard channel, but dashboard.enabled is false \u2014 the tickets could never be resolved and would always time out. Enable the dashboard or use "block" or "log".'
+      });
+    }
+  }
   for (const [ruleIndex, rule] of cfg.policies.rules.entries()) {
     if (rule.match.environment !== void 0 && !hasConfiguredEnvironment) {
       ctx.addIssue({
@@ -503,6 +542,28 @@ var helioConfigSchema = helioConfigBaseSchema.superRefine((cfg, ctx) => {
         message: `Unknown approval channel "${channel}". Add it to approval.channels (type or name), or use "dashboard".`
       });
     }
+    if (rule.action === "require_approval" && !cfg.dashboard.enabled && rule.match.metadata === void 0) {
+      const effectiveChannel = rule.approval?.channel ?? "dashboard";
+      if (resolvesToDashboard(effectiveChannel)) {
+        ctx.addIssue({
+          code: "custom",
+          path: rule.approval?.channel !== void 0 ? ["policies", "rules", ruleIndex, "approval", "channel"] : ["policies", "rules", ruleIndex, "action"],
+          message: "This rule routes approvals to the dashboard channel, but dashboard.enabled is false \u2014 the ticket could never be resolved and would always time out. Enable the dashboard or route approval.channel to a Slack channel."
+        });
+      }
+      const escalationAfterMs = rule.approval?.escalation_after !== void 0 ? parseDuration(rule.approval.escalation_after) : void 0;
+      const effectiveTimeoutMs = parseDuration(rule.approval?.timeout ?? cfg.approval.timeout);
+      const escalationCanFire = escalationAfterMs !== void 0 && escalationAfterMs > 0 && escalationAfterMs < effectiveTimeoutMs;
+      for (const [delegateIndex, delegate] of (rule.approval?.delegates ?? []).entries()) {
+        if (escalationCanFire && knownChannelKeys.has(delegate) && resolvesToDashboard(delegate)) {
+          ctx.addIssue({
+            code: "custom",
+            path: ["policies", "rules", ruleIndex, "approval", "delegates", delegateIndex],
+            message: "This rule escalates approvals to a dashboard channel, but dashboard.enabled is false \u2014 the delegate could never resolve the ticket. Enable the dashboard or delegate to a Slack channel."
+          });
+        }
+      }
+    }
     const delegates = rule.approval?.delegates;
     if (!delegates) continue;
     for (const [delegateIndex, delegate] of delegates.entries()) {
@@ -516,6 +577,7 @@ var helioConfigSchema = helioConfigBaseSchema.superRefine((cfg, ctx) => {
     }
   }
 });
+var helioConfigSchema = z.preprocess(stripRootExtensionKeys, helioConfigRefinedSchema);
 
 // src/config/loader.ts
 import { readFile } from "fs/promises";
@@ -578,7 +640,9 @@ async function loadConfig(filePath, env) {
   const interpolated = interpolateEnvVars(parsed, env);
   const result = helioConfigSchema.safeParse(interpolated);
   if (!result.success) {
-    const details = formatZodErrors(result.error);
+    const details = formatZodErrors(result.error).map(
+      (d) => d.path === "" ? { ...d, path: "(top level)" } : d
+    );
     const count = details.length;
     throw new ConfigError(
       `Invalid configuration (${String(count)} error${count === 1 ? "" : "s"})`,
@@ -699,7 +763,7 @@ function compileToolMatcher(pattern, ruleIndex, ruleName) {
     throw new PolicyParseError(`invalid glob pattern "${pattern}": ${message}`, ruleIndex, ruleName);
   }
 }
-function flattenInputConditions(input, ruleIndex, ruleName) {
+function flattenInputConditionsWith(input, makeError) {
   const conditions = [];
   for (const [path, conditionObj] of Object.entries(input)) {
     for (const op of INPUT_OPERATORS) {
@@ -707,17 +771,11 @@ function flattenInputConditions(input, ruleIndex, ruleName) {
       if (value === void 0) continue;
       if (op === "regex") {
         if (typeof value !== "string") {
-          throw new PolicyParseError(
-            `regex value for input path "${path}" must be a string`,
-            ruleIndex,
-            ruleName
-          );
+          throw makeError(`regex value for input path "${path}" must be a string`);
         }
         if (!safeRegex(value)) {
-          throw new PolicyParseError(
-            `catastrophic regex "${value}" for input path "${path}": pattern is vulnerable to ReDoS and has been rejected. Rewrite with bounded quantifiers (e.g. {1,100}) or split into simpler rules.`,
-            ruleIndex,
-            ruleName
+          throw makeError(
+            `catastrophic regex "${value}" for input path "${path}": pattern is vulnerable to ReDoS and has been rejected. Rewrite with bounded quantifiers (e.g. {1,100}) or split into simpler rules.`
           );
         }
         let compiledRegex;
@@ -725,11 +783,7 @@ function flattenInputConditions(input, ruleIndex, ruleName) {
           compiledRegex = new RegExp(value);
         } catch (err) {
           const msg = err instanceof Error ? err.message : String(err);
-          throw new PolicyParseError(
-            `invalid regex "${value}" for input path "${path}": ${msg}`,
-            ruleIndex,
-            ruleName
-          );
+          throw makeError(`invalid regex "${value}" for input path "${path}": ${msg}`);
         }
         conditions.push({ path, operator: op, value, regex: compiledRegex });
       } else {
@@ -739,6 +793,12 @@ function flattenInputConditions(input, ruleIndex, ruleName) {
   }
   return conditions;
 }
+function flattenInputConditions(input, ruleIndex, ruleName) {
+  return flattenInputConditionsWith(
+    input,
+    (message) => new PolicyParseError(message, ruleIndex, ruleName)
+  );
+}
 function flattenMetadataConditions(metadata, ruleIndex, ruleName) {
   const conditions = [];
   for (const [key, raw] of Object.entries(metadata)) {
@@ -872,21 +932,30 @@ function compileBudgets(budgets) {
     onExceed: budget.on_exceed,
     ...budget.approval !== void 0 && { approval: compileApproval(budget.approval) },
     contributors: budget.contributors.map(
-      (contributor) => compileContributor(contributor, budget.name)
+      (contributor, index) => compileContributor(contributor, budget.name, index)
     )
   }));
 }
-function compileContributor(contributor, budgetName) {
+function compileContributor(contributor, budgetName, index) {
+  let tool;
   try {
-    const test = picomatch2(contributor.tool, { dot: true });
-    return { tool: { pattern: contributor.tool, test }, field: contributor.field };
+    const test = picomatch2(contributor.match.tool, { dot: true });
+    tool = { pattern: contributor.match.tool, test };
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
     throw new BudgetParseError(
-      `invalid contributor glob "${contributor.tool}": ${message}`,
+      `invalid contributor glob "${contributor.match.tool}": ${message}`,
       budgetName
     );
   }
+  const input = contributor.match.input !== void 0 ? flattenInputConditionsWith(
+    contributor.match.input,
+    (message) => new BudgetParseError(`contributor ${String(index)}: ${message}`, budgetName)
+  ) : void 0;
+  return {
+    match: { tool, ...input !== void 0 && { input } },
+    field: contributor.field
+  };
 }
 
 // src/server.ts
@@ -973,6 +1042,12 @@ function parseJsonRpcRequest(body) {
   };
 }
 
+// src/transport/content-type.ts
+function isJsonContentType(header) {
+  const [essence = ""] = (header ?? "").split(";");
+  return essence.trim().toLowerCase() === "application/json";
+}
+
 // src/transport/forward-headers.ts
 function buildForwardHeaders(requestHeaders, allowlist) {
   const forwardHeaders = {};
@@ -1106,8 +1181,7 @@ function createStreamableHttpRoute(forwarder, options = {}) {
   const app = new Hono();
   const forwardHeaderAllowlist = options.forwardHeadersAllowlist ?? [];
   app.post("/", async (c) => {
-    const contentType = c.req.header("content-type") ?? "";
-    if (!contentType.includes("application/json")) {
+    if (!isJsonContentType(c.req.header("content-type"))) {
       return c.json(
         makeJsonRpcError(null, INVALID_REQUEST, "Content-Type must be application/json"),
         415
@@ -1240,8 +1314,7 @@ function createSseRoute(forwarder, options = {}) {
     if (!session) {
       return c.json(makeJsonRpcError(null, INVALID_REQUEST, "unknown session"), 404);
     }
-    const contentType = c.req.header("content-type") ?? "";
-    if (!contentType.includes("application/json")) {
+    if (!isJsonContentType(c.req.header("content-type"))) {
       return c.json(
         makeJsonRpcError(null, INVALID_REQUEST, "Content-Type must be application/json"),
         415
@@ -2910,11 +2983,9 @@ function extractTools(body) {
 
 // src/feedback/self-repair.ts
 function ruleInfo(rule) {
-  const index = rule?.index ?? null;
   return {
     rule: rule?.name ?? null,
-    ruleIndex: index,
-    rule_index: index
+    rule_index: rule?.index ?? null
   };
 }
 function buildPolicyDeniedFeedback(decision) {
@@ -4392,29 +4463,33 @@ var GovernedForwarder = class {
           if (this.spendLimiter && decision.matchedRule?.limits?.maxSpend) {
             const maxSpend = decision.matchedRule.limits.maxSpend;
             const rawAmount = resolvePath(maxSpend.field, toolArguments ?? {});
-            if (typeof rawAmount === "number") {
-              if (!Number.isFinite(rawAmount) || rawAmount < 0) {
-                console.error(
-                  `[helio] Warning: spend limit field "${maxSpend.field}" resolved to invalid amount (${String(rawAmount)}) for tool "${toolName}" in dry-run, denying`
-                );
-                wouldForward = false;
-                limitsOk = false;
-              } else {
-                const key = this.buildSpendLimitKey(
-                  maxSpend.key,
-                  toolName,
-                  request,
-                  decision.matchedRule.index
-                );
-                const peekResult = this.spendLimiter.peek({
-                  key,
-                  amount: rawAmount,
-                  limit: maxSpend.limit,
-                  windowMs: maxSpend.windowMs
-                });
-                wouldForward = peekResult.allowed;
-                limitsOk = peekResult.allowed;
-              }
+            if (typeof rawAmount !== "number") {
+              console.error(
+                `[helio] Warning: spend limit field "${maxSpend.field}" did not resolve to a number for tool "${toolName}" (got ${typeof rawAmount}) in dry-run, denying`
+              );
+              wouldForward = false;
+              limitsOk = false;
+            } else if (!Number.isFinite(rawAmount) || rawAmount < 0) {
+              console.error(
+                `[helio] Warning: spend limit field "${maxSpend.field}" resolved to invalid amount (${String(rawAmount)}) for tool "${toolName}" in dry-run, denying`
+              );
+              wouldForward = false;
+              limitsOk = false;
+            } else {
+              const key = this.buildSpendLimitKey(
+                maxSpend.key,
+                toolName,
+                request,
+                decision.matchedRule.index
+              );
+              const peekResult = this.spendLimiter.peek({
+                key,
+                amount: rawAmount,
+                limit: maxSpend.limit,
+                windowMs: maxSpend.windowMs
+              });
+              wouldForward = peekResult.allowed;
+              limitsOk = peekResult.allowed;
             }
           }
           break;
@@ -5082,16 +5157,26 @@ var BudgetEngine = class {
   /**
    * Resolve which budgets a call feeds and how much it charges each.
    *
-   * A budget participates when any contributor glob matches the tool name;
-   * the FIRST matching contributor (config order) supplies the amount field.
-   * A missing, non-numeric, negative, or non-finite amount fails closed as a
-   * `failures` entry — the caller must deny the call.
+   * A contributor participates when its tool glob matches the tool name AND
+   * every `match.input` condition holds (absent conditions means the glob
+   * alone decides); the FIRST participating contributor (config order, over
+   * that combined predicate) supplies the amount field. A call that matches
+   * the glob but not the conditions simply does not feed the budget — no
+   * charge, no failure. Once a contributor is selected, a missing,
+   * non-numeric, negative, or non-finite amount fails closed as a `failures`
+   * entry — the caller must deny the call.
    */
   resolveCharges(ctx) {
     const charges = [];
     const failures = [];
+    const matchCtx = {
+      toolName: ctx.toolName,
+      ...ctx.toolArguments !== void 0 && { toolArguments: ctx.toolArguments }
+    };
     for (const budget of this.budgets.values()) {
-      const contributor = budget.contributors.find((c) => c.tool.test(ctx.toolName));
+      const contributor = budget.contributors.find(
+        (c) => c.match.tool.test(ctx.toolName) && (c.match.input === void 0 || matchInput(c.match.input, matchCtx))
+      );
       if (!contributor) continue;
       const raw = resolvePath(contributor.field, ctx.toolArguments ?? {});
       if (typeof raw !== "number" || !Number.isFinite(raw) || raw < 0) {
@@ -6085,6 +6170,96 @@ var AuditStore = class {
   }
 };
 
+// src/audit/csv.ts
+var CSV_HEADERS = [
+  "id",
+  "timestamp",
+  "session_id",
+  "agent_id",
+  "tool_name",
+  "tool_input",
+  "policy_decision",
+  "block_reason",
+  "matched_rule",
+  "evidence_chain",
+  "approval_status",
+  "approved_by",
+  "upstream_response",
+  "upstream_error",
+  "upstream_http_status",
+  "upstream_latency_ms",
+  "total_duration_ms",
+  "approval_wait_ms",
+  "proxy_compute_ms",
+  "flagged_destructive",
+  "dry_run",
+  "created_at",
+  "environment",
+  "matched_rule_index",
+  "record_kind",
+  "origin",
+  "metadata"
+];
+var FORMULA_PREFIXES = /^[=+\-@\t\r]/;
+function csvEscape(value) {
+  const needsQuote = value.includes(",") || value.includes("\n") || value.includes('"');
+  const needsFormulaGuard = FORMULA_PREFIXES.test(value);
+  let out = value;
+  if (needsFormulaGuard) out = `'${out}`;
+  if (needsQuote || needsFormulaGuard) out = `"${out.replace(/"/g, '""')}"`;
+  return out;
+}
+function recordToRow(record) {
+  return CSV_HEADERS.map((h) => {
+    const val = record[h];
+    if (val === null || val === void 0) return "";
+    if (typeof val === "boolean") return val ? "true" : "false";
+    if (typeof val === "number") return String(val);
+    if (typeof val === "string") return csvEscape(val);
+    if (typeof val === "object") return csvEscape(JSON.stringify(val));
+    return "";
+  }).join(",");
+}
+function recordsToCsv(records) {
+  const lines = [CSV_HEADERS.join(",")];
+  for (const r of records) {
+    lines.push(recordToRow(r));
+  }
+  return lines.join("\n");
+}
+
+// src/budget/csv.ts
+var BUDGET_EVENT_CSV_HEADERS = [
+  "id",
+  "budget_name",
+  "bucket_key",
+  "kind",
+  "amount",
+  "currency",
+  "tool_name",
+  "origin",
+  "audit_record_id",
+  "timestamp",
+  "timestamp_ms",
+  "created_at"
+];
+function eventToRow(event) {
+  return BUDGET_EVENT_CSV_HEADERS.map((h) => {
+    const val = event[h];
+    if (val === null || val === void 0) return "";
+    if (typeof val === "number") return String(val);
+    if (typeof val === "string") return csvEscape(val);
+    return "";
+  }).join(",");
+}
+function budgetEventsToCsv(events) {
+  const lines = [BUDGET_EVENT_CSV_HEADERS.join(",")];
+  for (const e of events) {
+    lines.push(eventToRow(e));
+  }
+  return lines.join("\n");
+}
+
 // src/evidence/store.ts
 var EvidenceStore = class _EvidenceStore {
   static EVIDENCE_ALLOWLIST_PREVIEW_LIMIT = 20;
@@ -6817,6 +6992,7 @@ var GovernanceService = class {
     let wire;
     const plans = [];
     let limitsBlock;
+    let ruleLimitOk = true;
     const reservedThisCall = [];
     const reserve = (key) => {
       const preexisting = this.senderKeys.has(key);
@@ -6830,6 +7006,15 @@ var GovernanceService = class {
     const senderId = senderIdOf(req.metadata);
     if (pipeline.isDryRun) {
       wire = "dry_run";
+      if (decision.action === "rate_limit") {
+        const planned = this.planRate(decision, toolName, req.session_id, senderId);
+        if (planned?.block) limitsBlock = { rate: planned.block };
+        ruleLimitOk = planned?.allowed ?? true;
+      } else if (decision.action === "spend_limit") {
+        const planned = this.planSpend(decision, toolName, req.session_id, req.arguments, senderId);
+        if (planned?.block) limitsBlock = { spend: planned.block };
+        ruleLimitOk = planned?.allowed ?? true;
+      }
     } else if (decision.action === "deny") {
       wire = "deny";
     } else if (decision.action === "require_approval") {
@@ -6954,9 +7139,9 @@ var GovernanceService = class {
     if (limitsBlock) responseBody["limits"] = limitsBlock;
     if (wire === "dry_run") {
       responseBody["dry_run"] = {
-        would_forward: decision.action === "allow" && !pipeline.evidenceBlocked && budgetDryRunOk,
+        would_forward: (decision.action === "allow" || (decision.action === "rate_limit" || decision.action === "spend_limit") && ruleLimitOk) && !pipeline.evidenceBlocked && budgetDryRunOk,
         evidence_satisfied: !pipeline.evidenceBlocked,
-        limits_ok: budgetDryRunOk
+        limits_ok: ruleLimitOk && budgetDryRunOk
       };
     }
     if (pipeline.driftEvent) {
@@ -6978,7 +7163,11 @@ var GovernanceService = class {
         flaggedDestructive: pipeline.flaggedDestructive,
         dryRun: wire === "dry_run",
         recordKind: "tool_call",
-        limitsChain: limitsBlock
+        // A CLONE, for the same reason budgetsAtEvaluate is one below:
+        // limitsBlock is also the response's `limits`, and the audit writer
+        // buffers records by reference until flush — a direct embedder
+        // editing the returned body must not be able to rewrite evidence.
+        limitsChain: limitsBlock ? structuredClone(limitsBlock) : void 0
       });
       this.tombstones.set(evaluationId, {
         auditRecordId: auditId,
@@ -7480,6 +7669,7 @@ var GovernanceService = class {
         this.approvalRouter?.resolveNativeTicket(entry.approvalTicketId, "timeout");
         this.snapshotTicketResolution(entry);
       }
+      const committed = entry.commitState;
       const resolution = entry.ticketResolution;
       const approvalContext = entry.approvalTicketId && resolution && (resolution.denialReason || resolution.escalatedAt) ? {
         ticket_id: entry.approvalTicketId,
@@ -7490,6 +7680,7 @@ var GovernanceService = class {
         } : {}
       } : void 0;
       const auditId = this.writeAudit({
+        ...committed ? { id: committed.auditId } : {},
         timestampIso: entry.timestampIso,
         origin: entry.origin,
         agentId: entry.agentId,
@@ -7507,8 +7698,9 @@ var GovernanceService = class {
         approvalStatus: resolution?.status ?? null,
         approvedBy: resolution?.resolvedBy ?? null,
         approvalContext,
-        limitsChain: !entry.commitState && entry.budgetsAtEvaluate ? { budgets: entry.budgetsAtEvaluate } : void 0,
-        sidebandUnreported: true
+        limitsChain: committed ? committed.limitsChain : entry.budgetsAtEvaluate ? { budgets: entry.budgetsAtEvaluate } : void 0,
+        sidebandUnreported: true,
+        sidebandCommitted: committed !== void 0
       });
       this.discardPending(entry);
       this.tombstones.set(entry.evaluationId, {
@@ -7518,7 +7710,7 @@ var GovernanceService = class {
         expiresAtMs: now + this.ttlMs
       });
       console.error(
-        `[helio] Sideband evaluation ${entry.evaluationId} expired without /audit (origin=${entry.origin}, tool=${entry.toolName}) \u2014 recorded as evaluation_expired`
+        committed ? `[helio] Sideband evaluation ${entry.evaluationId} expired after a failed /audit finalization (origin=${entry.origin}, tool=${entry.toolName}) \u2014 recorded as evaluation_expired under the committed audit id` : `[helio] Sideband evaluation ${entry.evaluationId} expired without /audit (origin=${entry.origin}, tool=${entry.toolName}) \u2014 recorded as evaluation_expired`
       );
       return "expired";
     }
@@ -7700,7 +7892,13 @@ var GovernanceService = class {
     const blockReason = deriveBlockReason(args);
     let evidenceChain = args.limitsChain ?? null;
     if (args.sidebandUnreported) {
-      evidenceChain = { ...evidenceChain ?? {}, sideband: { unreported: true } };
+      evidenceChain = {
+        ...evidenceChain ?? {},
+        sideband: {
+          unreported: true,
+          ...args.sidebandCommitted ? { committed: true } : {}
+        }
+      };
     }
     if (args.approvalContext) {
       evidenceChain = { ...evidenceChain ?? {}, approval: { ...args.approvalContext } };
@@ -9022,64 +9220,6 @@ import { cors } from "hono/cors";
 import { serveStatic } from "@hono/node-server/serve-static";
 import { streamSSE } from "hono/streaming";
 
-// src/audit/csv.ts
-var CSV_HEADERS = [
-  "id",
-  "timestamp",
-  "session_id",
-  "agent_id",
-  "tool_name",
-  "tool_input",
-  "policy_decision",
-  "block_reason",
-  "matched_rule",
-  "evidence_chain",
-  "approval_status",
-  "approved_by",
-  "upstream_response",
-  "upstream_error",
-  "upstream_http_status",
-  "upstream_latency_ms",
-  "total_duration_ms",
-  "approval_wait_ms",
-  "proxy_compute_ms",
-  "flagged_destructive",
-  "dry_run",
-  "created_at",
-  "environment",
-  "matched_rule_index",
-  "record_kind",
-  "origin",
-  "metadata"
-];
-var FORMULA_PREFIXES = /^[=+\-@\t\r]/;
-function csvEscape(value) {
-  const needsQuote = value.includes(",") || value.includes("\n") || value.includes('"');
-  const needsFormulaGuard = FORMULA_PREFIXES.test(value);
-  let out = value;
-  if (needsFormulaGuard) out = `'${out}`;
-  if (needsQuote || needsFormulaGuard) out = `"${out.replace(/"/g, '""')}"`;
-  return out;
-}
-function recordToRow(record) {
-  return CSV_HEADERS.map((h) => {
-    const val = record[h];
-    if (val === null || val === void 0) return "";
-    if (typeof val === "boolean") return val ? "true" : "false";
-    if (typeof val === "number") return String(val);
-    if (typeof val === "string") return csvEscape(val);
-    if (typeof val === "object") return csvEscape(JSON.stringify(val));
-    return "";
-  }).join(",");
-}
-function recordsToCsv(records) {
-  const lines = [CSV_HEADERS.join(",")];
-  for (const r of records) {
-    lines.push(recordToRow(r));
-  }
-  return lines.join("\n");
-}
-
 // src/dashboard/session.ts
 import { createHash as createHash3, createHmac as createHmac3, randomBytes, timingSafeEqual as timingSafeEqual3 } from "crypto";
 var DashboardSessionStore = class {
@@ -9237,6 +9377,10 @@ var budgetEventsQuerySchema = z8.object({
   limit: clampedQueryInt(50, 1, LIST_MAX_PAGE_SIZE),
   offset: clampedQueryInt(0, 0, Number.MAX_SAFE_INTEGER)
 });
+var budgetEventsExportQuerySchema = z8.object({
+  format: z8.preprocess((value) => value === "csv" ? "csv" : "json", z8.enum(["json", "csv"])),
+  limit: clampedQueryInt(EXPORT_MAX_RECORDS, 1, EXPORT_MAX_RECORDS)
+});
 var analyticsQuerySchema = z8.object({
   from: optionalQueryString,
   to: optionalQueryString
@@ -9548,6 +9692,27 @@ function createDashboardAppWithLifecycle(deps, options) {
       offset: query.offset
     });
   });
+  app.get("/api/budgets/:name/events/export", (c) => {
+    const query = budgetEventsExportQuerySchema.parse(c.req.query());
+    const name = c.req.param("name");
+    const page = budgets?.listEventsForExport(name, query.limit) ?? { events: [], total: 0 };
+    const safeName = name.replace(/[^A-Za-z0-9_-]/g, "").slice(0, 64);
+    const filename = safeName ? `helio-budget-${safeName}-events` : "helio-budget-events";
+    if (query.format === "csv") {
+      return new Response(budgetEventsToCsv(page.events), {
+        headers: {
+          "content-type": "text/csv; charset=utf-8",
+          "content-disposition": `attachment; filename="${filename}.csv"`
+        }
+      });
+    }
+    return new Response(JSON.stringify(page.events, null, 2), {
+      headers: {
+        "content-type": "application/json",
+        "content-disposition": `attachment; filename="${filename}.json"`
+      }
+    });
+  });
   app.get("/api/analytics", (c) => {
     const query = analyticsQuerySchema.parse(c.req.query());
     const now = /* @__PURE__ */ new Date();