@project-ava-supernova/core 0.2.71

package/dist/audit/logger.js

@@ -0,0 +1,113 @@
+// AuditLogger — append-only persistent audit log at ~/.ava/audit-log.jsonl.
+// Both extension AvaViewProvider + IDE sidecar import this, so the same
+// log is reachable from either surface (sign-in agnostic — works even
+// for BYOK no-account users since storage is local-only).
+//
+// Append + read are sync because audit operations are infrequent (one
+// per tool call, ~10s of writes/min at peak) and the user's home dir is
+// fast. No async wrapping needed; predictable behaviour matters more
+// than throughput here.
+import { existsSync, mkdirSync, appendFileSync, readFileSync, statSync, renameSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+const AVA_DIR = join(homedir(), '.ava');
+const LOG_PATH = join(AVA_DIR, 'audit-log.jsonl');
+const ARCHIVE_PATH_PREFIX = join(AVA_DIR, 'audit-log.archive-');
+/** Roll the log over when it crosses this size so a long-running install
+ *  doesn't end up with one giant file that takes seconds to read. The
+ *  archive lands at audit-log.archive-<unix-ts>.jsonl and is preserved
+ *  forever — the user can search across rotations via readEntries which
+ *  reads both the live file + every archive in date order. */
+const MAX_LIVE_SIZE_BYTES = 50 * 1024 * 1024; // 50 MB
+function ensureDir() {
+    try {
+        mkdirSync(AVA_DIR, { recursive: true });
+    }
+    catch { /* exists */ }
+}
+/** Append one entry to the live log. Cheap — a single fs.appendFileSync.
+ *  Rotates the live file out to an archive when it crosses the size cap,
+ *  so subsequent appends start fresh. Returns silently on any I/O error
+ *  rather than throwing — audit logging should never break a tool call. */
+export function appendEntry(entry) {
+    try {
+        ensureDir();
+        rotateIfNeeded();
+        appendFileSync(LOG_PATH, JSON.stringify(entry) + '\n', 'utf-8');
+    }
+    catch {
+        // Audit failures must not surface as errors to the agent loop.
+    }
+}
+function rotateIfNeeded() {
+    try {
+        const s = statSync(LOG_PATH);
+        if (s.size < MAX_LIVE_SIZE_BYTES)
+            return;
+        renameSync(LOG_PATH, `${ARCHIVE_PATH_PREFIX}${Date.now()}.jsonl`);
+    }
+    catch {
+        // ENOENT is the common case (log doesn't exist yet) — nothing to rotate.
+    }
+}
+/** Read entries from the live log + every archive. Returns newest first.
+ *  Filter is applied in memory after parsing — fine for the v1 sizes
+ *  we expect (a power user might accumulate ~50K entries over a year,
+ *  each entry ~500 bytes, so the corpus parses in under a second). */
+export function readEntries(filter = {}) {
+    ensureDir();
+    const sources = [];
+    // Archives oldest-first so when we sort newest-first at the end, the
+    // newest entries (always in the live file) come out on top.
+    try {
+        const archives = readdirSync(AVA_DIR)
+            .filter(f => f.startsWith('audit-log.archive-') && f.endsWith('.jsonl'))
+            .sort();
+        for (const a of archives)
+            sources.push(join(AVA_DIR, a));
+    }
+    catch { /* no archives */ }
+    if (existsSync(LOG_PATH))
+        sources.push(LOG_PATH);
+    const all = [];
+    for (const path of sources) {
+        try {
+            const raw = readFileSync(path, 'utf-8');
+            for (const line of raw.split('\n')) {
+                if (!line.trim())
+                    continue;
+                try {
+                    all.push(JSON.parse(line));
+                }
+                catch { /* skip malformed */ }
+            }
+        }
+        catch { /* skip unreadable */ }
+    }
+    const filtered = all.filter(e => matchesFilter(e, filter));
+    filtered.sort((a, b) => b.timestamp.localeCompare(a.timestamp));
+    return filter.limit && filter.limit > 0 ? filtered.slice(0, filter.limit) : filtered;
+}
+function matchesFilter(e, f) {
+    if (f.since && e.timestamp < f.since)
+        return false;
+    if (f.until && e.timestamp > f.until)
+        return false;
+    if (f.category && e.category !== f.category)
+        return false;
+    if (f.riskLevel && e.riskLevel !== f.riskLevel)
+        return false;
+    if (f.status && e.status !== f.status)
+        return false;
+    if (f.toolName && !e.toolName.toLowerCase().includes(f.toolName.toLowerCase()))
+        return false;
+    return true;
+}
+// summarise + AuditSummary moved to the pure ./summary.js (so export.ts stays
+// webview-safe). Re-exported here for existing importers.
+export { summarise } from './summary.js';
+/** Path of the live log — exposed so the export-to-zip tool can copy it
+ *  directly without round-tripping through readEntries. */
+export const AUDIT_LOG_PATH = LOG_PATH;
+export const AUDIT_DIR = AVA_DIR;
+//# sourceMappingURL=logger.js.map

package/dist/audit/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/audit/logger.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,wEAAwE;AACxE,sEAAsE;AACtE,0DAA0D;AAC1D,EAAE;AACF,sEAAsE;AACtE,wEAAwE;AACxE,qEAAqE;AACrE,wBAAwB;AAExB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACjH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAGlC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;AACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;AAClD,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;AAEhE;;;;8DAI8D;AAC9D,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;AAEtD,SAAS,SAAS;IAChB,IAAI,CAAC;QAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;AACzE,CAAC;AAED;;;2EAG2E;AAC3E,MAAM,UAAU,WAAW,CAAC,KAAiB;IAC3C,IAAI,CAAC;QACH,SAAS,EAAE,CAAC;QACZ,cAAc,EAAE,CAAC;QACjB,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;IACjE,CAAC;AACH,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,IAAI,GAAG,mBAAmB;YAAE,OAAO;QACzC,UAAU,CAAC,QAAQ,EAAE,GAAG,mBAAmB,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;AACH,CAAC;AAED;;;sEAGsE;AACtE,MAAM,UAAU,WAAW,CAAC,SAAsB,EAAE;IAClD,SAAS,EAAE,CAAC;IACZ,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,qEAAqE;IACrE,4DAA4D;IAC5D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC;aAClC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;aACvE,IAAI,EAAE,CAAC;QACV,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC7B,IAAI,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEjD,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACxC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;oBAAE,SAAS;gBAC3B,IAAI,CAAC;oBAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3D,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAChE,OAAO,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACvF,CAAC;AAED,SAAS,aAAa,CAAC,CAAa,EAAE,CAAc;IAClD,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACnD,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACnD,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,0DAA0D;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAGzC;2DAC2D;AAC3D,MAAM,CAAC,MAAM,cAAc,GAAG,QAAQ,CAAC;AACvC,MAAM,CAAC,MAAM,SAAS,GAAG,OAAO,CAAC"}

package/dist/audit/patterns.d.ts

@@ -0,0 +1,34 @@
+import type { AuditEntry } from './types.js';
+/** Discriminator for the finding, so surfaces can localise the text
+ *  from structured params instead of parsing the English string. */
+export type FindingKind = 'auto-fail' | 'retry-loop' | 'dangerous-succeeded';
+/** Structured values behind a finding — everything a localised template
+ *  needs to render the message without re-deriving anything. */
+export interface FindingParams {
+    tool?: string;
+    /** Auto-approve failure rate, whole percent. */
+    pct?: number;
+    failed?: number;
+    total?: number;
+    /** Retry-cluster size / dangerous-call count. */
+    count?: number;
+    /** ISO timestamp of a retry cluster's first call, for locale-aware time. */
+    atISO?: string;
+}
+export interface Finding {
+    /** Severity tier — drives chip colour in the UI. */
+    severity: 'info' | 'warning' | 'critical';
+    /** What kind of finding this is — the key surfaces localise from. */
+    kind: FindingKind;
+    /** Structured params for localised rendering (see FindingParams). */
+    params: FindingParams;
+    /** One-line, plain-language English. Fallback for non-localised
+     *  consumers (CLI, export, the IDE which renders English directly). */
+    message: string;
+    /** Optional follow-up hint — what to do about it (English fallback). */
+    suggestion?: string;
+    /** Tool name(s) the finding relates to, for "show me these calls" filtering. */
+    relatedTools?: string[];
+}
+export declare function detectPatterns(entries: AuditEntry[]): Finding[];
+//# sourceMappingURL=patterns.d.ts.map

package/dist/audit/patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.d.ts","sourceRoot":"","sources":["../../src/audit/patterns.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C;oEACoE;AACpE,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,YAAY,GAAG,qBAAqB,CAAC;AAE7E;gEACgE;AAChE,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iDAAiD;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,OAAO;IACtB,oDAAoD;IACpD,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;IAC1C,qEAAqE;IACrE,IAAI,EAAE,WAAW,CAAC;IAClB,qEAAqE;IACrE,MAAM,EAAE,aAAa,CAAC;IACtB;2EACuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,CAsF/D"}

package/dist/audit/patterns.js

@@ -0,0 +1,104 @@
+// Pattern detection — proactive nudges surfaced in the audit panel
+// based on the persistent log. Every check returns 0 or more findings;
+// the UI lists them above the audit table so the user sees what's
+// actionable without scrolling.
+//
+// Rules of thumb for adding new patterns:
+//   - Must be actionable. "You used 47 tools today" is vanity. "You
+//     auto-approve bash but 23% fail" tells the user to tighten a rule.
+//   - Run on a slice (last 7 days by default), not the whole corpus —
+//     a failure pattern from 6 months ago isn't useful now.
+//   - Plain-language message, no jargon. Audience is anyone using Ava,
+//     not infra engineers.
+export function detectPatterns(entries) {
+    // Only look at the recent window — older patterns aren't actionable.
+    const sevenDaysAgo = new Date(Date.now() - 7 * 24 * 60 * 60 * 1000).toISOString();
+    const recent = entries.filter(e => e.timestamp >= sevenDaysAgo);
+    if (recent.length === 0)
+        return [];
+    const findings = [];
+    // ── Approval policy review ─────────────────────────────────────────
+    // If the user auto-approves a tool but it fails > 20% of the time,
+    // surface the friction so they can tighten the rule.
+    const byTool = new Map();
+    for (const e of recent) {
+        const t = byTool.get(e.toolName) ?? { count: 0, failed: 0, autoCount: 0, autoFailed: 0 };
+        t.count++;
+        const failed = e.status === 'failed' || e.status === 'denied';
+        if (failed)
+            t.failed++;
+        if (e.approvalMethod === 'auto') {
+            t.autoCount++;
+            if (failed)
+                t.autoFailed++;
+        }
+        byTool.set(e.toolName, t);
+    }
+    for (const [tool, s] of byTool) {
+        if (s.autoCount >= 5 && s.autoFailed / s.autoCount > 0.2) {
+            const pct = Math.round((s.autoFailed / s.autoCount) * 100);
+            findings.push({
+                severity: 'warning',
+                kind: 'auto-fail',
+                params: { tool, pct, failed: s.autoFailed, total: s.autoCount },
+                message: `You auto-approve ${tool} but ${pct}% of those calls fail (${s.autoFailed} of ${s.autoCount} this week).`,
+                suggestion: 'Consider tightening the approval rule to first-time, so failures get a second look.',
+                relatedTools: [tool],
+            });
+        }
+    }
+    // ── Repeated retry pattern ─────────────────────────────────────────
+    // Same tool called 3+ times within 60 seconds with the same args
+    // hash usually means the model is stuck retrying a failing call.
+    const RETRY_WINDOW_MS = 60_000;
+    const sortedAsc = [...recent].sort((a, b) => a.timestamp.localeCompare(b.timestamp));
+    let consecutive = [];
+    const retryClusters = [];
+    for (const e of sortedAsc) {
+        if (consecutive.length === 0) {
+            consecutive.push(e);
+            continue;
+        }
+        const last = consecutive[consecutive.length - 1];
+        const sameToolSameArgs = last.toolName === e.toolName && last.argsSummary === e.argsSummary;
+        const recentEnough = Date.parse(e.timestamp) - Date.parse(last.timestamp) <= RETRY_WINDOW_MS;
+        if (sameToolSameArgs && recentEnough) {
+            consecutive.push(e);
+        }
+        else {
+            if (consecutive.length >= 3)
+                retryClusters.push(consecutive);
+            consecutive = [e];
+        }
+    }
+    if (consecutive.length >= 3)
+        retryClusters.push(consecutive);
+    for (const cluster of retryClusters.slice(0, 3)) {
+        const tool = cluster[0].toolName;
+        findings.push({
+            severity: 'info',
+            kind: 'retry-loop',
+            params: { tool, count: cluster.length, atISO: cluster[0].timestamp },
+            message: `${tool} was called ${cluster.length} times in a row at ${new Date(cluster[0].timestamp).toLocaleTimeString()} — possible retry loop.`,
+            suggestion: "Open the row to compare arguments. If they're identical, this is usually a provider hiccup or a stale cache.",
+            relatedTools: [tool],
+        });
+    }
+    // ── Dangerous-tool out-of-scope writes ─────────────────────────────
+    // Any 'dangerous' risk-level tool that succeeded gets highlighted —
+    // the user approved it but it's worth a second look in case it
+    // touched something outside expected scope.
+    const dangerousSucceeded = recent.filter(e => e.riskLevel === 'dangerous' && e.status === 'success');
+    if (dangerousSucceeded.length > 0) {
+        findings.push({
+            severity: 'critical',
+            kind: 'dangerous-succeeded',
+            params: { count: dangerousSucceeded.length },
+            message: `${dangerousSucceeded.length} dangerous tool call${dangerousSucceeded.length === 1 ? '' : 's'} succeeded this week.`,
+            suggestion: 'Review these in the audit table to confirm they touched only what you expected.',
+            relatedTools: [...new Set(dangerousSucceeded.map(e => e.toolName))],
+        });
+    }
+    return findings;
+}
+//# sourceMappingURL=patterns.js.map

package/dist/audit/patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.js","sourceRoot":"","sources":["../../src/audit/patterns.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,uEAAuE;AACvE,kEAAkE;AAClE,gCAAgC;AAChC,EAAE;AACF,0CAA0C;AAC1C,oEAAoE;AACpE,wEAAwE;AACxE,sEAAsE;AACtE,4DAA4D;AAC5D,uEAAuE;AACvE,2BAA2B;AAsC3B,MAAM,UAAU,cAAc,CAAC,OAAqB;IAClD,qEAAqE;IACrE,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAClF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,YAAY,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,sEAAsE;IACtE,mEAAmE;IACnE,qDAAqD;IACrD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoF,CAAC;IAC3G,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QACzF,CAAC,CAAC,KAAK,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;QAC9D,IAAI,MAAM;YAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,cAAc,KAAK,MAAM,EAAE,CAAC;YAChC,CAAC,CAAC,SAAS,EAAE,CAAC;YACd,IAAI,MAAM;gBAAE,CAAC,CAAC,UAAU,EAAE,CAAC;QAC7B,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC;QAC/B,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACzD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC;YAC3D,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE;gBAC/D,OAAO,EAAE,oBAAoB,IAAI,QAAQ,GAAG,0BAA0B,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC,SAAS,cAAc;gBAClH,UAAU,EAAE,qFAAqF;gBACjG,YAAY,EAAE,CAAC,IAAI,CAAC;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,iEAAiE;IACjE,iEAAiE;IACjE,MAAM,eAAe,GAAG,MAAM,CAAC;IAC/B,MAAM,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACrF,IAAI,WAAW,GAAiB,EAAE,CAAC;IACnC,MAAM,aAAa,GAAmB,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAChE,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACjD,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW,CAAC;QAC5F,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,eAAe,CAAC;QAC7F,IAAI,gBAAgB,IAAI,YAAY,EAAE,CAAC;YACrC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,IAAI,WAAW,CAAC,MAAM,IAAI,CAAC;gBAAE,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC7D,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,IAAI,CAAC;QAAE,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7D,KAAK,MAAM,OAAO,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE;YACpE,OAAO,EAAE,GAAG,IAAI,eAAe,OAAO,CAAC,MAAM,sBAAsB,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,kBAAkB,EAAE,yBAAyB;YAC/I,UAAU,EAAE,8GAA8G;YAC1H,YAAY,EAAE,CAAC,IAAI,CAAC;SACrB,CAAC,CAAC;IACL,CAAC;IAED,sEAAsE;IACtE,oEAAoE;IACpE,+DAA+D;IAC/D,4CAA4C;IAC5C,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IACrG,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,UAAU;YACpB,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,EAAE,KAAK,EAAE,kBAAkB,CAAC,MAAM,EAAE;YAC5C,OAAO,EAAE,GAAG,kBAAkB,CAAC,MAAM,uBAAuB,kBAAkB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,uBAAuB;YAC7H,UAAU,EAAE,iFAAiF;YAC7F,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;SACpE,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/audit/security.d.ts

@@ -0,0 +1,8 @@
+import type { AuditEntry, SecurityConcern } from './types.js';
+export type { SecurityConcern };
+/** Which security concerns apply to this entry (empty = nothing notable). */
+export declare function classifySecurity(e: AuditEntry, workspaceRoot?: string): SecurityConcern[];
+/** Return a NEW array with `security` set on every entry that has ≥1 concern.
+ *  Entries with no concern pass through untouched. */
+export declare function annotateSecurity(entries: AuditEntry[], workspaceRoot?: string): AuditEntry[];
+//# sourceMappingURL=security.d.ts.map

package/dist/audit/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/audit/security.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE9D,YAAY,EAAE,eAAe,EAAE,CAAC;AAwBhC,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,eAAe,EAAE,CAQzF;AAED;sDACsD;AACtD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,UAAU,EAAE,CAK5F"}

package/dist/audit/security.js

@@ -0,0 +1,56 @@
+// Security lens — classify which audited calls actually "left the sandbox",
+// i.e. the ones a security-minded user cares to review. Derived entirely from
+// data already in the log (category, risk, paths) — no new capture. Surfaced
+// as a filter + row badges in the audit view.
+//
+// Four concerns:
+//   network          — the call reached the network (web category tools)
+//   out-of-workspace — a file write whose path is outside the current project
+//   secret-access    — a call touching a credential/secret-looking path
+//   dangerous        — the tool's own risk tier is 'dangerous'
+//
+// Runs host-side (extension host / IDE sidecar), where the workspace root is
+// known, and annotates each entry before it's sent to the webview.
+// Credential / secret-looking path segments. Deliberately broad — a false
+// positive just surfaces a row for a second look, which is the point.
+const SECRET_RE = /(^|[\\/.])(\.env|secret|credential|id_rsa|id_ed25519|\.pem|\.key|\.ssh|\.aws|\.npmrc|\.pgpass|\.git-credentials|\.netrc|token)([\\/._-]|$)/i;
+/** Best-effort path for an entry: the mutation path for writes, else a path
+ *  field from the structured args (file reads etc.). */
+function entryPath(e) {
+    if (e.fileMutation?.path)
+        return e.fileMutation.path;
+    const fa = (e.fullArgs ?? {});
+    const cand = fa.path ?? fa.file_path ?? fa.filePath ?? fa.file ?? fa.target;
+    return typeof cand === 'string' ? cand : undefined;
+}
+function norm(p) { return p.replace(/\\/g, '/').toLowerCase(); }
+function isInside(path, root) {
+    const p = norm(path);
+    const r = norm(root).replace(/\/+$/, '');
+    if (!r)
+        return true; // no known root → don't flag
+    return p === r || p.startsWith(r + '/');
+}
+/** Which security concerns apply to this entry (empty = nothing notable). */
+export function classifySecurity(e, workspaceRoot) {
+    const out = [];
+    if (e.riskLevel === 'dangerous')
+        out.push('dangerous');
+    if (e.category === 'web')
+        out.push('network');
+    const path = entryPath(e);
+    if (path && SECRET_RE.test(path))
+        out.push('secret-access');
+    if (e.fileMutation?.path && workspaceRoot && !isInside(e.fileMutation.path, workspaceRoot))
+        out.push('out-of-workspace');
+    return out;
+}
+/** Return a NEW array with `security` set on every entry that has ≥1 concern.
+ *  Entries with no concern pass through untouched. */
+export function annotateSecurity(entries, workspaceRoot) {
+    return entries.map(e => {
+        const s = classifySecurity(e, workspaceRoot);
+        return s.length ? { ...e, security: s } : e;
+    });
+}
+//# sourceMappingURL=security.js.map

package/dist/audit/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/audit/security.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,8CAA8C;AAC9C,EAAE;AACF,iBAAiB;AACjB,yEAAyE;AACzE,8EAA8E;AAC9E,wEAAwE;AACxE,+DAA+D;AAC/D,EAAE;AACF,6EAA6E;AAC7E,mEAAmE;AAMnE,0EAA0E;AAC1E,sEAAsE;AACtE,MAAM,SAAS,GAAG,6IAA6I,CAAC;AAEhK;wDACwD;AACxD,SAAS,SAAS,CAAC,CAAa;IAC9B,IAAI,CAAC,CAAC,YAAY,EAAE,IAAI;QAAE,OAAO,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;IACrD,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IACzD,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,MAAM,CAAC;IAC5E,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,SAAS,IAAI,CAAC,CAAS,IAAY,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAEhF,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAY;IAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,6BAA6B;IAClD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB,CAAC,CAAa,EAAE,aAAsB;IACpE,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,IAAI,CAAC,CAAC,SAAS,KAAK,WAAW;QAAE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK;QAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5D,IAAI,CAAC,CAAC,YAAY,EAAE,IAAI,IAAI,aAAa,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,aAAa,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACzH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;sDACsD;AACtD,MAAM,UAAU,gBAAgB,CAAC,OAAqB,EAAE,aAAsB;IAC5E,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QACrB,MAAM,CAAC,GAAG,gBAAgB,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;QAC7C,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/audit/summary.d.ts

@@ -0,0 +1,22 @@
+import type { AuditEntry } from './types.js';
+export interface AuditSummary {
+    total: number;
+    totalFailed: number;
+    totalCredits: number;
+    totalUsd: number;
+    topByCost: {
+        toolName: string;
+        count: number;
+        failed: number;
+        credits: number;
+        usd: number;
+    }[];
+    perApproval: {
+        approval: string;
+        count: number;
+        failed: number;
+        failRate: number;
+    }[];
+}
+export declare function summarise(entries: AuditEntry[]): AuditSummary;
+//# sourceMappingURL=summary.d.ts.map

package/dist/audit/summary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"summary.d.ts","sourceRoot":"","sources":["../../src/audit/summary.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC/F,WAAW,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACtF;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,YAAY,CAuC7D"}

package/dist/audit/summary.js

@@ -0,0 +1,51 @@
+// Pure audit summary — aggregates a set of entries into totals + per-tool /
+// per-approval breakdowns. No fs, no Node deps, so it's safe to import from a
+// webview (the IDE renderer builds exports locally). Lives apart from
+// logger.ts (which is Node-only) precisely so export.ts stays webview-safe.
+export function summarise(entries) {
+    const byTool = new Map();
+    const byApproval = new Map();
+    let totalCredits = 0;
+    let totalUsd = 0;
+    let totalFailed = 0;
+    for (const e of entries) {
+        const tool = byTool.get(e.toolName) ?? { count: 0, failed: 0, credits: 0, usd: 0 };
+        tool.count++;
+        if (e.status === 'failed' || e.status === 'denied') {
+            tool.failed++;
+            totalFailed++;
+        }
+        if (e.cost?.credits) {
+            tool.credits += e.cost.credits;
+            totalCredits += e.cost.credits;
+        }
+        if (e.cost?.usd) {
+            tool.usd += e.cost.usd;
+            totalUsd += e.cost.usd;
+        }
+        byTool.set(e.toolName, tool);
+        const ap = byApproval.get(e.approvalMethod) ?? { count: 0, failed: 0 };
+        ap.count++;
+        if (e.status === 'failed' || e.status === 'denied')
+            ap.failed++;
+        byApproval.set(e.approvalMethod, ap);
+    }
+    const topByCost = [...byTool.entries()]
+        .map(([name, s]) => ({ toolName: name, ...s }))
+        .sort((a, b) => (b.credits + b.usd * 1000) - (a.credits + a.usd * 1000))
+        .slice(0, 10);
+    return {
+        total: entries.length,
+        totalFailed,
+        totalCredits,
+        totalUsd,
+        topByCost,
+        perApproval: [...byApproval.entries()].map(([approval, s]) => ({
+            approval,
+            count: s.count,
+            failed: s.failed,
+            failRate: s.count > 0 ? s.failed / s.count : 0,
+        })),
+    };
+}
+//# sourceMappingURL=summary.js.map

package/dist/audit/summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"summary.js","sourceRoot":"","sources":["../../src/audit/summary.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,8EAA8E;AAC9E,sEAAsE;AACtE,4EAA4E;AAa5E,MAAM,UAAU,SAAS,CAAC,OAAqB;IAC7C,MAAM,MAAM,GAAG,IAAI,GAAG,EAA2E,CAAC;IAClG,MAAM,UAAU,GAAG,IAAI,GAAG,EAA6C,CAAC;IACxE,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACnF,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,WAAW,EAAE,CAAC;QAAC,CAAC;QACrF,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;YAAC,YAAY,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAC,CAAC;QACxF,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,EAAM,CAAC;YAAC,IAAI,CAAC,GAAG,IAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAK,QAAQ,IAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAC,CAAC;QACpF,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAE7B,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACvE,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;YAAE,EAAE,CAAC,MAAM,EAAE,CAAC;QAChE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;SACpC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;SAC9C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;SACvE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhB,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,MAAM;QACrB,WAAW;QACX,YAAY;QACZ,QAAQ;QACR,SAAS;QACT,WAAW,EAAE,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7D,QAAQ;YACR,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC/C,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}

package/dist/audit/types.d.ts

@@ -0,0 +1,104 @@
+/** A single audited tool call. The shape extends the existing in-memory
+ *  audit shape used by extension/AvaViewProvider + ide/sidecar so an
+ *  in-place migration to persistent storage doesn't break anything
+ *  that already writes entries. */
+export interface AuditEntry {
+    /** ISO 8601 timestamp of when the tool call started. */
+    timestamp: string;
+    /** Tool name as registered (file_read, bash, web_search, generate_image, etc.) */
+    toolName: string;
+    /** Coarse grouping for filter UIs. Comes from the tool registry. */
+    category: string;
+    /** safe / write / dangerous — drives the colour chip in the audit row. */
+    riskLevel: string;
+    /** auto / first-time / user-approved / denied — explains how the call passed the gate. */
+    approvalMethod: string;
+    /** success / failed / denied. */
+    status: string;
+    /** Short human-readable summary of the args (e.g. "wrote 4.2KB to /src/foo.ts"). */
+    argsSummary: string;
+    /** Full structured args — only included when the user expands the row. */
+    fullArgs?: Record<string, unknown>;
+    /** Tool result — truncated to a sensible length to keep the log
+     *  bounded. Full result still lives in the conversation history. */
+    result?: string;
+    /** Cost of this tool call. Filled in client-side when known —
+     *  platform users see credits (via creditsForTurn for chat-style
+     *  tools) and BYOK users see the underlying provider cost in USD
+     *  estimated from token counts. */
+    cost?: AuditCost;
+    /** Optional link back to the conversation + message that triggered
+     *  this call. Lets the audit row jump back to the chat where it
+     *  happened. Filled when the surface knows the IDs; absent for
+     *  legacy entries. */
+    conversationId?: string;
+    messageId?: string;
+    /** For file-mutation tools (file_write, file_edit), captures enough
+     *  state to verify the on-disk effect after the fact: short git SHA at
+     *  start of tool call, target path, and content hashes before/after.
+     *  Lets a user reconstruct "what changed" from the audit log alone
+     *  without relying on the truncated `result` field. Absent for
+     *  non-mutation tools. */
+    fileMutation?: {
+        path: string;
+        gitSha?: string;
+        bytesBefore?: number;
+        bytesAfter?: number;
+        sha256Before?: string;
+        sha256After?: string;
+    };
+    /** Integrity verdict computed at read time by comparing the file on disk
+     *  now against `fileMutation.sha256After` (what Ava left it as). Set by
+     *  annotateIntegrity(); absent for non-mutation / unverifiable entries.
+     *  'unchanged' = disk still matches Ava's edit; 'modified' = changed since;
+     *  'deleted' = the file is gone; 'unverifiable' = no hash / too large. */
+    integrity?: IntegrityStatus;
+    /** Security concerns for the audit "security lens" — which sandbox
+     *  boundaries this call crossed (network / out-of-workspace / secret /
+     *  dangerous). Set by annotateSecurity(); absent when nothing notable. */
+    security?: SecurityConcern[];
+    /** Memories this activity produced (Phase 2, desktop trajectories): ids of
+     *  memory-graph entries / procedural patterns / self-improvement learnings
+     *  distilled from the run this entry summarises. Lets the audit log answer
+     *  "what did Ava learn from doing this?" — and a memory be traced back to
+     *  the audited actions that taught it. */
+    memoryNodeIds?: string[];
+}
+export type IntegrityStatus = 'unchanged' | 'modified' | 'deleted' | 'unverifiable';
+export type SecurityConcern = 'network' | 'out-of-workspace' | 'secret-access' | 'dangerous';
+export interface AuditCost {
+    /** Which billing model this entry is on. */
+    mode: 'platform' | 'byok';
+    /** Credits charged (platform users only). */
+    credits?: number;
+    /** Estimated USD cost (BYOK users only — based on provider rate cards). */
+    usd?: number;
+    /** Underlying token counts so the receipt is auditable. */
+    tokens?: {
+        input: number;
+        output: number;
+    };
+    /** Provider key for BYOK cost attribution ('deepseek', 'kimi', etc.). */
+    provider?: string;
+    /** Model id used for this call (drives the per-model cost rate). */
+    model?: string;
+}
+/** Filter applied when querying the persistent log. All fields optional;
+ *  empty filter returns the full corpus. Used by both UI search panels
+ *  + the export bundler. */
+export interface AuditFilter {
+    /** ISO date strings, inclusive. */
+    since?: string;
+    until?: string;
+    /** Substring match against toolName (case-insensitive). */
+    toolName?: string;
+    /** Exact category match. */
+    category?: string;
+    /** Risk level filter. */
+    riskLevel?: 'safe' | 'write' | 'dangerous';
+    /** Status filter. */
+    status?: 'success' | 'failed' | 'denied';
+    /** Maximum number of entries to return — newest first. */
+    limit?: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/audit/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/audit/types.ts"],"names":[],"mappings":"AAUA;;;mCAGmC;AACnC,MAAM,WAAW,UAAU;IACzB,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,QAAQ,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAClB,0FAA0F;IAC1F,cAAc,EAAE,MAAM,CAAC;IACvB,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,oFAAoF;IACpF,WAAW,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC;wEACoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;uCAGmC;IACnC,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB;;;0BAGsB;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;8BAK0B;IAC1B,YAAY,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF;;;;8EAI0E;IAC1E,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B;;8EAE0E;IAC1E,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC;IAC7B;;;;8CAI0C;IAC1C,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,cAAc,CAAC;AACpF,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,kBAAkB,GAAG,eAAe,GAAG,WAAW,CAAC;AAE7F,MAAM,WAAW,SAAS;IACxB,4CAA4C;IAC5C,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC;IAC1B,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;4BAE4B;AAC5B,MAAM,WAAW,WAAW;IAC1B,mCAAmC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4BAA4B;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yBAAyB;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,WAAW,CAAC;IAC3C,qBAAqB;IACrB,MAAM,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACzC,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/audit/types.js

@@ -0,0 +1,11 @@
+// Audit log — every tool call Ava makes, persisted locally so users
+// can audit what an autonomous agent did on their machine. Shared
+// across extension + IDE via @ava/core/audit; both surfaces append
+// to the same on-disk log at ~/.ava/audit-log.jsonl.
+//
+// Why JSONL not JSON: append-only writes are O(1) and we can stream
+// in older entries without parsing the whole file. A single-blob JSON
+// would force a read+parse+rewrite on every tool call which gets
+// slow fast on a long session.
+export {};
+//# sourceMappingURL=types.js.map

package/dist/audit/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/audit/types.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,kEAAkE;AAClE,mEAAmE;AACnE,qDAAqD;AACrD,EAAE;AACF,oEAAoE;AACpE,sEAAsE;AACtE,iEAAiE;AACjE,+BAA+B"}

package/dist/auto/aurora-router.d.ts

@@ -0,0 +1,71 @@
+import type { TaskCategory } from './types.js';
+/**
+ * Aurora mode — Mistral-only polyglot routing, three-tier fleet.
+ *
+ * The European-stack analogue of Supernova: same shape, different fleet.
+ * Every route lands on a Mistral model so an Aurora deployment never
+ * leaves European infrastructure — important for EU customers under
+ * data-residency / GDPR / AI Act constraints who can't buy a US AI stack
+ * and who want a sovereign full-stack option (model + agent + tooling).
+ *
+ *   - Mistral Medium 3.5 — Coordinator + deep specialists + Builder + vision.
+ *                         Mistral's frontier flagship: 128B dense, 256K, from-
+ *                         scratch vision encoder, configurable reasoning,
+ *                         77.6% SWE-Bench Verified, Artificial Analysis
+ *                         Intelligence Index 39 (#2 of 61). The best Mistral
+ *                         model — so it holds the lead seat.
+ *   - Mistral Small 4   — High-volume workhorse + intent gate. 119B, 256K,
+ *                         configurable reasoning, vision. Index 28 and just
+ *                         $0.15/$0.60 — cheaper AND smarter than Large 3.
+ *                         Carries chat, image-gen orchestration, long-context
+ *                         grunt, brainstorm, and the light specialists.
+ *   - Mistral Large 3   — Heavy reserve / fallback only. 675B/41B MoE, 256K,
+ *                         Apache-2.0, multimodal — the broadest-knowledge,
+ *                         most-permissive sovereign self-host option. But
+ *                         *non-reasoning* (Index 23), so it holds no primary
+ *                         route; it's the heavy fallback and the natural re-
+ *                         promotion target when its reasoning variant ships.
+ *
+ * Frontier-leads topology (Medium 3.5 → Small 4 → Large-3-reserve): the old
+ * config inverted this, running the weakest non-reasoning model (Large 3) in
+ * the coordinator seat with the frontier model parked mid-tier. This puts the
+ * best model where it matters and lets the cheap-but-capable Small 4 carry
+ * volume — quality up, cost roughly flat.
+ *
+ * Aurora is deliberately Mistral-only. If a Mistral model is unavailable,
+ * the router returns null and surfaces an error rather than silently
+ * cross-routing — that's the EU-stack guarantee. Users who want graceful
+ * degradation pick Maestro or Supernova instead.
+ *
+ * Re-tiered 2026-06-XX once Artificial Analysis confirmed Medium 3.5 (39) and
+ * Small 4 (28) both out-score Large 3 (23).
+ */
+/** The conductor that classifies tasks, picks specialists, runs the loop —
+ *  the highest-leverage seat in the fleet. Medium 3.5 is Mistral's frontier
+ *  flagship (Intelligence Index 39, reasoning-capable) and decisively
+ *  out-classes Large 3 (23, non-reasoning), so it takes the coordinator.
+ *  Large 3 stays wired as the heavy fallback for availability + its 675B
+ *  breadth, and is the natural re-promotion target if/when its reasoning
+ *  variant ships. */
+export declare const AURORA_COORDINATOR_ID = "mistral-medium-3.5";
+/** Builder agent — TaskExecutor spawn for any session task. Medium 3.5:
+ *  77.6% SWE-Bench Verified, 256K context, from-scratch vision encoder. */
+export declare const AURORA_BUILDER_ID = "mistral-medium-3.5";
+/** Vision input override — Medium 3.5's from-scratch vision encoder handles
+ *  variable image sizes / aspect ratios best in the fleet. */
+export declare const AURORA_VISION_ID = "mistral-medium-3.5";
+/** Intent gate — Small 4 at $0.15/$0.60 is hard to beat for short routing
+ *  calls, and it's smarter than Large 3 (Index 28 vs 23) for the rare hard
+ *  classification. The high-volume workhorse anchor. */
+export declare const AURORA_INTENT_GATE_ID = "mistral-small-4";
+export interface AuroraRouteEntry {
+    modelId: string;
+    reason: string;
+    fallbackModelId?: string;
+    requiresVision?: boolean;
+    /** Used by `teach` — coordinator-tier model when curriculum is being created (depth='full'). */
+    creationModelId?: string;
+}
+export declare const AURORA_ROUTES: Record<TaskCategory, AuroraRouteEntry>;
+export declare const AURORA_PERSONA_MODEL: Record<string, string>;
+//# sourceMappingURL=aurora-router.d.ts.map

package/dist/auto/aurora-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aurora-router.d.ts","sourceRoot":"","sources":["../../src/auto/aurora-router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAIH;;;;;;qBAMqB;AACrB,eAAO,MAAM,qBAAqB,uBAAuB,CAAC;AAE1D;2EAC2E;AAC3E,eAAO,MAAM,iBAAiB,uBAAuB,CAAC;AAEtD;8DAC8D;AAC9D,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AAErD;;wDAEwD;AACxD,eAAO,MAAM,qBAAqB,oBAAoB,CAAC;AAOvD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,gGAAgG;IAChG,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,gBAAgB,CA8BhE,CAAC;AAmBF,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CA8BvD,CAAC"}