@project-ava-supernova/core 0.2.71

package/dist/audit/cost.js

@@ -0,0 +1,170 @@
+// Cost attribution for audit entries.
+//
+// Two billing models, two unit conventions:
+//   - Platform mode: charge in credits via creditsForTurn() — same math
+//     the server bills with, so the audit row's credit number matches
+//     the actual charge byte-for-byte.
+//   - BYOK mode: estimate USD from the provider's published per-token
+//     rate × the call's token counts. Rates live in PROVIDER_USD_RATES
+//     below — keep this small + visible rather than importing from a
+//     bigger model registry, since the bench repo is already the
+//     auditable source of truth for model facts.
+import { creditsForTurn } from '../billing/credits.js';
+/** BYOK provider rate cards. Sourced from each provider's public pricing
+ *  page — verify before adding entries. Update in PRs only, never via
+ *  silent commits, so the rate-card history is auditable in git blame.
+ *  Last verified: 2026-08-16 — every id below diffed against the provider
+ *  catalogues in src/providers/<name>/models.ts, which are themselves checked
+ *  against the live /models endpoints and official pricing pages.
+ *
+ *  That diff is worth re-running rather than eyeballing. On 2026-08-16 it
+ *  found three prices that disagreed with the catalogue (qwen3.5-plus,
+ *  qwen3.5-flash, mistral-small-4), six dead Anthropic ids, and three models
+ *  shipped to BYOK with no rate at all. None of it was visible by reading. */
+const PROVIDER_USD_RATES = {
+    // MiniMax was absent entirely until 2026-07-17, so BYOK MiniMax turns
+    // costed at $0.00 in the audit rather than being estimated.
+    minimax: {
+        // M3 ≤512k rate ("Permanent 50% off"); >512k turns bill at 2x this.
+        'MiniMax-M3': { inputPerMillion: 0.30, outputPerMillion: 1.20 },
+        'MiniMax-M2.7': { inputPerMillion: 0.30, outputPerMillion: 1.20 },
+        'MiniMax-M2.7-highspeed': { inputPerMillion: 0.60, outputPerMillion: 2.40 },
+    },
+    deepseek: {
+        // Off-peak rates from the 2026-08-16 tariff. Peak (01:00-04:00 and
+        // 06:00-10:00 UTC) is exactly double both figures.
+        'deepseek-v4-pro': { inputPerMillion: 0.66, outputPerMillion: 1.98 },
+        'deepseek-v4-flash': { inputPerMillion: 0.22, outputPerMillion: 0.66 },
+    },
+    kimi: {
+        // All four verified against Moonshot's per-model pricing pages 2026-07-17.
+        // K2.6/K2.5 were previously 0.60/2.40 and 0.55/2.20 here — both wrong, and
+        // both disagreed with providers/kimi/models.ts. Cost audits under-reported
+        // Kimi spend by ~37% until this was corrected.
+        'kimi-k3': { inputPerMillion: 3.00, outputPerMillion: 15.00 },
+        'kimi-k2.7-code': { inputPerMillion: 0.95, outputPerMillion: 4.00 },
+        'kimi-k2.6': { inputPerMillion: 0.95, outputPerMillion: 4.00 },
+        // UNREACHABLE — retained only so existing receipts still cost out.
+        // Dropped from the catalogue ahead of Moonshot's 31 August switch-off, so
+        // nothing can select it and no new call can produce it. The rate stays
+        // purely so audit entries recorded while it was live keep their real cost
+        // instead of silently restating as free. Not a general keep-everything
+        // rule: k2.6 above is a different case, hidden from the picker but still
+        // reachable by fallback, so it can produce new charges.
+        'kimi-k2.5': { inputPerMillion: 0.60, outputPerMillion: 3.00 },
+    },
+    qwen: {
+        'qwen3.8-max': { inputPerMillion: 2.00, outputPerMillion: 6.00 }, // flagship from 2026-08-03, DashScope intl
+        // UNREACHABLE — retained only so existing receipts still cost out.
+        // Retired from the catalogue 2026-08-09 in favour of 3.8 Max, which is
+        // cheaper and more capable, so nothing routes here any more.
+        'qwen3.7-max': { inputPerMillion: 2.50, outputPerMillion: 7.50 },
+        'qwen3.7-plus': { inputPerMillion: 0.40, outputPerMillion: 1.60 },
+        // Was $0.40 in — double the real rate, so BYOK 3.5 Plus turns were
+        // costed at twice what they actually cost. Corrected 2026-08-16.
+        'qwen3.5-plus': { inputPerMillion: 0.20, outputPerMillion: 1.20 },
+        // Tiered upstream ($0.03/$0.13 <32K, $0.10/$0.40 <256K, $0.20/$0.80 <1M).
+        // Middle tier: a real turn clears 32K almost at once.
+        'qwen3-coder-next': { inputPerMillion: 0.12, outputPerMillion: 0.80 },
+        'qwen3-coder-flash': { inputPerMillion: 0.195, outputPerMillion: 0.975 },
+        'qwen3.7-flash': { inputPerMillion: 0.10, outputPerMillion: 0.40 },
+        // Was $0.15 out against a real $0.40 — a 2.7x under-report on the
+        // highest-volume model we run. Corrected 2026-08-16.
+        'qwen3.5-flash': { inputPerMillion: 0.05, outputPerMillion: 0.40 },
+    },
+    xiaomi: {
+        // Absent entirely until 2026-08-16, so BYOK MiMo turns costed at $0.00
+        // — the same hole MiniMax had above.
+        'mimo-v2.5-pro': { inputPerMillion: 1.00, outputPerMillion: 3.00 },
+        'mimo-v2.5': { inputPerMillion: 0.40, outputPerMillion: 2.00 },
+    },
+    zhipu: {
+        'glm-5.2': { inputPerMillion: 1.40, outputPerMillion: 4.40 },
+        'glm-4.5-air': { inputPerMillion: 0.20, outputPerMillion: 1.10 },
+    },
+    mistral: {
+        'mistral-large-3': { inputPerMillion: 0.50, outputPerMillion: 1.50 },
+        'mistral-medium-3.5': { inputPerMillion: 1.50, outputPerMillion: 7.50 },
+        // Was $0.10/$0.30 against a real $0.15/$0.60 — Aurora's high-volume
+        // workhorse, under-reported on both figures. Corrected 2026-08-16.
+        'mistral-small-4': { inputPerMillion: 0.15, outputPerMillion: 0.60 },
+    },
+    // An anthropic block of six models sat here until 2026-08-16. Anthropic
+    // was removed across every surface on 13 August and no catalogue defines
+    // those ids any more, so the rates could never be reached: the lookup is
+    // keyed on a provider we no longer have. Removed rather than kept as
+    // history, unlike the retired ids below — those still cost out real logged
+    // usage, whereas these could only cost out a provider that is gone.
+    tencent: {
+        'hy3': { inputPerMillion: 0.15, outputPerMillion: 0.59 },
+        // UNREACHABLE — retained only so existing receipts still cost out.
+        // The April preview, replaced by the GA hy3 above.
+        'hy3-preview': { inputPerMillion: 0.063, outputPerMillion: 0.210 },
+    },
+    nvidia: {
+        'nvidia/nemotron-3-ultra-550b-a55b': { inputPerMillion: 0.50, outputPerMillion: 2.20 },
+        // Added 2026-08-16, the same day it reached the BYOK surfaces. Shipping a
+        // model without its rate is how the MiniMax and MiMo holes happened.
+        'nvidia/nemotron-3.5-lightning-30b-a3b': { inputPerMillion: 0.05, outputPerMillion: 0.20 },
+    },
+};
+/** Compute the cost record for an audit entry. Tools that don't carry
+ *  token counts (file_read, ls, etc.) get an empty cost — they're free
+ *  in both billing models. Returns undefined when there's nothing to
+ *  attribute, so the receipt UI can render a dash instead of "$0.00". */
+export function computeCost(opts) {
+    const { mode, inputTokens = 0, outputTokens = 0, provider, model, cacheHit } = opts;
+    const tokens = inputTokens + outputTokens;
+    if (tokens === 0)
+        return undefined;
+    if (mode === 'platform') {
+        const { credits } = creditsForTurn('chat_turn', { inputTokens, outputTokens, model, cachedTokens: cacheHit ? inputTokens : 0 });
+        return {
+            mode: 'platform',
+            credits,
+            tokens: { input: inputTokens, output: outputTokens },
+            provider,
+            model,
+        };
+    }
+    // BYOK — estimate USD from provider rate card.
+    const usd = estimateByokUsd(provider, model, inputTokens, outputTokens);
+    return {
+        mode: 'byok',
+        usd,
+        tokens: { input: inputTokens, output: outputTokens },
+        provider,
+        model,
+    };
+}
+/** Returns undefined — NOT zero — when there is no rate for the model.
+ *
+ *  This used to return 0, which formatCost then rendered as "$0.0000": a
+ *  receipt claiming a call was free when the truth was that nobody had
+ *  entered a price for it. That is how three separate holes stayed invisible
+ *  — MiniMax until 2026-07-17, then Xiaomi and Nemotron 3.5 Lightning until
+ *  2026-08-16 — because a missing model looked exactly like a free one.
+ *
+ *  undefined renders as "—", which is the honest answer. A cost audit that
+ *  under-reports is worse than one that admits a gap, because only the second
+ *  kind gets fixed. */
+function estimateByokUsd(provider, model, inputTokens, outputTokens) {
+    if (!provider || !model)
+        return undefined;
+    const rate = PROVIDER_USD_RATES[provider]?.[model];
+    if (!rate)
+        return undefined;
+    return (inputTokens / 1_000_000) * rate.inputPerMillion + (outputTokens / 1_000_000) * rate.outputPerMillion;
+}
+/** Format a cost record for display. Returns a short string suitable
+ *  for table cells: "12 credits", "$0.04", "—" when no cost data. */
+export function formatCost(cost) {
+    if (!cost)
+        return '—';
+    if (cost.mode === 'platform' && cost.credits != null)
+        return `${cost.credits} credit${cost.credits === 1 ? '' : 's'}`;
+    if (cost.mode === 'byok' && cost.usd != null)
+        return `$${cost.usd.toFixed(cost.usd >= 0.01 ? 4 : 6)}`;
+    return '—';
+}
+//# sourceMappingURL=cost.js.map

package/dist/audit/cost.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost.js","sourceRoot":"","sources":["../../src/audit/cost.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,4CAA4C;AAC5C,wEAAwE;AACxE,sEAAsE;AACtE,uCAAuC;AACvC,sEAAsE;AACtE,uEAAuE;AACvE,qEAAqE;AACrE,iEAAiE;AACjE,iDAAiD;AAEjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAUvD;;;;;;;;;;8EAU8E;AAC9E,MAAM,kBAAkB,GAAiD;IACvE,sEAAsE;IACtE,4DAA4D;IAC5D,OAAO,EAAE;QACP,oEAAoE;QACpE,YAAY,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;QAC/D,cAAc,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;QACjE,wBAAwB,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;KAC5E;IACD,QAAQ,EAAE;QACR,mEAAmE;QACnE,mDAAmD;QACnD,iBAAiB,EAAI,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;QACtE,mBAAmB,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;KACvE;IACD,IAAI,EAAE;QACJ,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,+CAA+C;QAC/C,SAAS,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE;QAC7D,gBAAgB,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;QACnE,WAAW,EAAE,EAAE,eAAe,EAAE,IAAI,EAAG,gBAAgB,EAAE,IAAI,EAAE;QAC/D,mEAAmE;QACnE,0EAA0E;QAC1E,uEAAuE;QACvE,0EAA0E;QAC1E,uEAAuE;QACvE,yEAAyE;QACzE,wDAAwD;QACxD,WAAW,EAAE,EAAE,eAAe,EAAE,IAAI,EAAG,gBAAgB,EAAE,IAAI,EAAE;KAChE;IACD,IAAI,EAAE;QACJ,aAAa,EAAG,EAAE,eAAe,EAAE,IAAI,EAAG,gBAAgB,EAAE,IAAI,EAAE,EAAE,2CAA2C;QAC/G,mEAAmE;QACnE,uEAAuE;QACvE,6DAA6D;QAC7D,aAAa,EAAG,EAAE,eAAe,EAAE,IAAI,EAAG,gBAAgB,EAAE,IAAI,EAAE;QAClE,cAAc,EAAE,EAAE,eAAe,EAAE,IAAI,EAAG,gBAAgB,EAAE,IAAI,EAAE;QAClE,mEAAmE;QACnE,iEAAiE;QACjE,cAAc,EAAE,EAAE,eAAe,EAAE,IAAI,EAAG,gBAAgB,EAAE,IAAI,EAAE;QAClE,0EAA0E;QAC1E,sDAAsD;QACtD,kBAAkB,EAAG,EAAE,eAAe,EAAE,IAAI,EAAG,gBAAgB,EAAE,IAAI,EAAE;QACvE,mBAAmB,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE;QACxE,eAAe,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;QAClE,kEAAkE;QAClE,qDAAqD;QACrD,eAAe,EAAC,EAAE,eAAe,EAAE,IAAI,EAAG,gBAAgB,EAAE,IAAI,EAAE;KACnE;IACD,MAAM,EAAE;QACN,uEAAuE;QACvE,qCAAqC;QACrC,eAAe,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;QAClE,WAAW,EAAM,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;KACnE;IACD,KAAK,EAAE;QACL,SAAS,EAAM,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;QAChE,aAAa,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;KACjE;IACD,OAAO,EAAE;QACP,iBAAiB,EAAK,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;QACvE,oBAAoB,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;QACvE,oEAAoE;QACpE,mEAAmE;QACnE,iBAAiB,EAAK,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;KACxE;IACD,wEAAwE;IACxE,yEAAyE;IACzE,yEAAyE;IACzE,qEAAqE;IACrE,2EAA2E;IAC3E,oEAAoE;IACpE,OAAO,EAAE;QACP,KAAK,EAAU,EAAE,eAAe,EAAE,IAAI,EAAG,gBAAgB,EAAE,IAAI,EAAE;QACjE,mEAAmE;QACnE,mDAAmD;QACnD,aAAa,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE;KACnE;IACD,MAAM,EAAE;QACN,mCAAmC,EAAG,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;QACvF,0EAA0E;QAC1E,qEAAqE;QACrE,uCAAuC,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;KAC3F;CACF,CAAC;AAEF;;;yEAGyE;AACzE,MAAM,UAAU,WAAW,CAAC,IAQ3B;IACC,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,CAAC,EAAE,YAAY,GAAG,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IACpF,MAAM,MAAM,GAAG,WAAW,GAAG,YAAY,CAAC;IAC1C,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAEnC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,MAAM,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChI,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,OAAO;YACP,MAAM,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE;YACpD,QAAQ;YACR,KAAK;SACN,CAAC;IACJ,CAAC;IAED,+CAA+C;IAC/C,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IACxE,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,GAAG;QACH,MAAM,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE;QACpD,QAAQ;QACR,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;;;;;;;;;uBAUuB;AACvB,SAAS,eAAe,CAAC,QAA4B,EAAE,KAAyB,EAAE,WAAmB,EAAE,YAAoB;IACzH,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,eAAe,GAAG,CAAC,YAAY,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC;AAC/G,CAAC;AAED;qEACqE;AACrE,MAAM,UAAU,UAAU,CAAC,IAA2B;IACpD,IAAI,CAAC,IAAI;QAAE,OAAO,GAAG,CAAC;IACtB,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI;QAAE,OAAO,GAAG,IAAI,CAAC,OAAO,UAAU,IAAI,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACtH,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI;QAAU,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9G,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/audit/export.d.ts

@@ -0,0 +1,30 @@
+import type { AuditEntry } from './types.js';
+/** Roll up the file-integrity verdicts across a set of entries — the proof
+ *  headline: of everything Ava changed, how much is still exactly as it left
+ *  it. Counts one verdict per mutation entry (a file edited twice counts
+ *  twice, matching the log). */
+export interface IntegrityRollup {
+    mutations: number;
+    files: number;
+    unchanged: number;
+    modified: number;
+    deleted: number;
+    unverifiable: number;
+}
+export declare function rollupIntegrity(entries: AuditEntry[]): IntegrityRollup;
+export interface ExportBundle {
+    /** ISO timestamp when the export was generated. */
+    generated_at: string;
+    /** Format the caller asked for. */
+    format: 'markdown' | 'json';
+    /** Suggested filename (no path). */
+    filename: string;
+    /** Mimetype for the save dialog. */
+    mimeType: string;
+    /** The actual content as a string. */
+    content: string;
+}
+/** Build an exportable bundle from a (filtered) entry list. The caller
+ *  decides which entries to include; the export bundler just formats. */
+export declare function buildExport(entries: AuditEntry[], format?: 'markdown' | 'json'): ExportBundle;
+//# sourceMappingURL=export.d.ts.map

package/dist/audit/export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.d.ts","sourceRoot":"","sources":["../../src/audit/export.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,UAAU,EAAmB,MAAM,YAAY,CAAC;AAI9D;;;gCAGgC;AAChC,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,eAAe,CAetE;AASD,MAAM,WAAW,YAAY;IAC3B,mDAAmD;IACnD,YAAY,EAAE,MAAM,CAAC;IACrB,mCAAmC;IACnC,MAAM,EAAE,UAAU,GAAG,MAAM,CAAC;IAC5B,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;yEACyE;AACzE,wBAAgB,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,MAAM,GAAE,UAAU,GAAG,MAAmB,GAAG,YAAY,CA+GzG"}

package/dist/audit/export.js

@@ -0,0 +1,155 @@
+// Export — bundle the audit log + a plain-language methodology + a
+// short README into a single artefact the user can hand to their
+// compliance team or just keep for personal records. Two output
+// formats:
+//   - Markdown: human-readable, opens in any editor, good for a
+//     quick "what did Ava do today" report
+//   - JSON: structured, good for ingest into another tool / SIEM
+//
+// Returns string blobs so the caller (extension webview / IDE) can
+// trigger a save dialog with the right filename + extension. We don't
+// directly write to disk here so the same helper works in any host
+// (browser-style download, Tauri save dialog, Node fs).
+import { formatCost } from './cost.js';
+import { summarise } from './summary.js';
+export function rollupIntegrity(entries) {
+    const r = { mutations: 0, files: 0, unchanged: 0, modified: 0, deleted: 0, unverifiable: 0 };
+    const paths = new Set();
+    for (const e of entries) {
+        if (!e.fileMutation?.path)
+            continue;
+        r.mutations++;
+        paths.add(e.fileMutation.path);
+        const v = e.integrity;
+        if (v === 'unchanged')
+            r.unchanged++;
+        else if (v === 'modified')
+            r.modified++;
+        else if (v === 'deleted')
+            r.deleted++;
+        else
+            r.unverifiable++;
+    }
+    r.files = paths.size;
+    return r;
+}
+const VERDICT_GLYPH = {
+    unchanged: '✅ unchanged',
+    modified: '⚠️ modified',
+    deleted: '🗑️ deleted',
+    unverifiable: '— unverifiable',
+};
+/** Build an exportable bundle from a (filtered) entry list. The caller
+ *  decides which entries to include; the export bundler just formats. */
+export function buildExport(entries, format = 'markdown') {
+    const generated_at = new Date().toISOString();
+    const datePart = generated_at.slice(0, 10);
+    if (format === 'json') {
+        return {
+            generated_at,
+            format: 'json',
+            filename: `ava-audit-${datePart}.json`,
+            mimeType: 'application/json',
+            content: JSON.stringify({
+                generated_at,
+                entry_count: entries.length,
+                summary: summarise(entries),
+                integrity: rollupIntegrity(entries),
+                entries,
+            }, null, 2),
+        };
+    }
+    // Markdown: human-readable receipt. Suitable for a compliance review
+    // or sharing with a manager. Includes summary + full entry list.
+    const summary = summarise(entries);
+    const lines = [];
+    lines.push(`# Ava Supernova — Audit Export`);
+    lines.push('');
+    lines.push(`**Generated:** ${generated_at}  `);
+    lines.push(`**Entries:** ${summary.total} tool calls  `);
+    lines.push(`**Failed:** ${summary.totalFailed}  `);
+    if (summary.totalCredits > 0)
+        lines.push(`**Total credits:** ${summary.totalCredits.toLocaleString()}  `);
+    if (summary.totalUsd > 0)
+        lines.push(`**Total estimated USD:** $${summary.totalUsd.toFixed(4)}  `);
+    const integ = rollupIntegrity(entries);
+    if (integ.mutations > 0) {
+        lines.push(`**Files changed:** ${integ.files} (${integ.mutations} edits) — ✅ ${integ.unchanged} unchanged · ⚠️ ${integ.modified} modified · 🗑️ ${integ.deleted} deleted${integ.unverifiable ? ` · — ${integ.unverifiable} unverifiable` : ''}  `);
+    }
+    lines.push('');
+    lines.push('## Top tool calls by cost');
+    lines.push('');
+    if (summary.topByCost.length === 0) {
+        lines.push('_No cost-attributable calls in this export._');
+    }
+    else {
+        lines.push('| Tool | Calls | Failed | Credits | USD |');
+        lines.push('|------|------:|------:|--------:|----:|');
+        for (const t of summary.topByCost) {
+            lines.push(`| ${t.toolName} | ${t.count} | ${t.failed} | ${t.credits.toLocaleString()} | ${t.usd > 0 ? '$' + t.usd.toFixed(4) : '—'} |`);
+        }
+    }
+    lines.push('');
+    lines.push('## Approval-method breakdown');
+    lines.push('');
+    lines.push('| Approval | Count | Failed | Fail rate |');
+    lines.push('|----------|------:|------:|----------:|');
+    for (const a of summary.perApproval) {
+        lines.push(`| ${a.approval} | ${a.count} | ${a.failed} | ${(a.failRate * 100).toFixed(1)}% |`);
+    }
+    lines.push('');
+    // File-integrity proof — the differentiator. Every file Ava changed, with
+    // the sha256 it left the file at and whether disk still matches. Only
+    // emitted when there are mutations to prove.
+    const mutationEntries = entries.filter(e => e.fileMutation?.path);
+    if (mutationEntries.length > 0) {
+        lines.push('## File integrity');
+        lines.push('');
+        lines.push('Every file Ava changed, verified against the copy on disk when this report was generated. `unchanged` means the file still matches the SHA-256 Ava left it at — cryptographic proof it was not altered afterwards.');
+        lines.push('');
+        lines.push('| When | File | Verdict | SHA-256 (after) |');
+        lines.push('|------|------|---------|-----------------|');
+        for (const e of mutationEntries) {
+            const fm = e.fileMutation;
+            const verdict = e.integrity ? VERDICT_GLYPH[e.integrity] : '— unverifiable';
+            const hash = fm.sha256After ? `\`${fm.sha256After.slice(0, 16)}…\`` : '—';
+            lines.push(`| ${new Date(e.timestamp).toLocaleString()} | \`${fm.path}\` | ${verdict} | ${hash} |`);
+        }
+        lines.push('');
+    }
+    lines.push('## Full entry log (newest first)');
+    lines.push('');
+    for (const e of entries) {
+        lines.push(`### ${new Date(e.timestamp).toLocaleString()} — ${e.toolName} (${e.status})`);
+        lines.push('');
+        lines.push(`- **Category:** ${e.category}`);
+        lines.push(`- **Risk:** ${e.riskLevel}`);
+        lines.push(`- **Approval:** ${e.approvalMethod}`);
+        lines.push(`- **Args summary:** ${e.argsSummary}`);
+        if (e.cost)
+            lines.push(`- **Cost:** ${formatCost(e.cost)}`);
+        if (e.result) {
+            lines.push('');
+            lines.push('**Result:**');
+            lines.push('');
+            lines.push('```');
+            lines.push(e.result.slice(0, 2000));
+            lines.push('```');
+        }
+        lines.push('');
+    }
+    lines.push('');
+    lines.push('---');
+    lines.push('');
+    lines.push('## About this report');
+    lines.push('');
+    lines.push('This is the complete audit log of every tool call Ava made on your machine within the selected filter. No personal data leaves your machine — this file is generated locally from `~/.ava/audit-log.jsonl` and shared only when you explicitly export it.');
+    return {
+        generated_at,
+        format: 'markdown',
+        filename: `ava-audit-${datePart}.md`,
+        mimeType: 'text/markdown',
+        content: lines.join('\n'),
+    };
+}
+//# sourceMappingURL=export.js.map

package/dist/audit/export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.js","sourceRoot":"","sources":["../../src/audit/export.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,iEAAiE;AACjE,gEAAgE;AAChE,WAAW;AACX,gEAAgE;AAChE,2CAA2C;AAC3C,iEAAiE;AACjE,EAAE;AACF,mEAAmE;AACnE,sEAAsE;AACtE,mEAAmE;AACnE,wDAAwD;AAGxD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAezC,MAAM,UAAU,eAAe,CAAC,OAAqB;IACnD,MAAM,CAAC,GAAoB,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IAC9G,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,IAAI;YAAE,SAAS;QACpC,CAAC,CAAC,SAAS,EAAE,CAAC;QACd,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAgC,CAAC,CAAC,SAAS,CAAC;QACnD,IAAI,CAAC,KAAK,WAAW;YAAE,CAAC,CAAC,SAAS,EAAE,CAAC;aAChC,IAAI,CAAC,KAAK,UAAU;YAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;aACnC,IAAI,CAAC,KAAK,SAAS;YAAE,CAAC,CAAC,OAAO,EAAE,CAAC;;YACjC,CAAC,CAAC,YAAY,EAAE,CAAC;IACxB,CAAC;IACD,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC;IACrB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,aAAa,GAAoC;IACrD,SAAS,EAAE,aAAa;IACxB,QAAQ,EAAE,aAAa;IACvB,OAAO,EAAE,aAAa;IACtB,YAAY,EAAE,gBAAgB;CAC/B,CAAC;AAeF;yEACyE;AACzE,MAAM,UAAU,WAAW,CAAC,OAAqB,EAAE,SAA8B,UAAU;IACzF,MAAM,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAE3C,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO;YACL,YAAY;YACZ,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,aAAa,QAAQ,OAAO;YACtC,QAAQ,EAAE,kBAAkB;YAC5B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;gBACtB,YAAY;gBACZ,WAAW,EAAE,OAAO,CAAC,MAAM;gBAC3B,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC;gBAC3B,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC;gBACnC,OAAO;aACR,EAAE,IAAI,EAAE,CAAC,CAAC;SACZ,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,iEAAiE;IACjE,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,kBAAkB,YAAY,IAAI,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,gBAAgB,OAAO,CAAC,KAAK,eAAe,CAAC,CAAC;IACzD,KAAK,CAAC,IAAI,CAAC,eAAe,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,YAAY,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,sBAAsB,OAAO,CAAC,YAAY,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAC1G,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC;QAAM,KAAK,CAAC,IAAI,CAAC,6BAA6B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvG,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,sBAAsB,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,SAAS,eAAe,KAAK,CAAC,SAAS,mBAAmB,KAAK,CAAC,QAAQ,mBAAmB,KAAK,CAAC,OAAO,WAAW,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,YAAY,eAAe,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACrP,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACxC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3I,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC3C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IACxD,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACjG,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,0EAA0E;IAC1E,sEAAsE;IACtE,6CAA6C;IAC7C,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAClE,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,oNAAoN,CAAC,CAAC;QACjO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC1D,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;YAChC,MAAM,EAAE,GAAG,CAAC,CAAC,YAAa,CAAC;YAC3B,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC;YAC5E,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;YAC1E,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,QAAQ,EAAE,CAAC,IAAI,QAAQ,OAAO,MAAM,IAAI,IAAI,CAAC,CAAC;QACtG,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1F,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,eAAe,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACnC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,2PAA2P,CAAC,CAAC;IAExQ,OAAO;QACL,YAAY;QACZ,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE,aAAa,QAAQ,KAAK;QACpC,QAAQ,EAAE,eAAe;QACzB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;KAC1B,CAAC;AACJ,CAAC"}

package/dist/audit/index.d.ts

@@ -0,0 +1,11 @@
+export { appendEntry, readEntries, summarise, AUDIT_LOG_PATH, AUDIT_DIR, } from './logger.js';
+export type { AuditSummary } from './logger.js';
+export { computeCost, formatCost, } from './cost.js';
+export { detectPatterns, } from './patterns.js';
+export type { Finding, FindingKind, FindingParams } from './patterns.js';
+export { annotateIntegrity, } from './integrity.js';
+export { classifySecurity, annotateSecurity, } from './security.js';
+export { buildExport, } from './export.js';
+export type { ExportBundle } from './export.js';
+export type { AuditEntry, AuditCost, AuditFilter, IntegrityStatus, SecurityConcern, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/audit/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/audit/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,WAAW,EACX,WAAW,EACX,SAAS,EACT,cAAc,EACd,SAAS,GACV,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,OAAO,EACL,WAAW,EACX,UAAU,GACX,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEzE,OAAO,EACL,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,YAAY,EACV,UAAU,EACV,SAAS,EACT,WAAW,EACX,eAAe,EACf,eAAe,GAChB,MAAM,YAAY,CAAC"}

package/dist/audit/index.js

@@ -0,0 +1,9 @@
+// Public surface for the audit module. Both extension AvaViewProvider
+// and IDE sidecar import from here.
+export { appendEntry, readEntries, summarise, AUDIT_LOG_PATH, AUDIT_DIR, } from './logger.js';
+export { computeCost, formatCost, } from './cost.js';
+export { detectPatterns, } from './patterns.js';
+export { annotateIntegrity, } from './integrity.js';
+export { classifySecurity, annotateSecurity, } from './security.js';
+export { buildExport, } from './export.js';
+//# sourceMappingURL=index.js.map

package/dist/audit/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/audit/index.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,oCAAoC;AAEpC,OAAO,EACL,WAAW,EACX,WAAW,EACX,SAAS,EACT,cAAc,EACd,SAAS,GACV,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,WAAW,EACX,UAAU,GACX,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,cAAc,GACf,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,WAAW,GACZ,MAAM,aAAa,CAAC"}

package/dist/audit/integrity.d.ts

@@ -0,0 +1,7 @@
+import type { AuditEntry } from './types.js';
+/** Return a NEW array with `integrity` set on every file-mutation entry that
+ *  carries a post-edit hash. Dedups by path — each unique file is read and
+ *  hashed at most once — so a long log touching a handful of files stays
+ *  cheap. Non-mutation entries pass through untouched. */
+export declare function annotateIntegrity(entries: AuditEntry[]): AuditEntry[];
+//# sourceMappingURL=integrity.d.ts.map

package/dist/audit/integrity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrity.d.ts","sourceRoot":"","sources":["../../src/audit/integrity.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,UAAU,EAAmB,MAAM,YAAY,CAAC;AAoB9D;;;0DAG0D;AAC1D,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,UAAU,EAAE,CA6BrE"}

package/dist/audit/integrity.js

@@ -0,0 +1,78 @@
+// File-integrity verification for the audit log.
+//
+// Every file_write / file_edit / document_author entry captures the sha256
+// of the file *right after* Ava changed it (fileMutation.sha256After). This
+// module compares that against the file on disk NOW, so the audit view can
+// tell the user, per row:
+//
+//   ✅ unchanged     — the file still matches what Ava left it as
+//   ⚠️ modified      — something changed it since (Ava's own later edit, the
+//                      user, another tool, or an external process)
+//   🗑 deleted       — the file no longer exists
+//   — unverifiable   — no post-hash captured (legacy entry) or file too large
+//
+// No other AI coding tool proves this. It's the difference between "trust me,
+// I edited it" and "here's cryptographic proof of exactly what's still mine."
+//
+// Runs host-side (Node): the extension host + the IDE sidecar both call
+// annotateIntegrity() before sending entries to their webview.
+import { createHash } from 'node:crypto';
+import { readFileSync, statSync } from 'node:fs';
+// Files above this size are marked 'unverifiable' rather than read+hashed on
+// every audit load — hashing a 100MB file to colour a badge isn't worth the
+// stall. 25MB comfortably covers source files, docs, configs.
+const MAX_VERIFY_BYTES = 25 * 1024 * 1024;
+/** Hash the file at `path` as it exists now, or return null if it's gone /
+ *  unreadable / too large. sha256 of the raw bytes matches the utf-8 digest
+ *  the write tools record, since they hash exactly the content they wrote. */
+function hashCurrent(path) {
+    try {
+        const st = statSync(path);
+        if (!st.isFile() || st.size > MAX_VERIFY_BYTES)
+            return null;
+        return createHash('sha256').update(readFileSync(path)).digest('hex');
+    }
+    catch {
+        return null; // ENOENT (deleted) or permission error → treated by caller
+    }
+}
+/** Return a NEW array with `integrity` set on every file-mutation entry that
+ *  carries a post-edit hash. Dedups by path — each unique file is read and
+ *  hashed at most once — so a long log touching a handful of files stays
+ *  cheap. Non-mutation entries pass through untouched. */
+export function annotateIntegrity(entries) {
+    const current = new Map();
+    const exists = new Map();
+    const hashOf = (path) => {
+        if (!current.has(path)) {
+            const h = hashCurrent(path);
+            current.set(path, h);
+            // Distinguish "gone" from "unreadable/too-large": only statSync failing
+            // with the file truly absent should read as deleted.
+            let present;
+            try {
+                present = statSync(path).isFile();
+            }
+            catch {
+                present = false;
+            }
+            exists.set(path, present);
+        }
+        return current.get(path);
+    };
+    return entries.map(e => {
+        const fm = e.fileMutation;
+        if (!fm?.path || !fm.sha256After)
+            return e; // nothing verifiable
+        const cur = hashOf(fm.path);
+        let integrity;
+        if (cur === null) {
+            integrity = exists.get(fm.path) ? 'unverifiable' : 'deleted';
+        }
+        else {
+            integrity = cur === fm.sha256After ? 'unchanged' : 'modified';
+        }
+        return { ...e, integrity };
+    });
+}
+//# sourceMappingURL=integrity.js.map

package/dist/audit/integrity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrity.js","sourceRoot":"","sources":["../../src/audit/integrity.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,2EAA2E;AAC3E,0BAA0B;AAC1B,EAAE;AACF,iEAAiE;AACjE,6EAA6E;AAC7E,mEAAmE;AACnE,iDAAiD;AACjD,8EAA8E;AAC9E,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,EAAE;AACF,wEAAwE;AACxE,+DAA+D;AAE/D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAGjD,6EAA6E;AAC7E,4EAA4E;AAC5E,8DAA8D;AAC9D,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE1C;;8EAE8E;AAC9E,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,GAAG,gBAAgB;YAAE,OAAO,IAAI,CAAC;QAC5D,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,2DAA2D;IAC1E,CAAC;AACH,CAAC;AAED;;;0DAG0D;AAC1D,MAAM,UAAU,iBAAiB,CAAC,OAAqB;IACrD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAC;IAE1C,MAAM,MAAM,GAAG,CAAC,IAAY,EAAiB,EAAE;QAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACrB,wEAAwE;YACxE,qDAAqD;YACrD,IAAI,OAAO,CAAC;YACZ,IAAI,CAAC;gBAAC,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,GAAG,KAAK,CAAC;YAAC,CAAC;YACrE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;IAC5B,CAAC,CAAC;IAEF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QACrB,MAAM,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC;QAC1B,IAAI,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,WAAW;YAAE,OAAO,CAAC,CAAC,CAAC,qBAAqB;QACjE,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,SAA0B,CAAC;QAC/B,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,GAAG,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC;QAChE,CAAC;QACD,OAAO,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/audit/logger.d.ts

@@ -0,0 +1,18 @@
+import type { AuditEntry, AuditFilter } from './types.js';
+/** Append one entry to the live log. Cheap — a single fs.appendFileSync.
+ *  Rotates the live file out to an archive when it crosses the size cap,
+ *  so subsequent appends start fresh. Returns silently on any I/O error
+ *  rather than throwing — audit logging should never break a tool call. */
+export declare function appendEntry(entry: AuditEntry): void;
+/** Read entries from the live log + every archive. Returns newest first.
+ *  Filter is applied in memory after parsing — fine for the v1 sizes
+ *  we expect (a power user might accumulate ~50K entries over a year,
+ *  each entry ~500 bytes, so the corpus parses in under a second). */
+export declare function readEntries(filter?: AuditFilter): AuditEntry[];
+export { summarise } from './summary.js';
+export type { AuditSummary } from './summary.js';
+/** Path of the live log — exposed so the export-to-zip tool can copy it
+ *  directly without round-tripping through readEntries. */
+export declare const AUDIT_LOG_PATH: string;
+export declare const AUDIT_DIR: string;
+//# sourceMappingURL=logger.d.ts.map

package/dist/audit/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/audit/logger.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAiB1D;;;2EAG2E;AAC3E,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAQnD;AAYD;;;sEAGsE;AACtE,wBAAgB,WAAW,CAAC,MAAM,GAAE,WAAgB,GAAG,UAAU,EAAE,CA2BlE;AAcD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD;2DAC2D;AAC3D,eAAO,MAAM,cAAc,QAAW,CAAC;AACvC,eAAO,MAAM,SAAS,QAAU,CAAC"}