@xerg/cli 0.1.4 → 0.1.6

package/dist/index.js

@@ -1,5 +1,84 @@
 #!/usr/bin/env node
-import{readFileSync as ct}from"fs";import{styleText as ut}from"util";import{readFileSync as Ae}from"fs";import{createHash as Oe}from"crypto";function U(e){return Oe("sha1").update(e).digest("hex")}function H(e){if(!e)return null;let t=e.trim().match(/^(\d+)([mhdw])$/i);if(!t)throw new Error(`Invalid --since value "${e}". Use values like 30m, 24h, 7d, 2w.`);let n=Number(t[1]),o=t[2].toLowerCase(),r={m:60*1e3,h:3600*1e3,d:1440*60*1e3,w:10080*60*1e3};return Date.now()-n*r[o]}function R(){return new Date().toISOString()}function v(e){if(typeof e=="string"){let t=new Date(e);if(!Number.isNaN(t.getTime()))return t.toISOString()}if(typeof e=="number"){let t=new Date(e);if(!Number.isNaN(t.getTime()))return t.toISOString()}return R()}import{mkdirSync as $e}from"fs";import{dirname as Le}from"path";import _e from"better-sqlite3";var Y=`
+
+// src/index.ts
+import { readFileSync as readFileSync7 } from "fs";
+import { styleText as styleText2 } from "util";
+
+// src/commands/audit.ts
+import { readFileSync as readFileSync5 } from "fs";
+import { rmSync as rmSync4 } from "fs";
+import { hostname } from "os";
+
+// ../core/src/utils/hash.ts
+import { createHash } from "crypto";
+import { closeSync, openSync, readSync } from "fs";
+function sha1(input) {
+  return createHash("sha1").update(input).digest("hex");
+}
+function sha1File(path) {
+  const hash = createHash("sha1");
+  const fd = openSync(path, "r");
+  const buffer = Buffer.allocUnsafe(64 * 1024);
+  try {
+    let bytesRead = 0;
+    do {
+      bytesRead = readSync(fd, buffer, 0, buffer.length, null);
+      if (bytesRead > 0) {
+        hash.update(buffer.subarray(0, bytesRead));
+      }
+    } while (bytesRead > 0);
+  } finally {
+    closeSync(fd);
+  }
+  return hash.digest("hex");
+}
+
+// ../core/src/utils/time.ts
+function parseSince(value) {
+  if (!value) {
+    return null;
+  }
+  const match = value.trim().match(/^(\d+)([mhdw])$/i);
+  if (!match) {
+    throw new Error(`Invalid --since value "${value}". Use values like 30m, 24h, 7d, 2w.`);
+  }
+  const amount = Number(match[1]);
+  const unit = match[2].toLowerCase();
+  const multipliers = {
+    m: 60 * 1e3,
+    h: 60 * 60 * 1e3,
+    d: 24 * 60 * 60 * 1e3,
+    w: 7 * 24 * 60 * 60 * 1e3
+  };
+  return Date.now() - amount * multipliers[unit];
+}
+function isoNow() {
+  return (/* @__PURE__ */ new Date()).toISOString();
+}
+function toIsoOrNow(value) {
+  if (typeof value === "string") {
+    const candidate = new Date(value);
+    if (!Number.isNaN(candidate.getTime())) {
+      return candidate.toISOString();
+    }
+  }
+  if (typeof value === "number") {
+    const candidate = new Date(value);
+    if (!Number.isNaN(candidate.getTime())) {
+      return candidate.toISOString();
+    }
+  }
+  return isoNow();
+}
+
+// ../core/src/db/client.ts
+import { mkdirSync } from "fs";
+import { dirname } from "path";
+import Database from "better-sqlite3";
+
+// ../core/src/db/schema.ts
+var SCHEMA_VERSION = 1;
+var SCHEMA_SQL = `
 CREATE TABLE IF NOT EXISTS source_files (
   id TEXT PRIMARY KEY,
   path TEXT NOT NULL,
@@ -75,7 +154,96 @@ CREATE TABLE IF NOT EXISTS audit_snapshots (
   created_at TEXT NOT NULL,
   summary_json TEXT NOT NULL
 );
-`;function _(e){$e(Le(e),{recursive:!0});let t=new _e(e);return t.exec(Y),{sqlite:t}}function V(e,t){let{sqlite:n}=_(t),o=R(),r=e.pricingCatalog.map(s=>({...s,cachedInputPer1m:s.cachedInputPer1m??null})),a=e.summary.sourceFiles.map(s=>({id:U(`${s.path}:${s.mtimeMs}:${s.sizeBytes}`),path:s.path,kind:s.kind,fileHash:U(Ae(s.path,"utf8")),mtimeMs:Math.trunc(s.mtimeMs),sizeBytes:s.sizeBytes,importedAt:o})),i=e.runs.map(s=>({id:s.id,sourcePath:s.sourcePath,sourceKind:s.sourceKind,timestamp:s.timestamp,workflow:s.workflow,environment:s.environment,tagsJson:JSON.stringify(s.tags),totalCostUsd:s.totalCostUsd,totalTokens:s.totalTokens,observedCostUsd:s.observedCostUsd,estimatedCostUsd:s.estimatedCostUsd})),c=e.runs.flatMap(s=>s.calls.map(p=>({id:p.id,runId:p.runId,timestamp:p.timestamp,provider:p.provider,model:p.model,inputTokens:p.inputTokens,outputTokens:p.outputTokens,costUsd:p.costUsd,costSource:p.costSource,latencyMs:p.latencyMs,toolCalls:p.toolCalls,retries:p.retries,attempt:p.attempt,iteration:p.iteration,status:p.status,taskClass:p.taskClass,cacheHit:p.cacheHit,cacheCostUsd:p.cacheCostUsd,metadataJson:JSON.stringify(p.metadata)}))),u=e.summary.findings.map(s=>({id:s.id,auditId:e.summary.auditId,classification:s.classification,confidence:s.confidence,kind:s.kind,title:s.title,summary:s.summary,scope:s.scope,scopeId:s.scopeId,costImpactUsd:s.costImpactUsd,detailsJson:JSON.stringify(s.details)})),d=n.transaction(()=>{O(n,`
+`;
+
+// ../core/src/db/client.ts
+function createDb(path) {
+  mkdirSync(dirname(path), { recursive: true });
+  const sqlite = new Database(path);
+  const currentVersion = sqlite.pragma("user_version", { simple: true });
+  if (currentVersion > SCHEMA_VERSION) {
+    sqlite.close();
+    throw new Error(
+      `Unsupported Xerg database schema version ${currentVersion}. This build supports up to ${SCHEMA_VERSION}.`
+    );
+  }
+  sqlite.exec(SCHEMA_SQL);
+  if (currentVersion < SCHEMA_VERSION) {
+    sqlite.pragma(`user_version = ${SCHEMA_VERSION}`);
+  }
+  return { sqlite };
+}
+
+// ../core/src/db/persist.ts
+function persistAudit(audit, dbPath) {
+  const { sqlite } = createDb(dbPath);
+  const importedAt = isoNow();
+  const pricingRows = audit.pricingCatalog.map((entry) => ({
+    ...entry,
+    cachedInputPer1m: entry.cachedInputPer1m ?? null
+  }));
+  const sourceFileRows = audit.summary.sourceFiles.map((file) => ({
+    id: sha1(`${file.path}:${file.mtimeMs}:${file.sizeBytes}`),
+    path: file.path,
+    kind: file.kind,
+    fileHash: sha1File(file.path),
+    mtimeMs: Math.trunc(file.mtimeMs),
+    sizeBytes: file.sizeBytes,
+    importedAt
+  }));
+  const runRows = audit.runs.map((run2) => ({
+    id: run2.id,
+    sourcePath: run2.sourcePath,
+    sourceKind: run2.sourceKind,
+    timestamp: run2.timestamp,
+    workflow: run2.workflow,
+    environment: run2.environment,
+    tagsJson: JSON.stringify(run2.tags),
+    totalCostUsd: run2.totalCostUsd,
+    totalTokens: run2.totalTokens,
+    observedCostUsd: run2.observedCostUsd,
+    estimatedCostUsd: run2.estimatedCostUsd
+  }));
+  const callRows = audit.runs.flatMap(
+    (run2) => run2.calls.map((call) => ({
+      id: call.id,
+      runId: call.runId,
+      timestamp: call.timestamp,
+      provider: call.provider,
+      model: call.model,
+      inputTokens: call.inputTokens,
+      outputTokens: call.outputTokens,
+      costUsd: call.costUsd,
+      costSource: call.costSource,
+      latencyMs: call.latencyMs,
+      toolCalls: call.toolCalls,
+      retries: call.retries,
+      attempt: call.attempt,
+      iteration: call.iteration,
+      status: call.status,
+      taskClass: call.taskClass,
+      cacheHit: call.cacheHit,
+      cacheCostUsd: call.cacheCostUsd,
+      metadataJson: JSON.stringify(call.metadata)
+    }))
+  );
+  const findingRows = audit.summary.findings.map((finding) => ({
+    id: finding.id,
+    auditId: audit.summary.auditId,
+    classification: finding.classification,
+    confidence: finding.confidence,
+    kind: finding.kind,
+    title: finding.title,
+    summary: finding.summary,
+    scope: finding.scope,
+    scopeId: finding.scopeId,
+    costImpactUsd: finding.costImpactUsd,
+    detailsJson: JSON.stringify(finding.details)
+  }));
+  const persistTransaction = sqlite.transaction(() => {
+    insertMany(
+      sqlite,
+      `
         INSERT OR IGNORE INTO pricing_catalog (
           id,
           provider,
@@ -85,7 +253,20 @@ CREATE TABLE IF NOT EXISTS audit_snapshots (
           output_per_1m,
           cached_input_per_1m
         ) VALUES (?, ?, ?, ?, ?, ?, ?)
-      `,r.map(s=>[s.id,s.provider,s.model,s.effectiveDate,s.inputPer1m,s.outputPer1m,s.cachedInputPer1m])),O(n,`
+      `,
+      pricingRows.map((row) => [
+        row.id,
+        row.provider,
+        row.model,
+        row.effectiveDate,
+        row.inputPer1m,
+        row.outputPer1m,
+        row.cachedInputPer1m
+      ])
+    );
+    insertMany(
+      sqlite,
+      `
         INSERT OR IGNORE INTO source_files (
           id,
           path,
@@ -95,7 +276,20 @@ CREATE TABLE IF NOT EXISTS audit_snapshots (
           size_bytes,
           imported_at
         ) VALUES (?, ?, ?, ?, ?, ?, ?)
-      `,a.map(s=>[s.id,s.path,s.kind,s.fileHash,s.mtimeMs,s.sizeBytes,s.importedAt])),O(n,`
+      `,
+      sourceFileRows.map((row) => [
+        row.id,
+        row.path,
+        row.kind,
+        row.fileHash,
+        row.mtimeMs,
+        row.sizeBytes,
+        row.importedAt
+      ])
+    );
+    insertMany(
+      sqlite,
+      `
         INSERT OR IGNORE INTO runs (
           id,
           source_path,
@@ -109,7 +303,24 @@ CREATE TABLE IF NOT EXISTS audit_snapshots (
           observed_cost_usd,
           estimated_cost_usd
         ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-      `,i.map(s=>[s.id,s.sourcePath,s.sourceKind,s.timestamp,s.workflow,s.environment,s.tagsJson,s.totalCostUsd,s.totalTokens,s.observedCostUsd,s.estimatedCostUsd])),O(n,`
+      `,
+      runRows.map((row) => [
+        row.id,
+        row.sourcePath,
+        row.sourceKind,
+        row.timestamp,
+        row.workflow,
+        row.environment,
+        row.tagsJson,
+        row.totalCostUsd,
+        row.totalTokens,
+        row.observedCostUsd,
+        row.estimatedCostUsd
+      ])
+    );
+    insertMany(
+      sqlite,
+      `
         INSERT OR IGNORE INTO calls (
           id,
           run_id,
@@ -131,7 +342,32 @@ CREATE TABLE IF NOT EXISTS audit_snapshots (
           cache_cost_usd,
           metadata_json
         ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-      `,c.map(s=>[s.id,s.runId,s.timestamp,s.provider,s.model,s.inputTokens,s.outputTokens,s.costUsd,s.costSource,s.latencyMs??null,s.toolCalls,s.retries,s.attempt??null,s.iteration??null,s.status??null,s.taskClass??null,s.cacheHit?1:0,s.cacheCostUsd??null,s.metadataJson])),O(n,`
+      `,
+      callRows.map((row) => [
+        row.id,
+        row.runId,
+        row.timestamp,
+        row.provider,
+        row.model,
+        row.inputTokens,
+        row.outputTokens,
+        row.costUsd,
+        row.costSource,
+        row.latencyMs ?? null,
+        row.toolCalls,
+        row.retries,
+        row.attempt ?? null,
+        row.iteration ?? null,
+        row.status ?? null,
+        row.taskClass ?? null,
+        row.cacheHit ? 1 : 0,
+        row.cacheCostUsd ?? null,
+        row.metadataJson
+      ])
+    );
+    insertMany(
+      sqlite,
+      `
         INSERT OR IGNORE INTO findings (
           id,
           audit_id,
@@ -145,26 +381,3277 @@ CREATE TABLE IF NOT EXISTS audit_snapshots (
           cost_impact_usd,
           details_json
         ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-      `,u.map(s=>[s.id,s.auditId,s.classification,s.confidence,s.kind,s.title,s.summary,s.scope,s.scopeId,s.costImpactUsd,s.detailsJson])),n.prepare(`
+      `,
+      findingRows.map((row) => [
+        row.id,
+        row.auditId,
+        row.classification,
+        row.confidence,
+        row.kind,
+        row.title,
+        row.summary,
+        row.scope,
+        row.scopeId,
+        row.costImpactUsd,
+        row.detailsJson
+      ])
+    );
+    sqlite.prepare(
+      `
           INSERT OR IGNORE INTO audit_snapshots (
             id,
             created_at,
             summary_json
           ) VALUES (?, ?, ?)
-        `).run(e.summary.auditId,e.summary.generatedAt,JSON.stringify(e.summary))});try{d()}finally{n.close()}}function O(e,t,n){if(n.length===0)return;let o=e.prepare(t);for(let r of n)o.run(...r)}var xe={"retry-waste":"Retry waste","context-outlier":"Context bloat","loop-waste":"Loop waste","candidate-downgrade":"Downgrade candidates","idle-spend":"Idle waste"};function w(e){return Number(e.toFixed(6))}function ve(e){if(!e)return"all";let t=e.trim().toLowerCase().match(/^(\d+)([mhdw])$/);return t?`${Number(t[1])}${t[2]}`:e.trim().toLowerCase()}function ee(e){return e.replace(/\\/g,"/")}function De(e){let t=ee(e),n="/sessions/",o=t.lastIndexOf(n);return o>=0?t.slice(0,o+n.length-1):t.slice(0,t.lastIndexOf("/"))||t}function Fe(e){let t=ee(e);return t.slice(0,t.lastIndexOf("/"))||t}function Pe(e){return xe[e]??e}function Me(e){return e.kind==="sessions"?De(e.path):Fe(e.path)}function F(e){let t=Array.from(new Set(e.sources.map(o=>o.kind))).sort(),n=Array.from(new Set(e.sources.map(o=>`${o.kind}:${Me(o)}`))).sort();return U(JSON.stringify({kinds:t,roots:n,since:ve(e.since)}))}function $(e,t){let n=new Map;for(let o of e){if(o.classification!==t)continue;let r=n.get(o.kind)??{kind:o.kind,label:Pe(o.kind),classification:t,spendUsd:0,findingCount:0};r.spendUsd=w(r.spendUsd+o.costImpactUsd),r.findingCount+=1,n.set(o.kind,r)}return Array.from(n.values()).sort((o,r)=>r.spendUsd-o.spendUsd)}function q(e){return new Map(e.map(t=>[t.key,t.spendUsd]))}function Q(e,t){let n=q(e),o=q(t);return Array.from(new Set([...n.keys(),...o.keys()])).map(a=>{let i=o.get(a)??0,c=n.get(a)??0;return{key:a,baselineSpendUsd:w(i),currentSpendUsd:w(c),deltaSpendUsd:w(c-i)}}).filter(a=>a.deltaSpendUsd!==0).sort((a,i)=>Math.abs(i.deltaSpendUsd)-Math.abs(a.deltaSpendUsd)).slice(0,3)}function Z(e){return`${e.kind}:${e.scope}:${e.scopeId}`}function D(e){return e.sort((t,n)=>Math.abs(n.deltaCostImpactUsd)-Math.abs(t.deltaCostImpactUsd))}function Be(e,t){let n=e.filter(d=>d.classification==="waste"&&d.confidence==="high"),o=t.filter(d=>d.classification==="waste"&&d.confidence==="high"),r=new Map(n.map(d=>[Z(d),d])),a=new Map(o.map(d=>[Z(d),d])),i=[],c=[],u=[];for(let[d,s]of r.entries()){let p=a.get(d);if(!p){i.push({kind:s.kind,title:s.title,scope:s.scope,scopeId:s.scopeId,currentCostImpactUsd:s.costImpactUsd,deltaCostImpactUsd:w(s.costImpactUsd)});continue}let l=w(s.costImpactUsd-p.costImpactUsd);l>0&&u.push({kind:s.kind,title:s.title,scope:s.scope,scopeId:s.scopeId,baselineCostImpactUsd:p.costImpactUsd,currentCostImpactUsd:s.costImpactUsd,deltaCostImpactUsd:l})}for(let[d,s]of a.entries())r.has(d)||c.push({kind:s.kind,title:s.title,scope:s.scope,scopeId:s.scopeId,baselineCostImpactUsd:s.costImpactUsd,deltaCostImpactUsd:w(-s.costImpactUsd)});return{newHighConfidenceWaste:D(i),resolvedHighConfidenceWaste:D(c),worsenedHighConfidenceWaste:D(u)}}function te(e){return{...e,comparisonKey:e.comparisonKey??F({sources:e.sourceFiles,since:e.since}),comparison:e.comparison??null,wasteByKind:e.wasteByKind?.length>0?e.wasteByKind:$(e.findings,"waste"),opportunityByKind:e.opportunityByKind?.length>0?e.opportunityByKind:$(e.findings,"opportunity"),notes:e.notes??[]}}function ne(e,t){let n=Q(e.spendByWorkflow,t.spendByWorkflow),o=Q(e.spendByModel,t.spendByModel);return{baselineAuditId:t.auditId,baselineGeneratedAt:t.generatedAt,baselineRunCount:t.runCount,baselineCallCount:t.callCount,baselineTotalSpendUsd:t.totalSpendUsd,baselineObservedSpendUsd:t.observedSpendUsd,baselineEstimatedSpendUsd:t.estimatedSpendUsd,baselineWasteSpendUsd:t.wasteSpendUsd,baselineOpportunitySpendUsd:t.opportunitySpendUsd,baselineStructuralWasteRate:t.structuralWasteRate,deltaTotalSpendUsd:w(e.totalSpendUsd-t.totalSpendUsd),deltaObservedSpendUsd:w(e.observedSpendUsd-t.observedSpendUsd),deltaEstimatedSpendUsd:w(e.estimatedSpendUsd-t.estimatedSpendUsd),deltaWasteSpendUsd:w(e.wasteSpendUsd-t.wasteSpendUsd),deltaOpportunitySpendUsd:w(e.opportunitySpendUsd-t.opportunitySpendUsd),deltaStructuralWasteRate:w(e.structuralWasteRate-t.structuralWasteRate),deltaRunCount:e.runCount-t.runCount,deltaCallCount:e.callCount-t.callCount,workflowDeltas:n,modelDeltas:o,findingChanges:Be(e.findings,t.findings)}}function We(e){try{return te(JSON.parse(e))}catch{return null}}function Xe(e){let{sqlite:t}=_(e);try{return t.prepare(`
-          SELECT summary_json AS summaryJson
+        `
+    ).run(audit.summary.auditId, audit.summary.generatedAt, JSON.stringify(audit.summary));
+  });
+  try {
+    persistTransaction();
+  } finally {
+    sqlite.close();
+  }
+}
+function insertMany(sqlite, sql, rows) {
+  if (rows.length === 0) {
+    return;
+  }
+  const statement = sqlite.prepare(sql);
+  for (const row of rows) {
+    statement.run(...row);
+  }
+}
+
+// ../core/src/report/comparison.ts
+var FINDING_KIND_LABELS = {
+  "retry-waste": "Retry waste",
+  "context-outlier": "Context bloat",
+  "loop-waste": "Loop waste",
+  "candidate-downgrade": "Downgrade candidates",
+  "idle-spend": "Idle waste"
+};
+function round(value) {
+  return Number(value.toFixed(6));
+}
+function normalizeSinceValue(since) {
+  if (!since) {
+    return "all";
+  }
+  const match = since.trim().toLowerCase().match(/^(\d+)([mhdw])$/);
+  if (!match) {
+    return since.trim().toLowerCase();
+  }
+  return `${Number(match[1])}${match[2]}`;
+}
+function normalizePath(path) {
+  return path.replace(/\\/g, "/");
+}
+function findSessionsRoot(path) {
+  const normalized = normalizePath(path);
+  const marker = "/sessions/";
+  const index = normalized.lastIndexOf(marker);
+  if (index >= 0) {
+    return normalized.slice(0, index + marker.length - 1);
+  }
+  return normalized.slice(0, normalized.lastIndexOf("/")) || normalized;
+}
+function findGatewayRoot(path) {
+  const normalized = normalizePath(path);
+  return normalized.slice(0, normalized.lastIndexOf("/")) || normalized;
+}
+function getFindingKindLabel(kind) {
+  return FINDING_KIND_LABELS[kind] ?? kind;
+}
+function getComparisonSourceRoot(source) {
+  if (source.kind === "sessions") {
+    return findSessionsRoot(source.path);
+  }
+  return findGatewayRoot(source.path);
+}
+function buildComparisonKey(input) {
+  const kinds = Array.from(new Set(input.sources.map((source) => source.kind))).sort();
+  const roots = Array.from(
+    new Set(input.sources.map((source) => `${source.kind}:${getComparisonSourceRoot(source)}`))
+  ).sort();
+  return sha1(
+    JSON.stringify({
+      kinds,
+      roots,
+      since: normalizeSinceValue(input.since)
+    })
+  );
+}
+function buildTaxonomyBuckets(findings, classification) {
+  const buckets = /* @__PURE__ */ new Map();
+  for (const finding of findings) {
+    if (finding.classification !== classification) {
+      continue;
+    }
+    const current = buckets.get(finding.kind) ?? {
+      kind: finding.kind,
+      label: getFindingKindLabel(finding.kind),
+      classification,
+      spendUsd: 0,
+      findingCount: 0
+    };
+    current.spendUsd = round(current.spendUsd + finding.costImpactUsd);
+    current.findingCount += 1;
+    buckets.set(finding.kind, current);
+  }
+  return Array.from(buckets.values()).sort((left, right) => right.spendUsd - left.spendUsd);
+}
+function toSpendMap(rows) {
+  return new Map(rows.map((row) => [row.key, row.spendUsd]));
+}
+function buildTopSpendDeltas(currentRows, baselineRows) {
+  const currentMap = toSpendMap(currentRows);
+  const baselineMap = toSpendMap(baselineRows);
+  const keys = Array.from(/* @__PURE__ */ new Set([...currentMap.keys(), ...baselineMap.keys()]));
+  return keys.map((key) => {
+    const baselineSpendUsd = baselineMap.get(key) ?? 0;
+    const currentSpendUsd = currentMap.get(key) ?? 0;
+    return {
+      key,
+      baselineSpendUsd: round(baselineSpendUsd),
+      currentSpendUsd: round(currentSpendUsd),
+      deltaSpendUsd: round(currentSpendUsd - baselineSpendUsd)
+    };
+  }).filter((row) => row.deltaSpendUsd !== 0).sort((left, right) => Math.abs(right.deltaSpendUsd) - Math.abs(left.deltaSpendUsd)).slice(0, 3);
+}
+function getFindingIdentity(finding) {
+  return `${finding.kind}:${finding.scope}:${finding.scopeId}`;
+}
+function sortFindingChanges(changes) {
+  return changes.sort(
+    (left, right) => Math.abs(right.deltaCostImpactUsd) - Math.abs(left.deltaCostImpactUsd)
+  );
+}
+function buildFindingChanges(currentFindings, baselineFindings) {
+  const currentWaste = currentFindings.filter(
+    (finding) => finding.classification === "waste" && finding.confidence === "high"
+  );
+  const baselineWaste = baselineFindings.filter(
+    (finding) => finding.classification === "waste" && finding.confidence === "high"
+  );
+  const currentMap = new Map(currentWaste.map((finding) => [getFindingIdentity(finding), finding]));
+  const baselineMap = new Map(
+    baselineWaste.map((finding) => [getFindingIdentity(finding), finding])
+  );
+  const newHighConfidenceWaste = [];
+  const resolvedHighConfidenceWaste = [];
+  const worsenedHighConfidenceWaste = [];
+  for (const [identity, current] of currentMap.entries()) {
+    const baseline = baselineMap.get(identity);
+    if (!baseline) {
+      newHighConfidenceWaste.push({
+        kind: current.kind,
+        title: current.title,
+        scope: current.scope,
+        scopeId: current.scopeId,
+        currentCostImpactUsd: current.costImpactUsd,
+        deltaCostImpactUsd: round(current.costImpactUsd)
+      });
+      continue;
+    }
+    const deltaCostImpactUsd = round(current.costImpactUsd - baseline.costImpactUsd);
+    if (deltaCostImpactUsd > 0) {
+      worsenedHighConfidenceWaste.push({
+        kind: current.kind,
+        title: current.title,
+        scope: current.scope,
+        scopeId: current.scopeId,
+        baselineCostImpactUsd: baseline.costImpactUsd,
+        currentCostImpactUsd: current.costImpactUsd,
+        deltaCostImpactUsd
+      });
+    }
+  }
+  for (const [identity, baseline] of baselineMap.entries()) {
+    if (currentMap.has(identity)) {
+      continue;
+    }
+    resolvedHighConfidenceWaste.push({
+      kind: baseline.kind,
+      title: baseline.title,
+      scope: baseline.scope,
+      scopeId: baseline.scopeId,
+      baselineCostImpactUsd: baseline.costImpactUsd,
+      deltaCostImpactUsd: round(-baseline.costImpactUsd)
+    });
+  }
+  return {
+    newHighConfidenceWaste: sortFindingChanges(newHighConfidenceWaste),
+    resolvedHighConfidenceWaste: sortFindingChanges(resolvedHighConfidenceWaste),
+    worsenedHighConfidenceWaste: sortFindingChanges(worsenedHighConfidenceWaste)
+  };
+}
+function hydrateAuditSummary(summary) {
+  return {
+    ...summary,
+    comparisonKey: summary.comparisonKey ?? buildComparisonKey({
+      sources: summary.sourceFiles,
+      since: summary.since
+    }),
+    comparison: summary.comparison ?? null,
+    wasteByKind: summary.wasteByKind?.length > 0 ? summary.wasteByKind : buildTaxonomyBuckets(summary.findings, "waste"),
+    opportunityByKind: summary.opportunityByKind?.length > 0 ? summary.opportunityByKind : buildTaxonomyBuckets(summary.findings, "opportunity"),
+    notes: summary.notes ?? []
+  };
+}
+function buildAuditComparison(current, baseline) {
+  const workflowDeltas = buildTopSpendDeltas(current.spendByWorkflow, baseline.spendByWorkflow);
+  const modelDeltas = buildTopSpendDeltas(current.spendByModel, baseline.spendByModel);
+  return {
+    baselineAuditId: baseline.auditId,
+    baselineGeneratedAt: baseline.generatedAt,
+    baselineRunCount: baseline.runCount,
+    baselineCallCount: baseline.callCount,
+    baselineTotalSpendUsd: baseline.totalSpendUsd,
+    baselineObservedSpendUsd: baseline.observedSpendUsd,
+    baselineEstimatedSpendUsd: baseline.estimatedSpendUsd,
+    baselineWasteSpendUsd: baseline.wasteSpendUsd,
+    baselineOpportunitySpendUsd: baseline.opportunitySpendUsd,
+    baselineStructuralWasteRate: baseline.structuralWasteRate,
+    deltaTotalSpendUsd: round(current.totalSpendUsd - baseline.totalSpendUsd),
+    deltaObservedSpendUsd: round(current.observedSpendUsd - baseline.observedSpendUsd),
+    deltaEstimatedSpendUsd: round(current.estimatedSpendUsd - baseline.estimatedSpendUsd),
+    deltaWasteSpendUsd: round(current.wasteSpendUsd - baseline.wasteSpendUsd),
+    deltaOpportunitySpendUsd: round(current.opportunitySpendUsd - baseline.opportunitySpendUsd),
+    deltaStructuralWasteRate: round(current.structuralWasteRate - baseline.structuralWasteRate),
+    deltaRunCount: current.runCount - baseline.runCount,
+    deltaCallCount: current.callCount - baseline.callCount,
+    workflowDeltas,
+    modelDeltas,
+    findingChanges: buildFindingChanges(current.findings, baseline.findings)
+  };
+}
+
+// ../core/src/db/read.ts
+function parseAuditSummary(row) {
+  try {
+    return hydrateAuditSummary(JSON.parse(row.summaryJson));
+  } catch (error) {
+    const message = error instanceof Error ? error.message : "Unknown error";
+    process.stderr.write(`Warning: skipping unreadable audit snapshot ${row.id}: ${message}
+`);
+    return null;
+  }
+}
+function listStoredAuditSummaries(dbPath) {
+  const { sqlite } = createDb(dbPath);
+  try {
+    const rows = sqlite.prepare(
+      `
+          SELECT id, summary_json AS summaryJson
           FROM audit_snapshots
           ORDER BY created_at DESC
-        `).all().map(o=>We(o.summaryJson)).filter(o=>o!==null)}finally{t.close()}}function se(e){return Xe(e.dbPath).find(t=>e.currentAuditId&&t.auditId===e.currentAuditId?!1:t.comparisonKey===e.comparisonKey)}import{statSync as Ge}from"fs";import{glob as Je}from"fs/promises";import{resolve as Ke}from"path";import{mkdirSync as P}from"fs";import{homedir as re}from"os";import{join as h}from"path";import{platform as oe}from"process";function je(){let e=re(),t=oe==="darwin"?{data:h(e,"Library","Application Support","xerg"),config:h(e,"Library","Preferences","xerg"),cache:h(e,"Library","Caches","xerg")}:oe==="win32"?{data:h(process.env.LOCALAPPDATA??h(e,"AppData","Local"),"xerg","Data"),config:h(process.env.APPDATA??h(e,"AppData","Roaming"),"xerg","Config"),cache:h(process.env.LOCALAPPDATA??h(e,"AppData","Local"),"xerg","Cache")}:{data:h(process.env.XDG_DATA_HOME??h(e,".local","share"),"xerg"),config:h(process.env.XDG_CONFIG_HOME??h(e,".config"),"xerg"),cache:h(process.env.XDG_CACHE_HOME??h(e,".cache"),"xerg")};return P(t.data,{recursive:!0}),P(t.config,{recursive:!0}),P(t.cache,{recursive:!0}),t}function ie(){return h(je().data,"xerg.db")}function M(){return h(re(),".openclaw","agents","*","sessions","*.jsonl")}function B(){return"/tmp/openclaw/openclaw-*.log"}function A(e,t){try{let n=Ge(e);return n.isFile()?{kind:t,path:e,sizeBytes:n.size,mtimeMs:n.mtimeMs}:null}catch{return null}}async function X(e){let t=[];if(e.logFile){let a=A(e.logFile,"gateway");a&&t.push(a)}if(e.sessionsDir){let a=await W("**/*.jsonl",{cwd:e.sessionsDir,resolveWith:e.sessionsDir});for(let i of a){let c=A(i,"sessions");c&&t.push(c)}}if(t.length>0)return t.sort((a,i)=>i.mtimeMs-a.mtimeMs);let[n,o]=await Promise.all([W(B()),W(M())]);return[...n.map(a=>A(a,"gateway")).filter(Boolean),...o.map(a=>A(a,"sessions")).filter(Boolean)].sort((a,i)=>i.mtimeMs-a.mtimeMs)}async function W(e,t){let n=[];for await(let o of Je(e,{cwd:t?.cwd}))n.push(t?.resolveWith?Ke(t.resolveWith,o):o);return n}async function ae(e){let t=await X(e),n=[];return t.length===0&&(n.push("No OpenClaw gateway logs or session files were detected."),n.push("Use --log-file or --sessions-dir if your OpenClaw data lives outside the defaults.")),t.some(o=>o.kind==="gateway")&&n.push("Gateway logs detected. These are preferred when cost metadata is present."),t.some(o=>o.kind==="sessions")&&n.push("Session transcript fallback detected. Xerg will extract usage metadata only."),{canAudit:t.length>0,sources:t,defaults:{gatewayPattern:B(),sessionsPattern:M()},notes:n}}function L(e){return{...e,id:U(`${e.kind}:${e.scope}:${e.scopeId}:${e.title}:${e.costImpactUsd}:${e.summary}`)}}function b(e){return Number(e.toFixed(6))}function de(e){let t=[],o=e.flatMap(i=>i.calls.map(c=>({run:i,call:c}))).filter(({call:i})=>{let c=(i.status??"").toLowerCase();return c.includes("error")||c.includes("fail")}),r=o.reduce((i,c)=>i+c.call.costUsd,0);r>0&&t.push(L({classification:"waste",confidence:"high",kind:"retry-waste",title:"Retry waste is consuming measurable spend",summary:`${o.length} failed call${o.length===1?"":"s"} were followed by additional work, making their spend pure retry overhead.`,scope:"global",scopeId:"all",costImpactUsd:b(r),details:{failedCallCount:o.length}}));for(let i of e){let c=Math.max(...i.calls.map(u=>u.iteration??0));if(c>=7){let d=i.calls.filter(s=>(s.iteration??0)>5).reduce((s,p)=>s+p.costUsd,0);t.push(L({classification:"waste",confidence:"high",kind:"loop-waste",title:`Workflow "${i.workflow}" ran beyond efficient loop bounds`,summary:`This run reached ${c} iterations. Xerg treats the spend after iteration 5 as likely loop waste.`,scope:"run",scopeId:i.id,costImpactUsd:b(d),details:{workflow:i.workflow,maxIteration:c}}))}}let a=new Map;for(let i of e){let c=a.get(i.workflow)??[];c.push(i),a.set(i.workflow,c)}for(let[i,c]of a.entries()){if(c.length>=3){let s=c.map(g=>g.calls.reduce((k,y)=>k+y.inputTokens,0)),p=s.reduce((g,k)=>g+k,0)/s.length,l=c.filter(g=>{let k=g.calls.reduce((y,Re)=>y+Re.inputTokens,0);return k>p*1.75&&k>1500});if(l.length>0){let g=l.reduce((k,y)=>k+y.totalCostUsd,0);t.push(L({classification:"opportunity",confidence:"medium",kind:"context-outlier",title:`Context usage in "${i}" is well above its baseline`,summary:`Xerg found ${l.length} run${l.length===1?"":"s"} in this workflow with input token volume far above the workflow average.`,scope:"workflow",scopeId:i,costImpactUsd:b(g),details:{workflow:i,averageInputTokens:b(p),outlierRunCount:l.length}}))}}let u=c.filter(s=>/(heartbeat|cron|monitor|poll)/i.test(s.workflow));if(u.length>0){let s=u.reduce((p,l)=>p+l.totalCostUsd,0);t.push(L({classification:"opportunity",confidence:"medium",kind:"idle-spend",title:`Idle or monitoring spend detected in "${i}"`,summary:"This workflow name looks like a recurring heartbeat or monitoring loop. Review whether the cadence and model tier are justified.",scope:"workflow",scopeId:i,costImpactUsd:b(s),details:{workflow:i}}))}let d=c.flatMap(s=>s.calls).filter(s=>/(opus|gpt-4o|sonnet)/i.test(s.model)&&/(heartbeat|cron|monitor|summary|tag|triage)/i.test(s.taskClass??i));if(d.length>0){let s=d.reduce((p,l)=>p+l.costUsd,0);t.push(L({classification:"opportunity",confidence:"low",kind:"candidate-downgrade",title:`Candidate model downgrade opportunity in "${i}"`,summary:"An expensive model is being used on a workflow that looks operationally simple. Treat this as an A/B test candidate, not proven waste.",scope:"workflow",scopeId:i,costImpactUsd:b(s*.3),details:{workflow:i,expensiveCallCount:d.length,inspectedSpendUsd:b(s)}}))}}return t.sort((i,c)=>c.costImpactUsd-i.costImpactUsd)}import{readFileSync as He}from"fs";import{basename as Ye}from"path";var j=[{id:"anthropic-claude-haiku-4-5-2026-03-01",provider:"anthropic",model:"claude-haiku-4-5",effectiveDate:"2026-03-01",inputPer1m:.8,outputPer1m:4},{id:"anthropic-claude-sonnet-4-5-2026-03-01",provider:"anthropic",model:"claude-sonnet-4-5",effectiveDate:"2026-03-01",inputPer1m:3,outputPer1m:15},{id:"anthropic-claude-opus-4-2026-03-01",provider:"anthropic",model:"claude-opus-4",effectiveDate:"2026-03-01",inputPer1m:15,outputPer1m:75},{id:"openai-gpt-4o-2026-03-01",provider:"openai",model:"gpt-4o",effectiveDate:"2026-03-01",inputPer1m:2.5,outputPer1m:10},{id:"openai-gpt-4.1-mini-2026-03-01",provider:"openai",model:"gpt-4.1-mini",effectiveDate:"2026-03-01",inputPer1m:.4,outputPer1m:1.6},{id:"google-gemini-2.0-flash-2026-03-01",provider:"google",model:"gemini-2.0-flash",effectiveDate:"2026-03-01",inputPer1m:.35,outputPer1m:1.4},{id:"meta-llama-3.3-70b-2026-03-01",provider:"meta",model:"llama-3.3-70b-instruct",effectiveDate:"2026-03-01",inputPer1m:.9,outputPer1m:.9}];function ze(e,t){let n=e.trim().toLowerCase(),o=t.trim().toLowerCase();return j.find(r=>r.provider.toLowerCase()===n&&r.model.toLowerCase()===o)}function ce(e,t,n,o){let r=ze(e,t);if(!r)return null;let a=Math.max(n,0)/1e6*r.inputPer1m,i=Math.max(o,0)/1e6*r.outputPer1m;return Number((a+i).toFixed(8))}function f(e,t){if(!e||typeof e!="object")return null;let n=e;for(let o of t){let r=n;for(let a of o){if(!r||typeof r!="object"||!(a in r)){r=void 0;break}r=r[a]}if(r!==void 0)return r}return null}function S(e){if(typeof e=="number"&&Number.isFinite(e))return e;if(typeof e=="string"&&e.trim()!==""){let t=Number(e);return Number.isFinite(t)?t:null}return null}function C(e){return typeof e=="string"&&e.trim()!==""?e.trim():null}function ue(e){return typeof e=="boolean"?e:typeof e=="string"?["true","1","yes"].includes(e.trim().toLowerCase()):typeof e=="number"?e>0:!1}function pe(e,t){let n={};for(let o of t){let r=e[o];(typeof r=="string"||typeof r=="number"||typeof r=="boolean")&&(n[o]=r)}return n}function Ve(e){let n=He(e,"utf8").split(/\r?\n/).map(r=>r.trim()).filter(Boolean),o=[];for(let r of n)try{let a=JSON.parse(r);o.push(a)}catch{}return o}function qe(e){return C(f(e,[["provider"],["message","provider"],["usage","provider"]]))??"unknown"}function Qe(e){return C(f(e,[["model"],["message","model"],["usage","model"]]))??"unknown-model"}function le(e,t){return C(f(e,[["workflow"],["session","workflow"],["metadata","workflow"],["agent","name"],["agentId"],["sessionId"]]))??Ye(t,".jsonl")}function Ze(e){return C(f(e,[["environment"],["env"],["metadata","environment"]]))??"local"}function et(e,t,n,o){return C(f(e,[["run_id"],["runId"],["trace_id"],["traceId"],["sessionId"],["thread_id"]]))??`${o}:${t}:${n}`}function tt(e,t){return C(f(e,[["task_class"],["taskClass"],["metadata","taskClass"]]))??t.toLowerCase()}function x(e){let t=S(f(e,[["input_tokens"],["inputTokens"],["usage","input_tokens"],["usage","inputTokens"],["message","usage","input_tokens"],["message","usage","inputTokens"],["usage","prompt_tokens"],["message","usage","prompt_tokens"]]))??0,n=S(f(e,[["output_tokens"],["outputTokens"],["usage","output_tokens"],["usage","outputTokens"],["message","usage","output_tokens"],["message","usage","outputTokens"],["usage","completion_tokens"],["message","usage","completion_tokens"]]))??0,o=S(f(e,[["cost_usd"],["costUsd"],["usage","cost_usd"],["usage","costUsd"],["usage","cost","total"],["message","usage","cost","total"],["message","usage","cost_usd"],["pricing","total_usd"]]))??null;return{inputTokens:t,outputTokens:n,observedCost:o}}function nt(e,t,n,o){let r=qe(t),a=Qe(t),i=le(t,e.path),{inputTokens:c,outputTokens:u,observedCost:d}=x(t),s=ce(r,a,c,u),p=v(f(t,[["timestamp"],["createdAt"],["created_at"]])),l=S(f(t,[["attempt"],["usage","attempt"],["metadata","attempt"]]))??null,g=S(f(t,[["iteration"],["loop_iteration"],["metadata","iteration"]]))??null,k=S(f(t,[["retries"],["retry_count"],["metadata","retries"]]))??0,y=d??s??0;return{id:U(`${n}:${e.path}:${o}:${a}:${p}:${y}`),runId:n,timestamp:p,provider:r,model:a,inputTokens:c,outputTokens:u,costUsd:y,costSource:d!==null?"observed":"estimated",latencyMs:S(f(t,[["latency_ms"],["latencyMs"],["usage","latency_ms"]]))??null,toolCalls:S(f(t,[["tool_calls"],["toolCalls"],["usage","tool_calls"]]))??0,retries:k,attempt:l,iteration:g,status:C(f(t,[["status"],["level"],["result"],["error","type"]]))??null,taskClass:tt(t,i),cacheHit:ue(f(t,[["cache_hit"],["cacheHit"],["usage","cache_hit"]])),cacheCostUsd:S(f(t,[["cache_cost_usd"],["cacheCostUsd"],["usage","cache_cost_usd"]]))??null,metadata:pe(t,["event","type","sessionId","agentId"])}}function st(e){return x(e).inputTokens>0||x(e).outputTokens>0||x(e).observedCost!==null}function me(e,t){let n=H(t),o=new Map;for(let r of e)Ve(r.path).forEach((i,c)=>{if(!st(i))return;let u=le(i,r.path),d=v(f(i,[["timestamp"],["createdAt"],["created_at"]]));if(n&&new Date(d).getTime()<n)return;let s=et(i,u,c,r.path),p=U(`${r.path}:${s}`),l=nt(r,i,p,c),g=o.get(p);if(!g){o.set(p,{id:p,sourceKind:r.kind,sourcePath:r.path,timestamp:d,workflow:u,environment:Ze(i),tags:{sourceKind:r.kind},calls:[l],totalCostUsd:l.costUsd,totalTokens:l.inputTokens+l.outputTokens,observedCostUsd:l.costSource==="observed"?l.costUsd:0,estimatedCostUsd:l.costSource==="estimated"?l.costUsd:0});return}g.calls.push(l),g.totalCostUsd=Number((g.totalCostUsd+l.costUsd).toFixed(8)),g.totalTokens+=l.inputTokens+l.outputTokens,g.observedCostUsd+=l.costSource==="observed"?l.costUsd:0,g.estimatedCostUsd+=l.costSource==="estimated"?l.costUsd:0});return Array.from(o.values()).sort((r,a)=>new Date(r.timestamp).getTime()-new Date(a.timestamp).getTime())}function fe(e){let t=new Map;for(let n of e){let o=t.get(n.key)??{spendUsd:0,observedSpendUsd:0,callCount:0};o.spendUsd+=n.spendUsd,o.observedSpendUsd+=n.observedSpendUsd,o.callCount+=1,t.set(n.key,o)}return Array.from(t.entries()).map(([n,o])=>{let r=o.spendUsd===0?0:o.observedSpendUsd/o.spendUsd;return{key:n,spendUsd:Number(o.spendUsd.toFixed(6)),callCount:o.callCount,observedShare:Number(r.toFixed(4))}}).sort((n,o)=>o.spendUsd-n.spendUsd)}function ge(e){let t=e.runs.reduce((u,d)=>u+d.calls.length,0),n=e.runs.reduce((u,d)=>u+d.totalCostUsd,0),o=e.runs.reduce((u,d)=>u+d.observedCostUsd,0),r=e.runs.reduce((u,d)=>u+d.estimatedCostUsd,0),a=e.findings.filter(u=>u.classification==="waste").reduce((u,d)=>u+d.costImpactUsd,0),i=e.findings.filter(u=>u.classification==="opportunity").reduce((u,d)=>u+d.costImpactUsd,0),c=R();return{auditId:U(`${c}:${e.runs.length}:${e.sources.map(u=>u.path).join("|")}`),generatedAt:c,comparisonKey:F({sources:e.sources,since:e.since}),comparison:null,since:e.since,runCount:e.runs.length,callCount:t,totalSpendUsd:Number(n.toFixed(6)),observedSpendUsd:Number(o.toFixed(6)),estimatedSpendUsd:Number(r.toFixed(6)),wasteSpendUsd:Number(a.toFixed(6)),opportunitySpendUsd:Number(i.toFixed(6)),structuralWasteRate:Number((n===0?0:a/n).toFixed(4)),wasteByKind:$(e.findings,"waste"),opportunityByKind:$(e.findings,"opportunity"),spendByWorkflow:fe(e.runs.map(u=>({key:u.workflow,spendUsd:u.totalCostUsd,observedSpendUsd:u.observedCostUsd}))),spendByModel:fe(e.runs.flatMap(u=>u.calls.map(d=>({key:`${d.provider}/${d.model}`,spendUsd:d.costUsd,observedSpendUsd:d.costSource==="observed"?d.costUsd:0})))),findings:e.findings,notes:["Cost per outcome is intentionally unavailable in v0. Xerg is measuring waste intelligence only.","Opportunity findings are directional recommendations, not proven waste."],sourceFiles:e.sources,dbPath:e.dbPath}}async function he(e){return ae(e)}async function we(e){if(e.compare&&e.noDb)throw new Error("The --compare flag needs local snapshot history. Remove --no-db or provide --db <path>.");let t=await X(e);if(t.length===0)throw new Error("No OpenClaw sources were detected. Run `xerg doctor` or provide --log-file / --sessions-dir.");let n=me(t,e.since),o=de(n),r=e.noDb?void 0:e.dbPath??ie(),a=ge({runs:n,findings:o,sources:t,since:e.since,dbPath:r});if(e.compare&&r){let i=se({dbPath:r,comparisonKey:a.comparisonKey,currentAuditId:a.auditId});i?a.comparison=ne(a,i):a.notes=[...a.notes,"No prior comparable audit was found. Run the same audit again after a fix to unlock before/after deltas."]}return r&&V({summary:a,runs:n,pricingCatalog:j},r),a}function m(e){return new Intl.NumberFormat("en-US",{style:"currency",currency:"USD",minimumFractionDigits:e>=1?2:4,maximumFractionDigits:4}).format(e)}function N(e){return`${(e*100).toFixed(0)}%`}function Se(e){let t=e*100;return`${t>0?"+":""}${t.toFixed(0)} pts`}function I(e){return`${e>0?"+":""}${m(e)}`}function K(e,t=5){return e.slice(0,t).map(n=>`- ${n.key}: ${m(n.spendUsd)} (${N(n.observedShare)} observed)`)}function Ue(e,t,n){return e.length===0?[`- ${t}`]:e.map(o=>{let r=`${o.findingCount} finding${o.findingCount===1?"":"s"}`,a=n?` ${n}`:"";return`- ${o.label}: ${m(o.spendUsd)} across ${r}${a}`})}function Te(e){return["## Waste taxonomy","Structural waste",...Ue(e.wasteByKind,"No confirmed waste buckets detected."),"Savings opportunities",...Ue(e.opportunityByKind,"No opportunity buckets detected.","(directional)")]}function ot(e,t){return e.findings.filter(n=>n.classification===t).sort((n,o)=>o.costImpactUsd-n.costImpactUsd)[0]}function rt(e){return e.findings.filter(t=>t.classification==="opportunity").sort((t,n)=>{let o=t.kind==="candidate-downgrade"?1:0,r=n.kind==="candidate-downgrade"?1:0;return o!==r?r-o:n.costImpactUsd-t.costImpactUsd})[0]??null}function ke(e,t){return e.length===0?[`- ${t}`]:e.slice(0,5).map(n=>`- ${n.title}: ${m(n.costImpactUsd)} (${n.confidence})`)}function G(e){return`${e.key} (${I(e.deltaSpendUsd)})`}function it(e){return e.filter(t=>t.deltaSpendUsd<0).sort((t,n)=>t.deltaSpendUsd-n.deltaSpendUsd)[0]}function at(e){return e.filter(t=>t.deltaSpendUsd>0).sort((t,n)=>n.deltaSpendUsd-t.deltaSpendUsd)[0]}function J(e,t){return t==="resolved"?`- Resolved: ${e.title} (${m(e.baselineCostImpactUsd??0)})`:t==="worsened"?`- Worsened: ${e.title} (${I(e.deltaCostImpactUsd)})`:`- New: ${e.title} (${m(e.currentCostImpactUsd??0)})`}function dt(e){if(!e.comparison)return[];let t=e.comparison,n=it(t.workflowDeltas),o=at(t.workflowDeltas),r=o?.key??e.spendByWorkflow[0]?.key??null,a=[...t.findingChanges.newHighConfidenceWaste.map(i=>J(i,"new")),...t.findingChanges.resolvedHighConfidenceWaste.map(i=>J(i,"resolved")),...t.findingChanges.worsenedHighConfidenceWaste.map(i=>J(i,"worsened"))].slice(0,5);return["## Before / after",`Compared against ${t.baselineGeneratedAt}`,`- Total spend: ${m(t.baselineTotalSpendUsd)} -> ${m(e.totalSpendUsd)} (${I(t.deltaTotalSpendUsd)})`,`- Structural waste: ${m(t.baselineWasteSpendUsd)} -> ${m(e.wasteSpendUsd)} (${I(t.deltaWasteSpendUsd)})`,`- Waste rate: ${N(t.baselineStructuralWasteRate)} -> ${N(e.structuralWasteRate)} (${Se(t.deltaStructuralWasteRate)})`,`- Runs analyzed: ${t.baselineRunCount} -> ${e.runCount} (${t.deltaRunCount>0?"+":""}${t.deltaRunCount})`,`- Model calls: ${t.baselineCallCount} -> ${e.callCount} (${t.deltaCallCount>0?"+":""}${t.deltaCallCount})`,n?`- Biggest improvement: ${G(n)}`:"- Biggest improvement: none detected",o?`- Biggest regression: ${G(o)}`:"- Biggest regression: none detected",r?`- First workflow to inspect now: ${r}`:"- First workflow to inspect now: no workflow delta available",...t.modelDeltas.length>0?[`- Model swing to inspect: ${G(t.modelDeltas[0])}`]:["- Model swing to inspect: none"],...a.length>0?a:["- High-confidence waste changes: none"]]}function ye(e){return["# Xerg doctor","",e.canAudit?"OpenClaw sources detected.":"No OpenClaw sources detected.","","## Defaults",`- gateway logs: ${e.defaults.gatewayPattern}`,`- session files: ${e.defaults.sessionsPattern}`,"","## Sources",...e.sources.length>0?e.sources.map(n=>`- [${n.kind}] ${n.path}`):["- none"],"","## Notes",...e.notes.map(n=>`- ${n}`)].join(`
-`)}function Ce(e){let t=e.findings.filter(a=>a.classification==="waste"),n=e.findings.filter(a=>a.classification==="opportunity"),o=rt(e),r=ot(e,"waste");return["# Xerg audit","",`Total spend: ${m(e.totalSpendUsd)}`,`Observed spend: ${m(e.observedSpendUsd)}`,`Estimated spend: ${m(e.estimatedSpendUsd)}`,`Runs analyzed: ${e.runCount}`,`Model calls: ${e.callCount}`,`Structural waste identified: ${m(e.wasteSpendUsd)} (${N(e.structuralWasteRate)})`,`Potential impact surfaced: ${m(e.opportunitySpendUsd)}`,"",...Te(e),"","## Top workflows",...K(e.spendByWorkflow),"","## Top models",...K(e.spendByModel),"","## High-confidence waste",...ke(t,"none detected"),"","## Opportunities",...ke(n,"none detected"),"","## First savings test",...o?[`- Start with ${o.title}: ${m(o.costImpactUsd)} of potential impact`,`- Why this test first: ${o.summary}`]:["- No savings test surfaced yet"],...r?[`- Confirmed leak to close first: ${r.title}`]:["- Confirmed leak to close first: none"],...e.spendByWorkflow[0]?[`- Workflow to inspect first: ${e.spendByWorkflow[0].key}`]:["- Workflow to inspect first: none"],"",...dt(e),...e.comparison?[""]:[],"## Notes",...e.notes.map(a=>`- ${a}`)].join(`
-`)}function be(e){let t=["# Xerg Audit Report","",`- Generated: ${e.generatedAt}`,`- Total spend: ${m(e.totalSpendUsd)}`,`- Observed spend: ${m(e.observedSpendUsd)}`,`- Estimated spend: ${m(e.estimatedSpendUsd)}`,`- Structural waste identified: ${m(e.wasteSpendUsd)} (${N(e.structuralWasteRate)})`,`- Potential impact surfaced: ${m(e.opportunitySpendUsd)}`,`- Runs analyzed: ${e.runCount}`,`- Model calls: ${e.callCount}`,"",...Te(e),"","## Top workflows",...K(e.spendByWorkflow),"","## Findings",...e.findings.slice(0,10).map(n=>`- **${n.title}** (${n.classification}, ${n.confidence}) \u2014 ${n.summary} Estimated impact: ${m(n.costImpactUsd)}.`)];if(e.comparison){let n=e.comparison;t.push("","## Before / after",`- Compared against: ${n.baselineGeneratedAt}`,`- Total spend: ${m(n.baselineTotalSpendUsd)} -> ${m(e.totalSpendUsd)} (${I(n.deltaTotalSpendUsd)})`,`- Structural waste: ${m(n.baselineWasteSpendUsd)} -> ${m(e.wasteSpendUsd)} (${I(n.deltaWasteSpendUsd)})`,`- Waste rate: ${N(n.baselineStructuralWasteRate)} -> ${N(e.structuralWasteRate)} (${Se(n.deltaStructuralWasteRate)})`)}return t.join(`
-`)}async function Ne(e){let t=await we({logFile:e.logFile,sessionsDir:e.sessionsDir,since:e.since,compare:e.compare,dbPath:e.db,noDb:e.noDb});if(e.json){process.stdout.write(`${JSON.stringify(t,null,2)}
-`);return}if(e.markdown){process.stdout.write(`${be(t)}
-`);return}process.stdout.write(`${Ce(t)}
-`)}async function Ie(e){let t=await he({logFile:e.logFile,sessionsDir:e.sessionsDir});process.stdout.write(`${ye(t)}
-`)}var Ee=Ut(),z=process.argv.slice(2),T=z[0];(!T||T==="--help"||T==="-h"||T==="help")&&(process.stdout.write(ft()),process.exit(0));(T==="--version"||T==="-v"||T==="version")&&(process.stdout.write(`${Ee}
-`),process.exit(0));pt().catch(e=>{let t=e instanceof Error?e.message:"Unknown error";process.stderr.write(`${wt(`xerg failed: ${t}`)}
-`),process.exitCode=1});async function pt(){if(T==="audit"){let e=lt(z.slice(1));if(e.json&&e.markdown)throw new Error("Use either --json or --markdown, not both.");await Ne(e);return}if(T==="doctor"){let e=mt(z.slice(1));await Ie(e);return}throw new Error(`Unknown command "${T}". Run \`xerg --help\` to see available commands.`)}function lt(e){let t={};for(let n=0;n<e.length;n+=1){let o=e[n];switch(o){case"--help":case"-h":process.stdout.write(gt()),process.exit(0);break;case"--log-file":t.logFile=E(o,e[n+1]),n+=1;break;case"--sessions-dir":t.sessionsDir=E(o,e[n+1]),n+=1;break;case"--since":t.since=E(o,e[n+1]),n+=1;break;case"--db":t.db=E(o,e[n+1]),n+=1;break;case"--compare":t.compare=!0;break;case"--json":t.json=!0;break;case"--markdown":t.markdown=!0;break;case"--no-db":t.noDb=!0;break;default:throw new Error(`Unknown audit option "${o}". Run \`xerg audit --help\` for usage.`)}}return t}function mt(e){let t={};for(let n=0;n<e.length;n+=1){let o=e[n];switch(o){case"--help":case"-h":process.stdout.write(ht()),process.exit(0);break;case"--log-file":t.logFile=E(o,e[n+1]),n+=1;break;case"--sessions-dir":t.sessionsDir=E(o,e[n+1]),n+=1;break;default:throw new Error(`Unknown doctor option "${o}". Run \`xerg doctor --help\` for usage.`)}}return t}function E(e,t){if(!t||t.startsWith("-"))throw new Error(`The ${e} flag needs a value.`);return t}function ft(){return`xerg ${Ee}
+        `
+    ).all();
+    return rows.map((row) => parseAuditSummary(row)).filter((summary) => summary !== null);
+  } finally {
+    sqlite.close();
+  }
+}
+function readLatestComparableAuditSummary(input) {
+  return listStoredAuditSummaries(input.dbPath).find((summary) => {
+    if (input.currentAuditId && summary.auditId === input.currentAuditId) {
+      return false;
+    }
+    return summary.comparisonKey === input.comparisonKey;
+  });
+}
+
+// ../core/src/detect/openclaw.ts
+import { readdirSync, statSync } from "fs";
+import { isAbsolute, join as join2, resolve, sep } from "path";
+
+// ../core/src/utils/paths.ts
+import { mkdirSync as mkdirSync2 } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+import { platform } from "process";
+function getAppPaths() {
+  const home = homedir();
+  return platform === "darwin" ? {
+    data: join(home, "Library", "Application Support", "xerg"),
+    config: join(home, "Library", "Preferences", "xerg"),
+    cache: join(home, "Library", "Caches", "xerg")
+  } : platform === "win32" ? {
+    data: join(process.env.LOCALAPPDATA ?? join(home, "AppData", "Local"), "xerg", "Data"),
+    config: join(process.env.APPDATA ?? join(home, "AppData", "Roaming"), "xerg", "Config"),
+    cache: join(process.env.LOCALAPPDATA ?? join(home, "AppData", "Local"), "xerg", "Cache")
+  } : {
+    data: join(process.env.XDG_DATA_HOME ?? join(home, ".local", "share"), "xerg"),
+    config: join(process.env.XDG_CONFIG_HOME ?? join(home, ".config"), "xerg"),
+    cache: join(process.env.XDG_CACHE_HOME ?? join(home, ".cache"), "xerg")
+  };
+}
+function getDefaultDbPath() {
+  return join(getAppPaths().data, "xerg.db");
+}
+function getDefaultSessionsPattern() {
+  return join(homedir(), ".openclaw", "agents", "*", "sessions", "*.jsonl");
+}
+function getDefaultGatewayPattern() {
+  return "/tmp/openclaw/openclaw-*.log";
+}
+
+// ../core/src/detect/openclaw.ts
+function toDetected(path, kind) {
+  try {
+    const stats = statSync(path);
+    if (!stats.isFile()) {
+      return null;
+    }
+    return {
+      kind,
+      path,
+      sizeBytes: stats.size,
+      mtimeMs: stats.mtimeMs
+    };
+  } catch {
+    return null;
+  }
+}
+async function detectOpenClawSources(options) {
+  const explicitSources = [];
+  if (options.logFile) {
+    const detected2 = toDetected(options.logFile, "gateway");
+    if (detected2) {
+      explicitSources.push(detected2);
+    }
+  }
+  if (options.sessionsDir) {
+    const matches = await collectGlobMatches("**/*.jsonl", {
+      cwd: options.sessionsDir,
+      resolveWith: options.sessionsDir
+    });
+    for (const match of matches) {
+      const detected2 = toDetected(match, "sessions");
+      if (detected2) {
+        explicitSources.push(detected2);
+      }
+    }
+  }
+  if (explicitSources.length > 0) {
+    return explicitSources.sort((left, right) => right.mtimeMs - left.mtimeMs);
+  }
+  const [gatewayMatches, sessionMatches] = await Promise.all([
+    collectGlobMatches(getDefaultGatewayPattern()),
+    collectGlobMatches(getDefaultSessionsPattern())
+  ]);
+  const detected = [
+    ...gatewayMatches.map((path) => toDetected(path, "gateway")).filter(Boolean),
+    ...sessionMatches.map((path) => toDetected(path, "sessions")).filter(Boolean)
+  ];
+  return detected.sort((left, right) => right.mtimeMs - left.mtimeMs);
+}
+async function collectGlobMatches(pattern, options) {
+  const baseDir = options?.cwd ? resolve(options.cwd) : isAbsolute(pattern) ? sep : process.cwd();
+  const relativePattern = options?.cwd ? pattern : isAbsolute(pattern) ? pattern.slice(baseDir.length) : pattern;
+  const segments = relativePattern.split("/").filter(Boolean);
+  const matches = collectMatchesFromSegments(baseDir, segments);
+  return matches.map(
+    (match) => options?.resolveWith ? resolve(options.resolveWith, match) : match
+  );
+}
+function collectMatchesFromSegments(currentPath, segments) {
+  if (segments.length === 0) {
+    return [currentPath];
+  }
+  const [segment, ...rest] = segments;
+  if (segment === "**") {
+    const matches2 = collectMatchesFromSegments(currentPath, rest);
+    for (const entry of readDirSafe(currentPath)) {
+      if (entry.isDirectory()) {
+        matches2.push(...collectMatchesFromSegments(join2(currentPath, entry.name), segments));
+      }
+    }
+    return matches2;
+  }
+  const matches = [];
+  const matcher = segmentToRegExp(segment);
+  for (const entry of readDirSafe(currentPath)) {
+    if (!matcher.test(entry.name)) {
+      continue;
+    }
+    const nextPath = join2(currentPath, entry.name);
+    if (rest.length === 0) {
+      matches.push(nextPath);
+      continue;
+    }
+    if (entry.isDirectory()) {
+      matches.push(...collectMatchesFromSegments(nextPath, rest));
+    }
+  }
+  return matches;
+}
+function readDirSafe(path) {
+  try {
+    return readdirSync(path, { withFileTypes: true });
+  } catch {
+    return [];
+  }
+}
+function segmentToRegExp(segment) {
+  const escaped = segment.replaceAll(/[.+?^${}()|[\]\\]/g, "\\$&").replaceAll("*", ".*");
+  return new RegExp(`^${escaped}$`);
+}
+async function inspectOpenClawSources(options) {
+  const sources = await detectOpenClawSources(options);
+  const notes = [];
+  if (sources.length === 0) {
+    notes.push("No OpenClaw gateway logs or session files were detected.");
+    notes.push(
+      "Use --log-file or --sessions-dir if your OpenClaw data lives outside the defaults."
+    );
+  }
+  if (sources.some((source) => source.kind === "gateway")) {
+    notes.push("Gateway logs detected. These are preferred when cost metadata is present.");
+  }
+  if (sources.some((source) => source.kind === "sessions")) {
+    notes.push("Session transcript fallback detected. Xerg will extract usage metadata only.");
+  }
+  return {
+    canAudit: sources.length > 0,
+    sources,
+    defaults: {
+      gatewayPattern: getDefaultGatewayPattern(),
+      sessionsPattern: getDefaultSessionsPattern()
+    },
+    notes
+  };
+}
+
+// ../core/src/findings/engine.ts
+function createFinding(input) {
+  return {
+    ...input,
+    id: sha1(
+      `${input.kind}:${input.scope}:${input.scopeId}:${input.title}:${input.costImpactUsd}:${input.summary}`
+    )
+  };
+}
+function round2(value) {
+  return Number(value.toFixed(6));
+}
+function buildFindings(runs) {
+  const findings = [];
+  const allCalls = runs.flatMap((run2) => run2.calls.map((call) => ({ run: run2, call })));
+  const retryCandidates = allCalls.filter(({ call }) => {
+    const status = (call.status ?? "").toLowerCase();
+    return status.includes("error") || status.includes("fail");
+  });
+  const retryCost = retryCandidates.reduce((sum, item) => sum + item.call.costUsd, 0);
+  if (retryCost > 0) {
+    findings.push(
+      createFinding({
+        classification: "waste",
+        confidence: "high",
+        kind: "retry-waste",
+        title: "Retry waste is consuming measurable spend",
+        summary: `${retryCandidates.length} failed call${retryCandidates.length === 1 ? "" : "s"} were followed by additional work, making their spend pure retry overhead.`,
+        scope: "global",
+        scopeId: "all",
+        costImpactUsd: round2(retryCost),
+        details: {
+          failedCallCount: retryCandidates.length
+        }
+      })
+    );
+  }
+  for (const run2 of runs) {
+    const maxIteration = Math.max(...run2.calls.map((call) => call.iteration ?? 0));
+    if (maxIteration >= 7) {
+      const loopCalls = run2.calls.filter((call) => (call.iteration ?? 0) > 5);
+      const loopCost = loopCalls.reduce((sum, call) => sum + call.costUsd, 0);
+      findings.push(
+        createFinding({
+          classification: "waste",
+          confidence: "high",
+          kind: "loop-waste",
+          title: `Workflow "${run2.workflow}" ran beyond efficient loop bounds`,
+          summary: `This run reached ${maxIteration} iterations. Xerg treats the spend after iteration 5 as likely loop waste.`,
+          scope: "run",
+          scopeId: run2.id,
+          costImpactUsd: round2(loopCost),
+          details: {
+            workflow: run2.workflow,
+            maxIteration
+          }
+        })
+      );
+    }
+  }
+  const runsByWorkflow = /* @__PURE__ */ new Map();
+  for (const run2 of runs) {
+    const bucket = runsByWorkflow.get(run2.workflow) ?? [];
+    bucket.push(run2);
+    runsByWorkflow.set(run2.workflow, bucket);
+  }
+  for (const [workflow, workflowRuns] of runsByWorkflow.entries()) {
+    if (workflowRuns.length >= 3) {
+      const totalInputs = workflowRuns.map(
+        (run2) => run2.calls.reduce((sum, call) => sum + call.inputTokens, 0)
+      );
+      const average = totalInputs.reduce((sum, value) => sum + value, 0) / totalInputs.length;
+      const outlierRuns = workflowRuns.filter((run2) => {
+        const tokens = run2.calls.reduce((sum, call) => sum + call.inputTokens, 0);
+        return tokens > average * 1.75 && tokens > 1500;
+      });
+      if (outlierRuns.length > 0) {
+        const outlierCost = outlierRuns.reduce((sum, run2) => sum + run2.totalCostUsd, 0);
+        findings.push(
+          createFinding({
+            classification: "opportunity",
+            confidence: "medium",
+            kind: "context-outlier",
+            title: `Context usage in "${workflow}" is well above its baseline`,
+            summary: `Xerg found ${outlierRuns.length} run${outlierRuns.length === 1 ? "" : "s"} in this workflow with input token volume far above the workflow average.`,
+            scope: "workflow",
+            scopeId: workflow,
+            costImpactUsd: round2(outlierCost),
+            details: {
+              workflow,
+              averageInputTokens: round2(average),
+              outlierRunCount: outlierRuns.length
+            }
+          })
+        );
+      }
+    }
+    const idleRuns = workflowRuns.filter(
+      (run2) => /(heartbeat|cron|monitor|poll)/i.test(run2.workflow)
+    );
+    if (idleRuns.length > 0) {
+      const idleCost = idleRuns.reduce((sum, run2) => sum + run2.totalCostUsd, 0);
+      findings.push(
+        createFinding({
+          classification: "opportunity",
+          confidence: "medium",
+          kind: "idle-spend",
+          title: `Idle or monitoring spend detected in "${workflow}"`,
+          summary: "This workflow name looks like a recurring heartbeat or monitoring loop. Review whether the cadence and model tier are justified.",
+          scope: "workflow",
+          scopeId: workflow,
+          costImpactUsd: round2(idleCost),
+          details: {
+            workflow
+          }
+        })
+      );
+    }
+    const downgradeCalls = workflowRuns.flatMap((run2) => run2.calls).filter((call) => {
+      return /(opus|gpt-4o|sonnet)/i.test(call.model) && /(heartbeat|cron|monitor|summary|tag|triage)/i.test(call.taskClass ?? workflow);
+    });
+    if (downgradeCalls.length > 0) {
+      const spend = downgradeCalls.reduce((sum, call) => sum + call.costUsd, 0);
+      findings.push(
+        createFinding({
+          classification: "opportunity",
+          confidence: "low",
+          kind: "candidate-downgrade",
+          title: `Candidate model downgrade opportunity in "${workflow}"`,
+          summary: "An expensive model is being used on a workflow that looks operationally simple. Treat this as an A/B test candidate, not proven waste.",
+          scope: "workflow",
+          scopeId: workflow,
+          costImpactUsd: round2(spend * 0.3),
+          details: {
+            workflow,
+            expensiveCallCount: downgradeCalls.length,
+            inspectedSpendUsd: round2(spend)
+          }
+        })
+      );
+    }
+  }
+  return findings.sort((left, right) => right.costImpactUsd - left.costImpactUsd);
+}
+
+// ../core/src/normalize/openclaw.ts
+import { readFileSync } from "fs";
+import { basename } from "path";
+
+// ../core/src/pricing-catalog.ts
+var PRICING_CATALOG = [
+  {
+    id: "anthropic-claude-haiku-4-5-2026-03-01",
+    provider: "anthropic",
+    model: "claude-haiku-4-5",
+    effectiveDate: "2026-03-01",
+    inputPer1m: 0.8,
+    outputPer1m: 4
+  },
+  {
+    id: "anthropic-claude-sonnet-4-5-2026-03-01",
+    provider: "anthropic",
+    model: "claude-sonnet-4-5",
+    effectiveDate: "2026-03-01",
+    inputPer1m: 3,
+    outputPer1m: 15
+  },
+  {
+    id: "anthropic-claude-opus-4-2026-03-01",
+    provider: "anthropic",
+    model: "claude-opus-4",
+    effectiveDate: "2026-03-01",
+    inputPer1m: 15,
+    outputPer1m: 75
+  },
+  {
+    id: "openai-gpt-4o-2026-03-01",
+    provider: "openai",
+    model: "gpt-4o",
+    effectiveDate: "2026-03-01",
+    inputPer1m: 2.5,
+    outputPer1m: 10
+  },
+  {
+    id: "openai-gpt-4.1-mini-2026-03-01",
+    provider: "openai",
+    model: "gpt-4.1-mini",
+    effectiveDate: "2026-03-01",
+    inputPer1m: 0.4,
+    outputPer1m: 1.6
+  },
+  {
+    id: "google-gemini-2.0-flash-2026-03-01",
+    provider: "google",
+    model: "gemini-2.0-flash",
+    effectiveDate: "2026-03-01",
+    inputPer1m: 0.35,
+    outputPer1m: 1.4
+  },
+  {
+    id: "meta-llama-3.3-70b-2026-03-01",
+    provider: "meta",
+    model: "llama-3.3-70b-instruct",
+    effectiveDate: "2026-03-01",
+    inputPer1m: 0.9,
+    outputPer1m: 0.9
+  }
+];
+function getPricingEntry(provider, model) {
+  const normalizedProvider = provider.trim().toLowerCase();
+  const normalizedModel = model.trim().toLowerCase();
+  return PRICING_CATALOG.find((entry) => {
+    return entry.provider.toLowerCase() === normalizedProvider && entry.model.toLowerCase() === normalizedModel;
+  });
+}
+function estimateCostUsd(provider, model, inputTokens, outputTokens) {
+  const entry = getPricingEntry(provider, model);
+  if (!entry) {
+    return null;
+  }
+  const inputCost = Math.max(inputTokens, 0) / 1e6 * entry.inputPer1m;
+  const outputCost = Math.max(outputTokens, 0) / 1e6 * entry.outputPer1m;
+  return Number((inputCost + outputCost).toFixed(8));
+}
+
+// ../core/src/utils/records.ts
+function getNestedValue(input, paths) {
+  if (!input || typeof input !== "object") {
+    return null;
+  }
+  const record = input;
+  for (const path of paths) {
+    let current = record;
+    for (const segment of path) {
+      if (!current || typeof current !== "object" || !(segment in current)) {
+        current = void 0;
+        break;
+      }
+      current = current[segment];
+    }
+    if (current !== void 0) {
+      return current;
+    }
+  }
+  return null;
+}
+function asNumber(value) {
+  if (typeof value === "number" && Number.isFinite(value)) {
+    return value;
+  }
+  if (typeof value === "string" && value.trim() !== "") {
+    const numeric = Number(value);
+    return Number.isFinite(numeric) ? numeric : null;
+  }
+  return null;
+}
+function asString(value) {
+  if (typeof value === "string" && value.trim() !== "") {
+    return value.trim();
+  }
+  return null;
+}
+function asBoolean(value) {
+  if (typeof value === "boolean") {
+    return value;
+  }
+  if (typeof value === "string") {
+    return ["true", "1", "yes"].includes(value.trim().toLowerCase());
+  }
+  if (typeof value === "number") {
+    return value > 0;
+  }
+  return false;
+}
+function pickMetadata(input, keys) {
+  const output = {};
+  for (const key of keys) {
+    const value = input[key];
+    if (typeof value === "string" || typeof value === "number" || typeof value === "boolean") {
+      output[key] = value;
+    }
+  }
+  return output;
+}
+
+// ../core/src/normalize/openclaw.ts
+function parseJsonLines(path) {
+  const content = readFileSync(path, "utf8");
+  const lines = content.split(/\r?\n/).map((line) => line.trim()).filter(Boolean);
+  const records = [];
+  for (const line of lines) {
+    try {
+      const parsed = JSON.parse(line);
+      records.push(parsed);
+    } catch {
+    }
+  }
+  return records;
+}
+function inferProvider(record) {
+  return asString(
+    getNestedValue(record, [["provider"], ["message", "provider"], ["usage", "provider"]])
+  ) ?? "unknown";
+}
+function inferModel(record) {
+  return asString(getNestedValue(record, [["model"], ["message", "model"], ["usage", "model"]])) ?? "unknown-model";
+}
+function inferWorkflow(record, sourcePath) {
+  return asString(
+    getNestedValue(record, [
+      ["workflow"],
+      ["session", "workflow"],
+      ["metadata", "workflow"],
+      ["agent", "name"],
+      ["agentId"],
+      ["sessionId"]
+    ])
+  ) ?? basename(sourcePath, ".jsonl");
+}
+function inferEnvironment(record) {
+  return asString(getNestedValue(record, [["environment"], ["env"], ["metadata", "environment"]])) ?? "local";
+}
+function inferRunKey(record, workflow, index, sourcePath) {
+  return asString(
+    getNestedValue(record, [
+      ["run_id"],
+      ["runId"],
+      ["trace_id"],
+      ["traceId"],
+      ["sessionId"],
+      ["thread_id"]
+    ])
+  ) ?? `${sourcePath}:${workflow}:${index}`;
+}
+function inferTaskClass(record, workflow) {
+  return asString(getNestedValue(record, [["task_class"], ["taskClass"], ["metadata", "taskClass"]])) ?? workflow.toLowerCase();
+}
+function extractUsage(record) {
+  const inputTokens = asNumber(
+    getNestedValue(record, [
+      ["input_tokens"],
+      ["inputTokens"],
+      ["usage", "input_tokens"],
+      ["usage", "inputTokens"],
+      ["message", "usage", "input_tokens"],
+      ["message", "usage", "inputTokens"],
+      ["usage", "prompt_tokens"],
+      ["message", "usage", "prompt_tokens"]
+    ])
+  ) ?? 0;
+  const outputTokens = asNumber(
+    getNestedValue(record, [
+      ["output_tokens"],
+      ["outputTokens"],
+      ["usage", "output_tokens"],
+      ["usage", "outputTokens"],
+      ["message", "usage", "output_tokens"],
+      ["message", "usage", "outputTokens"],
+      ["usage", "completion_tokens"],
+      ["message", "usage", "completion_tokens"]
+    ])
+  ) ?? 0;
+  const observedCost = asNumber(
+    getNestedValue(record, [
+      ["cost_usd"],
+      ["costUsd"],
+      ["usage", "cost_usd"],
+      ["usage", "costUsd"],
+      ["usage", "cost", "total"],
+      ["message", "usage", "cost", "total"],
+      ["message", "usage", "cost_usd"],
+      ["pricing", "total_usd"]
+    ])
+  ) ?? null;
+  return {
+    inputTokens,
+    outputTokens,
+    observedCost
+  };
+}
+function buildCall(source, record, runId, index) {
+  const provider = inferProvider(record);
+  const model = inferModel(record);
+  const workflow = inferWorkflow(record, source.path);
+  const { inputTokens, outputTokens, observedCost } = extractUsage(record);
+  const estimatedCost = estimateCostUsd(provider, model, inputTokens, outputTokens);
+  const timestamp = toIsoOrNow(
+    getNestedValue(record, [["timestamp"], ["createdAt"], ["created_at"]])
+  );
+  const attempt = asNumber(
+    getNestedValue(record, [["attempt"], ["usage", "attempt"], ["metadata", "attempt"]])
+  ) ?? null;
+  const iteration = asNumber(
+    getNestedValue(record, [["iteration"], ["loop_iteration"], ["metadata", "iteration"]])
+  ) ?? null;
+  const retries = asNumber(getNestedValue(record, [["retries"], ["retry_count"], ["metadata", "retries"]])) ?? 0;
+  const costUsd = observedCost ?? estimatedCost ?? 0;
+  return {
+    id: sha1(`${runId}:${source.path}:${index}:${model}:${timestamp}:${costUsd}`),
+    runId,
+    timestamp,
+    provider,
+    model,
+    inputTokens,
+    outputTokens,
+    costUsd,
+    costSource: observedCost !== null ? "observed" : "estimated",
+    latencyMs: asNumber(getNestedValue(record, [["latency_ms"], ["latencyMs"], ["usage", "latency_ms"]])) ?? null,
+    toolCalls: asNumber(getNestedValue(record, [["tool_calls"], ["toolCalls"], ["usage", "tool_calls"]])) ?? 0,
+    retries,
+    attempt,
+    iteration,
+    status: asString(getNestedValue(record, [["status"], ["level"], ["result"], ["error", "type"]])) ?? null,
+    taskClass: inferTaskClass(record, workflow),
+    cacheHit: asBoolean(
+      getNestedValue(record, [["cache_hit"], ["cacheHit"], ["usage", "cache_hit"]])
+    ),
+    cacheCostUsd: asNumber(
+      getNestedValue(record, [["cache_cost_usd"], ["cacheCostUsd"], ["usage", "cache_cost_usd"]])
+    ) ?? null,
+    metadata: pickMetadata(record, ["event", "type", "sessionId", "agentId"])
+  };
+}
+function shouldTreatAsCall(record) {
+  const hasUsage = extractUsage(record).inputTokens > 0 || extractUsage(record).outputTokens > 0 || extractUsage(record).observedCost !== null;
+  return hasUsage;
+}
+function normalizeOpenClawSources(sources, since) {
+  const cutoff = parseSince(since);
+  const runsById = /* @__PURE__ */ new Map();
+  for (const source of sources) {
+    const records = parseJsonLines(source.path);
+    records.forEach((record, index) => {
+      if (!shouldTreatAsCall(record)) {
+        return;
+      }
+      const workflow = inferWorkflow(record, source.path);
+      const timestamp = toIsoOrNow(
+        getNestedValue(record, [["timestamp"], ["createdAt"], ["created_at"]])
+      );
+      if (cutoff && new Date(timestamp).getTime() < cutoff) {
+        return;
+      }
+      const runKey = inferRunKey(record, workflow, index, source.path);
+      const runId = sha1(`${source.path}:${runKey}`);
+      const call = buildCall(source, record, runId, index);
+      const existing = runsById.get(runId);
+      if (!existing) {
+        runsById.set(runId, {
+          id: runId,
+          sourceKind: source.kind,
+          sourcePath: source.path,
+          timestamp,
+          workflow,
+          environment: inferEnvironment(record),
+          tags: {
+            sourceKind: source.kind
+          },
+          calls: [call],
+          totalCostUsd: call.costUsd,
+          totalTokens: call.inputTokens + call.outputTokens,
+          observedCostUsd: call.costSource === "observed" ? call.costUsd : 0,
+          estimatedCostUsd: call.costSource === "estimated" ? call.costUsd : 0
+        });
+        return;
+      }
+      existing.calls.push(call);
+      existing.totalCostUsd = Number((existing.totalCostUsd + call.costUsd).toFixed(8));
+      existing.totalTokens += call.inputTokens + call.outputTokens;
+      existing.observedCostUsd += call.costSource === "observed" ? call.costUsd : 0;
+      existing.estimatedCostUsd += call.costSource === "estimated" ? call.costUsd : 0;
+    });
+  }
+  return Array.from(runsById.values()).sort((left, right) => {
+    return new Date(left.timestamp).getTime() - new Date(right.timestamp).getTime();
+  });
+}
+
+// ../core/src/report/summary.ts
+function buildBreakdown(items) {
+  const buckets = /* @__PURE__ */ new Map();
+  for (const item of items) {
+    const current = buckets.get(item.key) ?? { spendUsd: 0, observedSpendUsd: 0, callCount: 0 };
+    current.spendUsd += item.spendUsd;
+    current.observedSpendUsd += item.observedSpendUsd;
+    current.callCount += 1;
+    buckets.set(item.key, current);
+  }
+  return Array.from(buckets.entries()).map(([key, value]) => {
+    const observedShare = value.spendUsd === 0 ? 0 : value.observedSpendUsd / value.spendUsd;
+    return {
+      key,
+      spendUsd: Number(value.spendUsd.toFixed(6)),
+      callCount: value.callCount,
+      observedShare: Number(observedShare.toFixed(4))
+    };
+  }).sort((left, right) => right.spendUsd - left.spendUsd);
+}
+function buildAuditSummary(input) {
+  const callCount = input.runs.reduce((sum, run2) => sum + run2.calls.length, 0);
+  const totalSpendUsd = input.runs.reduce((sum, run2) => sum + run2.totalCostUsd, 0);
+  const observedSpendUsd = input.runs.reduce((sum, run2) => sum + run2.observedCostUsd, 0);
+  const estimatedSpendUsd = input.runs.reduce((sum, run2) => sum + run2.estimatedCostUsd, 0);
+  const wasteSpendUsd = input.findings.filter((finding) => finding.classification === "waste").reduce((sum, finding) => sum + finding.costImpactUsd, 0);
+  const opportunitySpendUsd = input.findings.filter((finding) => finding.classification === "opportunity").reduce((sum, finding) => sum + finding.costImpactUsd, 0);
+  const generatedAt = isoNow();
+  return {
+    auditId: sha1(
+      `${generatedAt}:${input.runs.length}:${input.sources.map((source) => source.path).join("|")}`
+    ),
+    generatedAt,
+    comparisonKey: input.comparisonKeyOverride ?? buildComparisonKey({
+      sources: input.sources,
+      since: input.since
+    }),
+    comparison: null,
+    since: input.since,
+    runCount: input.runs.length,
+    callCount,
+    totalSpendUsd: Number(totalSpendUsd.toFixed(6)),
+    observedSpendUsd: Number(observedSpendUsd.toFixed(6)),
+    estimatedSpendUsd: Number(estimatedSpendUsd.toFixed(6)),
+    wasteSpendUsd: Number(wasteSpendUsd.toFixed(6)),
+    opportunitySpendUsd: Number(opportunitySpendUsd.toFixed(6)),
+    structuralWasteRate: Number(
+      (totalSpendUsd === 0 ? 0 : wasteSpendUsd / totalSpendUsd).toFixed(4)
+    ),
+    wasteByKind: buildTaxonomyBuckets(input.findings, "waste"),
+    opportunityByKind: buildTaxonomyBuckets(input.findings, "opportunity"),
+    spendByWorkflow: buildBreakdown(
+      input.runs.map((run2) => ({
+        key: run2.workflow,
+        spendUsd: run2.totalCostUsd,
+        observedSpendUsd: run2.observedCostUsd
+      }))
+    ),
+    spendByModel: buildBreakdown(
+      input.runs.flatMap(
+        (run2) => run2.calls.map((call) => ({
+          key: `${call.provider}/${call.model}`,
+          spendUsd: call.costUsd,
+          observedSpendUsd: call.costSource === "observed" ? call.costUsd : 0
+        }))
+      )
+    ),
+    findings: input.findings,
+    notes: [
+      "Cost per outcome is intentionally unavailable in v0. Xerg is measuring waste intelligence only.",
+      "Opportunity findings are directional recommendations, not proven waste."
+    ],
+    sourceFiles: input.sources,
+    dbPath: input.dbPath
+  };
+}
+
+// ../core/src/audit.ts
+async function doctorOpenClaw(options) {
+  return inspectOpenClawSources(options);
+}
+async function auditOpenClaw(options) {
+  if (options.compare && options.noDb) {
+    throw new Error(
+      "The --compare flag needs local snapshot history. Remove --no-db or provide --db <path>."
+    );
+  }
+  const sources = await detectOpenClawSources(options);
+  if (sources.length === 0) {
+    throw new Error(
+      "No OpenClaw sources were detected. Run `xerg doctor` or provide --log-file / --sessions-dir."
+    );
+  }
+  const runs = normalizeOpenClawSources(sources, options.since);
+  const findings = buildFindings(runs);
+  const dbPath = options.noDb ? void 0 : options.dbPath ?? getDefaultDbPath();
+  const summary = buildAuditSummary({
+    runs,
+    findings,
+    sources,
+    since: options.since,
+    dbPath,
+    comparisonKeyOverride: options.comparisonKeyOverride
+  });
+  if (options.compare && dbPath) {
+    const baseline = readLatestComparableAuditSummary({
+      dbPath,
+      comparisonKey: summary.comparisonKey,
+      currentAuditId: summary.auditId
+    });
+    if (baseline) {
+      summary.comparison = buildAuditComparison(summary, baseline);
+    } else {
+      summary.notes = [
+        ...summary.notes,
+        "No prior comparable audit was found. Run the same audit again after a fix to unlock before/after deltas."
+      ];
+    }
+  }
+  if (dbPath) {
+    persistAudit(
+      {
+        summary,
+        runs,
+        pricingCatalog: PRICING_CATALOG
+      },
+      dbPath
+    );
+  }
+  return summary;
+}
+
+// ../core/src/recommendations.ts
+var templatesByKind = {
+  "retry-waste": {
+    actionType: "other",
+    titleFn: () => "Add retry backoff or reduce retry attempts",
+    descriptionFn: (f) => `${f.summary} Consider adding exponential backoff or reducing the maximum retry count to eliminate this overhead.`,
+    suggestedChangeFn: (f) => ({
+      strategy: "exponential-backoff",
+      maxRetries: 3,
+      failedCallCount: f.details.failedCallCount
+    })
+  },
+  "loop-waste": {
+    actionType: "other",
+    titleFn: (f) => `Cap iteration depth for ${extractWorkflow(f)}`,
+    descriptionFn: (f) => `${f.summary} Adding an iteration limit or early-exit condition would prevent runaway loops from burning spend.`,
+    suggestedChangeFn: (f) => ({
+      strategy: "iteration-cap",
+      suggestedMaxIterations: 5,
+      observedMaxIteration: f.details.maxIteration
+    })
+  },
+  "context-outlier": {
+    actionType: "prompt-trim",
+    titleFn: (f) => `Trim context for ${extractWorkflow(f)}`,
+    descriptionFn: (f) => `${f.summary} Reducing input token volume to near the workflow baseline would lower cost proportionally.`,
+    suggestedChangeFn: (f) => ({
+      strategy: "context-reduction",
+      averageInputTokens: f.details.averageInputTokens
+    })
+  },
+  "candidate-downgrade": {
+    actionType: "model-switch",
+    titleFn: (f) => `Evaluate cheaper model for ${extractWorkflow(f)}`,
+    descriptionFn: (f) => `${f.summary} This is an A/B test candidate \u2014 try a cheaper model on this workflow and compare quality.`,
+    suggestedChangeFn: () => ({
+      strategy: "model-downgrade",
+      candidates: ["claude-3-haiku", "gpt-4o-mini"]
+    })
+  },
+  "idle-spend": {
+    actionType: "other",
+    titleFn: (f) => `Review cadence for ${extractWorkflow(f)}`,
+    descriptionFn: (f) => `${f.summary} Consider reducing polling frequency or switching to an event-driven approach.`,
+    suggestedChangeFn: () => ({
+      strategy: "cadence-review"
+    })
+  }
+};
+function extractWorkflow(finding) {
+  const details = finding.details;
+  return details.workflow || finding.scopeId || "this workflow";
+}
+function buildSingleRecommendation(finding) {
+  const template = templatesByKind[finding.kind];
+  if (template) {
+    return {
+      id: sha1(`rec:${finding.id}:${template.actionType}`),
+      findingId: finding.id,
+      kind: finding.kind,
+      title: template.titleFn(finding),
+      description: template.descriptionFn(finding),
+      estimatedSavingsUsd: finding.costImpactUsd,
+      confidence: finding.confidence,
+      actionType: template.actionType,
+      suggestedChange: template.suggestedChangeFn?.(finding)
+    };
+  }
+  return {
+    id: sha1(`rec:${finding.id}:other`),
+    findingId: finding.id,
+    kind: finding.kind,
+    title: `Review: ${finding.title}`,
+    description: finding.summary,
+    estimatedSavingsUsd: finding.costImpactUsd,
+    confidence: finding.confidence,
+    actionType: "other"
+  };
+}
+function buildRecommendations(summary) {
+  return summary.findings.map(buildSingleRecommendation);
+}
+
+// ../core/src/report/render.ts
+function formatUsd(value) {
+  return new Intl.NumberFormat("en-US", {
+    style: "currency",
+    currency: "USD",
+    minimumFractionDigits: value >= 1 ? 2 : 4,
+    maximumFractionDigits: 4
+  }).format(value);
+}
+function formatPercent(value) {
+  return `${(value * 100).toFixed(0)}%`;
+}
+function formatPercentDelta(value) {
+  const points = value * 100;
+  const sign = points > 0 ? "+" : "";
+  return `${sign}${points.toFixed(0)} pts`;
+}
+function formatUsdDelta(value) {
+  const sign = value > 0 ? "+" : "";
+  return `${sign}${formatUsd(value)}`;
+}
+function topRows(rows, limit = 5) {
+  return rows.slice(0, limit).map((row) => {
+    return `- ${row.key}: ${formatUsd(row.spendUsd)} (${formatPercent(row.observedShare)} observed)`;
+  });
+}
+function renderTaxonomyRows(rows, emptyLabel, suffix) {
+  if (rows.length === 0) {
+    return [`- ${emptyLabel}`];
+  }
+  return rows.map((row) => {
+    const countLabel = `${row.findingCount} finding${row.findingCount === 1 ? "" : "s"}`;
+    const detail = suffix ? ` ${suffix}` : "";
+    return `- ${row.label}: ${formatUsd(row.spendUsd)} across ${countLabel}${detail}`;
+  });
+}
+function renderTaxonomyBlock(summary) {
+  return [
+    "## Waste taxonomy",
+    "Structural waste",
+    ...renderTaxonomyRows(summary.wasteByKind, "No confirmed waste buckets detected."),
+    "Savings opportunities",
+    ...renderTaxonomyRows(
+      summary.opportunityByKind,
+      "No opportunity buckets detected.",
+      "(directional)"
+    )
+  ];
+}
+function topFinding(summary, classification) {
+  return summary.findings.filter((finding) => finding.classification === classification).sort((left, right) => right.costImpactUsd - left.costImpactUsd)[0];
+}
+function topSavingsTest(summary) {
+  return summary.findings.filter((finding) => finding.classification === "opportunity").sort((left, right) => {
+    const leftPriority = left.kind === "candidate-downgrade" ? 1 : 0;
+    const rightPriority = right.kind === "candidate-downgrade" ? 1 : 0;
+    if (leftPriority !== rightPriority) {
+      return rightPriority - leftPriority;
+    }
+    return right.costImpactUsd - left.costImpactUsd;
+  })[0] ?? null;
+}
+function renderFindingList(findings, emptyLabel) {
+  if (findings.length === 0) {
+    return [`- ${emptyLabel}`];
+  }
+  return findings.slice(0, 5).map((finding) => {
+    return `- ${finding.title}: ${formatUsd(finding.costImpactUsd)} (${finding.confidence})`;
+  });
+}
+function describeSpendDelta(delta) {
+  return `${delta.key} (${formatUsdDelta(delta.deltaSpendUsd)})`;
+}
+function pickBiggestImprovement(deltas) {
+  return deltas.filter((delta) => delta.deltaSpendUsd < 0).sort((left, right) => left.deltaSpendUsd - right.deltaSpendUsd)[0];
+}
+function pickBiggestRegression(deltas) {
+  return deltas.filter((delta) => delta.deltaSpendUsd > 0).sort((left, right) => right.deltaSpendUsd - left.deltaSpendUsd)[0];
+}
+function renderFindingChange(change, state) {
+  if (state === "resolved") {
+    return `- Resolved: ${change.title} (${formatUsd(change.baselineCostImpactUsd ?? 0)})`;
+  }
+  if (state === "worsened") {
+    return `- Worsened: ${change.title} (${formatUsdDelta(change.deltaCostImpactUsd)})`;
+  }
+  return `- New: ${change.title} (${formatUsd(change.currentCostImpactUsd ?? 0)})`;
+}
+function renderCompareBlock(summary) {
+  if (!summary.comparison) {
+    return [];
+  }
+  const comparison = summary.comparison;
+  const biggestImprovement = pickBiggestImprovement(comparison.workflowDeltas);
+  const biggestRegression = pickBiggestRegression(comparison.workflowDeltas);
+  const firstWorkflowToInspect = biggestRegression?.key ?? summary.spendByWorkflow[0]?.key ?? null;
+  const findingChanges = [
+    ...comparison.findingChanges.newHighConfidenceWaste.map(
+      (change) => renderFindingChange(change, "new")
+    ),
+    ...comparison.findingChanges.resolvedHighConfidenceWaste.map(
+      (change) => renderFindingChange(change, "resolved")
+    ),
+    ...comparison.findingChanges.worsenedHighConfidenceWaste.map(
+      (change) => renderFindingChange(change, "worsened")
+    )
+  ].slice(0, 5);
+  return [
+    "## Before / after",
+    `Compared against ${comparison.baselineGeneratedAt}`,
+    `- Total spend: ${formatUsd(comparison.baselineTotalSpendUsd)} -> ${formatUsd(summary.totalSpendUsd)} (${formatUsdDelta(comparison.deltaTotalSpendUsd)})`,
+    `- Structural waste: ${formatUsd(comparison.baselineWasteSpendUsd)} -> ${formatUsd(summary.wasteSpendUsd)} (${formatUsdDelta(comparison.deltaWasteSpendUsd)})`,
+    `- Waste rate: ${formatPercent(comparison.baselineStructuralWasteRate)} -> ${formatPercent(summary.structuralWasteRate)} (${formatPercentDelta(comparison.deltaStructuralWasteRate)})`,
+    `- Runs analyzed: ${comparison.baselineRunCount} -> ${summary.runCount} (${comparison.deltaRunCount > 0 ? "+" : ""}${comparison.deltaRunCount})`,
+    `- Model calls: ${comparison.baselineCallCount} -> ${summary.callCount} (${comparison.deltaCallCount > 0 ? "+" : ""}${comparison.deltaCallCount})`,
+    biggestImprovement ? `- Biggest improvement: ${describeSpendDelta(biggestImprovement)}` : "- Biggest improvement: none detected",
+    biggestRegression ? `- Biggest regression: ${describeSpendDelta(biggestRegression)}` : "- Biggest regression: none detected",
+    firstWorkflowToInspect ? `- First workflow to inspect now: ${firstWorkflowToInspect}` : "- First workflow to inspect now: no workflow delta available",
+    ...comparison.modelDeltas.length > 0 ? [`- Model swing to inspect: ${describeSpendDelta(comparison.modelDeltas[0])}`] : ["- Model swing to inspect: none"],
+    ...findingChanges.length > 0 ? findingChanges : ["- High-confidence waste changes: none"]
+  ];
+}
+function renderDoctorReport(report) {
+  const sections = [
+    "# Xerg doctor",
+    "",
+    report.canAudit ? "OpenClaw sources detected." : "No OpenClaw sources detected.",
+    "",
+    "## Defaults",
+    `- gateway logs: ${report.defaults.gatewayPattern}`,
+    `- session files: ${report.defaults.sessionsPattern}`,
+    "",
+    "## Sources",
+    ...report.sources.length > 0 ? report.sources.map((source) => `- [${source.kind}] ${source.path}`) : ["- none"],
+    "",
+    "## Notes",
+    ...report.notes.map((note) => `- ${note}`)
+  ];
+  return sections.join("\n");
+}
+function renderTerminalSummary(summary) {
+  const wasteFindings = summary.findings.filter((finding) => finding.classification === "waste");
+  const opportunityFindings = summary.findings.filter(
+    (finding) => finding.classification === "opportunity"
+  );
+  const topSavings = topSavingsTest(summary);
+  const topWaste = topFinding(summary, "waste");
+  return [
+    "# Xerg audit",
+    "",
+    `Total spend: ${formatUsd(summary.totalSpendUsd)}`,
+    `Observed spend: ${formatUsd(summary.observedSpendUsd)}`,
+    `Estimated spend: ${formatUsd(summary.estimatedSpendUsd)}`,
+    `Runs analyzed: ${summary.runCount}`,
+    `Model calls: ${summary.callCount}`,
+    `Structural waste identified: ${formatUsd(summary.wasteSpendUsd)} (${formatPercent(summary.structuralWasteRate)})`,
+    `Potential impact surfaced: ${formatUsd(summary.opportunitySpendUsd)}`,
+    "",
+    ...renderTaxonomyBlock(summary),
+    "",
+    "## Top workflows",
+    ...topRows(summary.spendByWorkflow),
+    "",
+    "## Top models",
+    ...topRows(summary.spendByModel),
+    "",
+    "## High-confidence waste",
+    ...renderFindingList(wasteFindings, "none detected"),
+    "",
+    "## Opportunities",
+    ...renderFindingList(opportunityFindings, "none detected"),
+    "",
+    "## First savings test",
+    ...topSavings ? [
+      `- Start with ${topSavings.title}: ${formatUsd(topSavings.costImpactUsd)} of potential impact`,
+      `- Why this test first: ${topSavings.summary}`
+    ] : ["- No savings test surfaced yet"],
+    ...topWaste ? [`- Confirmed leak to close first: ${topWaste.title}`] : ["- Confirmed leak to close first: none"],
+    ...summary.spendByWorkflow[0] ? [`- Workflow to inspect first: ${summary.spendByWorkflow[0].key}`] : ["- Workflow to inspect first: none"],
+    "",
+    ...renderCompareBlock(summary),
+    ...summary.comparison ? [""] : [],
+    "## Notes",
+    ...summary.notes.map((note) => `- ${note}`)
+  ].join("\n");
+}
+function renderMarkdownSummary(summary) {
+  const lines = [
+    "# Xerg Audit Report",
+    "",
+    `- Generated: ${summary.generatedAt}`,
+    `- Total spend: ${formatUsd(summary.totalSpendUsd)}`,
+    `- Observed spend: ${formatUsd(summary.observedSpendUsd)}`,
+    `- Estimated spend: ${formatUsd(summary.estimatedSpendUsd)}`,
+    `- Structural waste identified: ${formatUsd(summary.wasteSpendUsd)} (${formatPercent(summary.structuralWasteRate)})`,
+    `- Potential impact surfaced: ${formatUsd(summary.opportunitySpendUsd)}`,
+    `- Runs analyzed: ${summary.runCount}`,
+    `- Model calls: ${summary.callCount}`,
+    "",
+    ...renderTaxonomyBlock(summary),
+    "",
+    "## Top workflows",
+    ...topRows(summary.spendByWorkflow),
+    "",
+    "## Findings",
+    ...summary.findings.slice(0, 10).map((finding) => {
+      return `- **${finding.title}** (${finding.classification}, ${finding.confidence}) \u2014 ${finding.summary} Estimated impact: ${formatUsd(finding.costImpactUsd)}.`;
+    })
+  ];
+  if (summary.comparison) {
+    const comparison = summary.comparison;
+    lines.push(
+      "",
+      "## Before / after",
+      `- Compared against: ${comparison.baselineGeneratedAt}`,
+      `- Total spend: ${formatUsd(comparison.baselineTotalSpendUsd)} -> ${formatUsd(summary.totalSpendUsd)} (${formatUsdDelta(comparison.deltaTotalSpendUsd)})`,
+      `- Structural waste: ${formatUsd(comparison.baselineWasteSpendUsd)} -> ${formatUsd(summary.wasteSpendUsd)} (${formatUsdDelta(comparison.deltaWasteSpendUsd)})`,
+      `- Waste rate: ${formatPercent(comparison.baselineStructuralWasteRate)} -> ${formatPercent(summary.structuralWasteRate)} (${formatPercentDelta(comparison.deltaStructuralWasteRate)})`
+    );
+  }
+  return lines.join("\n");
+}
+
+// ../schemas/dist/index.js
+var AUDIT_PUSH_PAYLOAD_VERSION = 1;
+
+// ../core/src/wire.ts
+function toWireFinding(finding) {
+  return {
+    id: finding.id,
+    classification: finding.classification,
+    confidence: finding.confidence,
+    kind: finding.kind,
+    title: finding.title,
+    summary: finding.summary,
+    scope: finding.scope,
+    scopeId: finding.scopeId,
+    costImpactUsd: finding.costImpactUsd
+  };
+}
+function toWireComparison(comparison) {
+  return {
+    baselineAuditId: comparison.baselineAuditId,
+    baselineGeneratedAt: comparison.baselineGeneratedAt,
+    baselineTotalSpendUsd: comparison.baselineTotalSpendUsd,
+    baselineWasteSpendUsd: comparison.baselineWasteSpendUsd,
+    baselineStructuralWasteRate: comparison.baselineStructuralWasteRate,
+    deltaTotalSpendUsd: comparison.deltaTotalSpendUsd,
+    deltaWasteSpendUsd: comparison.deltaWasteSpendUsd,
+    deltaStructuralWasteRate: comparison.deltaStructuralWasteRate,
+    deltaRunCount: comparison.deltaRunCount,
+    deltaCallCount: comparison.deltaCallCount
+  };
+}
+function toWirePayload(summary, meta) {
+  return {
+    version: AUDIT_PUSH_PAYLOAD_VERSION,
+    summary: {
+      auditId: summary.auditId,
+      generatedAt: summary.generatedAt,
+      comparisonKey: summary.comparisonKey,
+      runCount: summary.runCount,
+      callCount: summary.callCount,
+      totalSpendUsd: summary.totalSpendUsd,
+      observedSpendUsd: summary.observedSpendUsd,
+      estimatedSpendUsd: summary.estimatedSpendUsd,
+      wasteSpendUsd: summary.wasteSpendUsd,
+      opportunitySpendUsd: summary.opportunitySpendUsd,
+      structuralWasteRate: summary.structuralWasteRate,
+      wasteByKind: summary.wasteByKind,
+      opportunityByKind: summary.opportunityByKind,
+      spendByWorkflow: summary.spendByWorkflow,
+      spendByModel: summary.spendByModel,
+      findings: summary.findings.map(toWireFinding),
+      notes: summary.notes,
+      comparison: summary.comparison ? toWireComparison(summary.comparison) : null
+    },
+    meta: {
+      cliVersion: meta.cliVersion,
+      sourceId: meta.sourceId,
+      sourceHost: meta.sourceHost,
+      environment: meta.environment,
+      pushedAt: isoNow()
+    }
+  };
+}
+
+// src/errors.ts
+var NoDataError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "NoDataError";
+  }
+};
+
+// src/push/client.ts
+async function pushAudit(payload, config) {
+  const url = `${config.apiUrl}/v1/audits`;
+  const body = JSON.stringify(payload);
+  let response;
+  try {
+    response = await fetch(url, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${config.apiKey}`
+      },
+      body
+    });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : "Network error";
+    return { ok: false, status: 0, message: `Failed to reach ${config.apiUrl}: ${message}` };
+  }
+  if (response.status === 201) {
+    const data = await response.json();
+    return { ok: true, auditId: data.id ?? payload.summary.auditId };
+  }
+  let errorMessage;
+  try {
+    const data = await response.json();
+    errorMessage = data.error || data.message || response.statusText;
+  } catch {
+    errorMessage = response.statusText || `HTTP ${response.status}`;
+  }
+  return { ok: false, status: response.status, message: errorMessage };
+}
+
+// src/push/config.ts
+import { readFileSync as readFileSync3 } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join4 } from "path";
+
+// src/auth/credentials.ts
+import { existsSync, mkdirSync as mkdirSync3, readFileSync as readFileSync2, rmSync, writeFileSync } from "fs";
+import { homedir as homedir2 } from "os";
+import { dirname as dirname2, join as join3 } from "path";
+function getCredentialsPath() {
+  const xdgConfig = process.env.XDG_CONFIG_HOME || join3(homedir2(), ".config");
+  return join3(xdgConfig, "xerg", "credentials.json");
+}
+function storeCredentials(token) {
+  const credPath = getCredentialsPath();
+  const dir = dirname2(credPath);
+  mkdirSync3(dir, { recursive: true });
+  const data = { token, storedAt: (/* @__PURE__ */ new Date()).toISOString() };
+  writeFileSync(credPath, JSON.stringify(data, null, 2), { mode: 384 });
+}
+function loadStoredCredentials() {
+  const credPath = getCredentialsPath();
+  try {
+    if (!existsSync(credPath)) return null;
+    const raw = readFileSync2(credPath, "utf8");
+    const parsed = JSON.parse(raw);
+    return parsed.token || null;
+  } catch {
+    return null;
+  }
+}
+function clearCredentials() {
+  const credPath = getCredentialsPath();
+  try {
+    if (!existsSync(credPath)) return false;
+    rmSync(credPath);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// src/push/config.ts
+var DEFAULT_API_URL = "https://api.xerg.ai";
+var CONFIG_PATH = join4(homedir3(), ".xerg", "config.json");
+function loadPushConfig() {
+  const envKey = process.env.XERG_API_KEY;
+  const envUrl = process.env.XERG_API_URL;
+  if (envKey) {
+    return {
+      apiKey: envKey,
+      apiUrl: envUrl || DEFAULT_API_URL
+    };
+  }
+  try {
+    const raw = readFileSync3(CONFIG_PATH, "utf8");
+    const parsed = JSON.parse(raw);
+    if (parsed.apiKey) {
+      return {
+        apiKey: parsed.apiKey,
+        apiUrl: envUrl || parsed.apiUrl || DEFAULT_API_URL
+      };
+    }
+  } catch {
+  }
+  const storedToken = loadStoredCredentials();
+  if (storedToken) {
+    return {
+      apiKey: storedToken,
+      apiUrl: envUrl || DEFAULT_API_URL
+    };
+  }
+  throw new Error(
+    `No API key configured. Set XERG_API_KEY, add "apiKey" to ${CONFIG_PATH}, or run \`xerg login\`.
+Get your key at https://xerg.ai/dashboard/settings`
+  );
+}
+
+// src/transport/ssh.ts
+import { execSync, spawnSync } from "child_process";
+import { createHash as createHash2 } from "crypto";
+import { mkdirSync as mkdirSync4, rmSync as rmSync2 } from "fs";
+import { homedir as homedir4, tmpdir } from "os";
+import { join as join5 } from "path";
+var DEFAULT_GATEWAY_DIR = "/tmp/openclaw";
+var DEFAULT_SESSIONS_DIR = "~/.openclaw/agents";
+function hashString(input) {
+  return createHash2("sha256").update(input).digest("hex").slice(0, 12);
+}
+function sshArgs(source) {
+  const args = [];
+  if (source.identityFile) {
+    const resolved = source.identityFile.replace(/^~/, homedir4());
+    args.push("-i", resolved);
+  }
+  args.push("-o", "BatchMode=yes", "-o", "ConnectTimeout=10");
+  return args;
+}
+function rsyncSshCommand(source) {
+  const parts = ["ssh"];
+  if (source.identityFile) {
+    const resolved = source.identityFile.replace(/^~/, homedir4());
+    parts.push(`-i "${resolved}"`);
+  }
+  parts.push("-o BatchMode=yes", "-o ConnectTimeout=10");
+  return parts.join(" ");
+}
+function isRsyncAvailable() {
+  try {
+    spawnSync("rsync", ["--version"], { stdio: "pipe" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function isRemoteRsyncAvailable(source) {
+  try {
+    const result = spawnSync("ssh", [...sshArgs(source), source.host, "which rsync"], {
+      stdio: "pipe",
+      timeout: 15e3
+    });
+    return result.status === 0;
+  } catch {
+    return false;
+  }
+}
+function testSshConnectivity(source) {
+  const result = spawnSync("ssh", [...sshArgs(source), source.host, "echo ok"], {
+    stdio: "pipe",
+    timeout: 15e3
+  });
+  if (result.status === 0) {
+    return { ok: true };
+  }
+  const stderr = result.stderr?.toString().trim() || "Connection failed";
+  return { ok: false, error: stderr };
+}
+function sshExec(source, command2) {
+  const result = spawnSync("ssh", [...sshArgs(source), source.host, command2], {
+    stdio: "pipe",
+    timeout: 3e4
+  });
+  return {
+    stdout: result.stdout?.toString().trim() ?? "",
+    status: result.status ?? 1
+  };
+}
+function buildSinceFind(since) {
+  if (!since) return "";
+  const match = since.trim().toLowerCase().match(/^(\d+)([mhdw])$/);
+  if (!match) return "";
+  const value = Number(match[1]);
+  const unit = match[2];
+  let minutes;
+  switch (unit) {
+    case "m":
+      minutes = value;
+      break;
+    case "h":
+      minutes = value * 60;
+      break;
+    case "d":
+      minutes = value * 60 * 24;
+      break;
+    case "w":
+      minutes = value * 60 * 24 * 7;
+      break;
+    default:
+      return "";
+  }
+  return `-mmin -${minutes}`;
+}
+function rsyncPull(opts) {
+  mkdirSync4(opts.localDir, { recursive: true });
+  const args = ["-avz", "--timeout=30", "-e", rsyncSshCommand(opts.source)];
+  if (opts.includes) {
+    for (const pattern of opts.includes) {
+      args.push("--include", pattern);
+    }
+    args.push("--exclude", "*");
+  }
+  if (opts.since) {
+    const findArgs = buildSinceFind(opts.since);
+    if (findArgs) {
+      const fileListCmd = `find ${opts.remotePath} -type f ${findArgs} 2>/dev/null`;
+      const { stdout, status } = sshExec(opts.source, fileListCmd);
+      if (status !== 0 || !stdout) return false;
+      const files = stdout.split("\n").filter(Boolean);
+      if (files.length === 0) return false;
+      const tmpFile = join5(tmpdir(), `xerg-filelist-${hashString(opts.remotePath)}`);
+      const relativePaths = files.map(
+        (f) => f.startsWith(opts.remotePath) ? f.slice(opts.remotePath.length).replace(/^\//, "") : f
+      );
+      execSync(`cat > ${tmpFile} << 'XERGEOF'
+${relativePaths.join("\n")}
+XERGEOF`);
+      args.push("--files-from", tmpFile);
+    }
+  }
+  const remoteSrc = opts.remotePath.endsWith("/") ? `${opts.source.host}:${opts.remotePath}` : `${opts.source.host}:${opts.remotePath}/`;
+  args.push(remoteSrc, `${opts.localDir}/`);
+  const result = spawnSync("rsync", args, { stdio: "pipe", timeout: 12e4 });
+  return result.status === 0;
+}
+function tarSshPull(opts) {
+  mkdirSync4(opts.localDir, { recursive: true });
+  const tarCmd = `tar -czf - -C ${opts.remotePath} . 2>/dev/null`;
+  const sshArgsList = sshArgs(opts.source);
+  const fullCmd = `ssh ${sshArgsList.map((a) => `"${a}"`).join(" ")} ${opts.source.host} '${tarCmd}' | tar -xzf - -C ${opts.localDir}`;
+  try {
+    execSync(fullCmd, { stdio: "pipe", timeout: 12e4 });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function pullDirectory(opts) {
+  if (opts.useRsync) {
+    const ok = rsyncPull({
+      source: opts.source,
+      remotePath: opts.remotePath,
+      localDir: opts.localDir,
+      includes: opts.includes,
+      since: opts.since
+    });
+    if (ok) return true;
+  }
+  process.stderr.write(
+    opts.useRsync ? "rsync transfer failed, falling back to tar over ssh\n" : "rsync not found, using tar over ssh\n"
+  );
+  return tarSshPull({
+    source: opts.source,
+    remotePath: opts.remotePath,
+    localDir: opts.localDir
+  });
+}
+function resolveLocalPath(source, keepFiles) {
+  if (keepFiles) {
+    const cacheDir = join5(homedir4(), ".xerg", "remote-cache", source.name);
+    mkdirSync4(cacheDir, { recursive: true });
+    return cacheDir;
+  }
+  const hash = hashString(`${source.host}:${Date.now()}`);
+  const tmpPath = join5(tmpdir(), `xerg-remote-${hash}`);
+  mkdirSync4(tmpPath, { recursive: true });
+  return tmpPath;
+}
+function parseRemoteTarget(target) {
+  const portMatch = target.match(/^(.+):(\d+)$/);
+  if (portMatch) {
+    const userHost = portMatch[1];
+    const port = portMatch[2];
+    const atIndex2 = userHost.indexOf("@");
+    return {
+      user: atIndex2 >= 0 ? userHost.slice(0, atIndex2) : "",
+      host: atIndex2 >= 0 ? userHost.slice(atIndex2 + 1) : userHost,
+      port
+    };
+  }
+  const atIndex = target.indexOf("@");
+  return {
+    user: atIndex >= 0 ? target.slice(0, atIndex) : "",
+    host: atIndex >= 0 ? target.slice(atIndex + 1) : target
+  };
+}
+function buildSourceFromFlags(opts) {
+  const parsed = parseRemoteTarget(opts.remote);
+  return {
+    name: parsed.host,
+    transport: "ssh",
+    host: opts.remote,
+    logFile: opts.remoteLogFile,
+    sessionsDir: opts.remoteSessionsDir
+  };
+}
+function buildComparisonKeyForRemote(source) {
+  const logPath = source.logFile ?? DEFAULT_GATEWAY_DIR;
+  const sessPath = source.sessionsDir ?? DEFAULT_SESSIONS_DIR;
+  return `${source.host}:${logPath}:${sessPath}`;
+}
+async function pullRemoteFiles(opts) {
+  const { source, since, keepFiles = false } = opts;
+  const connectivity = testSshConnectivity(source);
+  if (!connectivity.ok) {
+    throw new Error(
+      `Cannot connect to ${source.host}. Check SSH config and key access.${connectivity.error ? ` (${connectivity.error})` : ""}`
+    );
+  }
+  const useRsync = isRsyncAvailable();
+  const localBase = resolveLocalPath(source, keepFiles);
+  const gatewayDir = join5(localBase, "gateway");
+  const sessionsDir = join5(localBase, "sessions");
+  const remoteLogPath = source.logFile ?? DEFAULT_GATEWAY_DIR;
+  const remoteSessionsPath = source.sessionsDir ?? DEFAULT_SESSIONS_DIR;
+  const { stdout: expandedSessions } = sshExec(source, `eval echo ${remoteSessionsPath}`);
+  const resolvedSessionsPath = expandedSessions || remoteSessionsPath;
+  const { status: logPathExists } = sshExec(source, `test -e ${remoteLogPath} && echo exists`);
+  const { status: sessPathExists } = sshExec(
+    source,
+    `test -e ${resolvedSessionsPath} && echo exists`
+  );
+  let pulledLog = false;
+  let pulledSessions = false;
+  if (logPathExists === 0) {
+    const { stdout: isFile } = sshExec(source, `test -f ${remoteLogPath} && echo file`);
+    if (isFile === "file") {
+      const parentDir = remoteLogPath.slice(0, remoteLogPath.lastIndexOf("/")) || "/tmp";
+      const fileName = remoteLogPath.slice(remoteLogPath.lastIndexOf("/") + 1);
+      pulledLog = pullDirectory({
+        source,
+        remotePath: parentDir,
+        localDir: gatewayDir,
+        includes: [fileName],
+        since,
+        useRsync
+      });
+    } else {
+      pulledLog = pullDirectory({
+        source,
+        remotePath: remoteLogPath,
+        localDir: gatewayDir,
+        includes: ["openclaw-*.log", "*.log"],
+        since,
+        useRsync
+      });
+    }
+  }
+  if (sessPathExists === 0) {
+    pulledSessions = pullDirectory({
+      source,
+      remotePath: resolvedSessionsPath,
+      localDir: sessionsDir,
+      includes: ["**/", "*.jsonl"],
+      since,
+      useRsync
+    });
+  }
+  if (!pulledLog && !pulledSessions) {
+    if (keepFiles) {
+      rmSync2(localBase, { recursive: true, force: true });
+    }
+    throw new Error(
+      `No OpenClaw data found at default paths on ${source.host}. Use --remote-log-file or --remote-sessions-dir.`
+    );
+  }
+  const result = {
+    localPath: localBase,
+    source
+  };
+  if (pulledLog) result.logFile = gatewayDir;
+  if (pulledSessions) result.sessionsDir = sessionsDir;
+  return result;
+}
+async function runRemoteDoctor(opts) {
+  const { source } = opts;
+  const notes = [];
+  const connectivity = testSshConnectivity(source);
+  if (!connectivity.ok) {
+    return {
+      host: source.host,
+      sshConnectivity: false,
+      sshError: connectivity.error,
+      rsyncAvailableLocal: false,
+      rsyncAvailableRemote: false,
+      defaultPaths: {
+        gatewayExists: false,
+        gatewayPath: DEFAULT_GATEWAY_DIR,
+        gatewayFileCount: 0,
+        gatewayTotalBytes: 0,
+        sessionsExists: false,
+        sessionsPath: DEFAULT_SESSIONS_DIR,
+        sessionsFileCount: 0,
+        sessionsTotalBytes: 0
+      },
+      notes: [
+        `Cannot connect to ${source.host}. Check SSH config and key access.${connectivity.error ? ` (${connectivity.error})` : ""}`
+      ]
+    };
+  }
+  notes.push("SSH connectivity: OK");
+  const rsyncLocal = isRsyncAvailable();
+  const rsyncRemote = isRemoteRsyncAvailable(source);
+  notes.push(`rsync available locally: ${rsyncLocal ? "yes" : "no"}`);
+  notes.push(`rsync available on remote: ${rsyncRemote ? "yes" : "no"}`);
+  if (!rsyncLocal || !rsyncRemote) {
+    notes.push("tar over ssh fallback will be used for file transfer");
+  }
+  function checkPath(remotePath) {
+    const { stdout: expanded } = sshExec(source, `eval echo ${remotePath}`);
+    const resolved = expanded || remotePath;
+    const { status: exists } = sshExec(source, `test -e ${resolved} && echo exists`);
+    if (exists !== 0) {
+      return { exists: false, path: resolved, fileCount: 0, totalBytes: 0 };
+    }
+    const { stdout: countOut } = sshExec(source, `find ${resolved} -type f 2>/dev/null | wc -l`);
+    const { stdout: sizeOut } = sshExec(source, `du -sb ${resolved} 2>/dev/null | cut -f1`);
+    return {
+      exists: true,
+      path: resolved,
+      fileCount: Number.parseInt(countOut, 10) || 0,
+      totalBytes: Number.parseInt(sizeOut, 10) || 0
+    };
+  }
+  const gateway = checkPath(DEFAULT_GATEWAY_DIR);
+  const sessions = checkPath(DEFAULT_SESSIONS_DIR);
+  if (gateway.exists) {
+    notes.push(
+      `Gateway logs found at ${gateway.path}: ${gateway.fileCount} files, ${formatBytes(gateway.totalBytes)}`
+    );
+  } else {
+    notes.push(`No gateway logs at ${gateway.path}`);
+  }
+  if (sessions.exists) {
+    notes.push(
+      `Sessions found at ${sessions.path}: ${sessions.fileCount} files, ${formatBytes(sessions.totalBytes)}`
+    );
+  } else {
+    notes.push(`No sessions at ${sessions.path}`);
+  }
+  const report = {
+    host: source.host,
+    sshConnectivity: true,
+    rsyncAvailableLocal: rsyncLocal,
+    rsyncAvailableRemote: rsyncRemote,
+    defaultPaths: {
+      gatewayExists: gateway.exists,
+      gatewayPath: gateway.path,
+      gatewayFileCount: gateway.fileCount,
+      gatewayTotalBytes: gateway.totalBytes,
+      sessionsExists: sessions.exists,
+      sessionsPath: sessions.path,
+      sessionsFileCount: sessions.fileCount,
+      sessionsTotalBytes: sessions.totalBytes
+    },
+    notes
+  };
+  if (source.logFile || source.sessionsDir) {
+    const logCheck = source.logFile ? checkPath(source.logFile) : null;
+    const sessCheck = source.sessionsDir ? checkPath(source.sessionsDir) : null;
+    report.customPaths = {
+      logFileExists: logCheck?.exists ?? false,
+      logFilePath: source.logFile ?? "",
+      logFileBytes: logCheck?.totalBytes ?? 0,
+      sessionsDirExists: sessCheck?.exists ?? false,
+      sessionsDirPath: source.sessionsDir ?? "",
+      sessionsFileCount: sessCheck?.fileCount ?? 0,
+      sessionsTotalBytes: sessCheck?.totalBytes ?? 0
+    };
+    if (logCheck?.exists) {
+      notes.push(`Custom log path ${source.logFile}: ${formatBytes(logCheck.totalBytes)}`);
+    } else if (source.logFile) {
+      notes.push(`Custom log path ${source.logFile}: not found`);
+    }
+    if (sessCheck?.exists) {
+      notes.push(
+        `Custom sessions path ${source.sessionsDir}: ${sessCheck.fileCount} files, ${formatBytes(sessCheck.totalBytes)}`
+      );
+    } else if (source.sessionsDir) {
+      notes.push(`Custom sessions path ${source.sessionsDir}: not found`);
+    }
+  }
+  return report;
+}
+function formatBytes(bytes) {
+  if (bytes === 0) return "0 B";
+  const units = ["B", "KB", "MB", "GB"];
+  const i = Math.floor(Math.log(bytes) / Math.log(1024));
+  const value = bytes / 1024 ** i;
+  return `${value.toFixed(i === 0 ? 0 : 1)} ${units[i]}`;
+}
+
+// src/transport/railway.ts
+import { execSync as execSync2, spawnSync as spawnSync2 } from "child_process";
+import { createHash as createHash3 } from "crypto";
+import { mkdirSync as mkdirSync5, rmSync as rmSync3 } from "fs";
+import { homedir as homedir5, tmpdir as tmpdir2 } from "os";
+import { join as join6 } from "path";
+var DEFAULT_GATEWAY_DIR2 = "/tmp/openclaw";
+var DEFAULT_SESSIONS_DIR2 = "~/.openclaw/agents";
+var ALTERNATE_SESSION_PATHS = ["/data/.clawdbot/agents/main/sessions"];
+function hashString2(input) {
+  return createHash3("sha256").update(input).digest("hex").slice(0, 12);
+}
+function railwaySshArgs(target) {
+  const args = ["ssh"];
+  if (target) {
+    args.push(`--project=${target.projectId}`);
+    args.push(`--environment=${target.environmentId}`);
+    args.push(`--service=${target.serviceId}`);
+  }
+  return args;
+}
+function railwayExec(command2, target) {
+  const args = [...railwaySshArgs(target), command2];
+  const result = spawnSync2("railway", args, { stdio: "pipe", timeout: 3e4 });
+  return {
+    stdout: result.stdout?.toString().trim() ?? "",
+    status: result.status ?? 1
+  };
+}
+function buildSinceFind2(since) {
+  if (!since) return "";
+  const match = since.trim().toLowerCase().match(/^(\d+)([mhdw])$/);
+  if (!match) return "";
+  const value = Number(match[1]);
+  const unit = match[2];
+  let minutes;
+  switch (unit) {
+    case "m":
+      minutes = value;
+      break;
+    case "h":
+      minutes = value * 60;
+      break;
+    case "d":
+      minutes = value * 60 * 24;
+      break;
+    case "w":
+      minutes = value * 60 * 24 * 7;
+      break;
+    default:
+      return "";
+  }
+  return `-mmin -${minutes}`;
+}
+function tarRailwayPull(opts) {
+  mkdirSync5(opts.localDir, { recursive: true });
+  let tarCmd;
+  if (opts.since) {
+    const findArgs = buildSinceFind2(opts.since);
+    if (findArgs) {
+      tarCmd = `find ${opts.remotePath} -type f ${findArgs} -print0 2>/dev/null | tar -czf - --null -T - 2>/dev/null | base64`;
+    } else {
+      tarCmd = `tar -czf - -C ${opts.remotePath} . 2>/dev/null | base64`;
+    }
+  } else {
+    tarCmd = `tar -czf - -C ${opts.remotePath} . 2>/dev/null | base64`;
+  }
+  const sshArgs2 = railwaySshArgs(opts.target).join(" ");
+  const fullCmd = `railway ${sshArgs2} '${tarCmd}' | base64 -d | tar -xzf - -C ${opts.localDir}`;
+  try {
+    execSync2(fullCmd, { stdio: "pipe", timeout: 12e4 });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function resolveLocalPath2(source, keepFiles) {
+  if (keepFiles) {
+    const cacheDir = join6(homedir5(), ".xerg", "remote-cache", source.name);
+    mkdirSync5(cacheDir, { recursive: true });
+    return cacheDir;
+  }
+  const identity = source.railway ? `railway:${source.railway.projectId}:${Date.now()}` : `${source.name}:${Date.now()}`;
+  const hash = hashString2(identity);
+  const tmpPath = join6(tmpdir2(), `xerg-remote-${hash}`);
+  mkdirSync5(tmpPath, { recursive: true });
+  return tmpPath;
+}
+function checkRemotePath(remotePath, target) {
+  const { status: exists } = railwayExec(`test -e ${remotePath} && echo exists`, target);
+  if (exists !== 0) {
+    return { exists: false, path: remotePath, fileCount: 0, totalBytes: 0 };
+  }
+  const { stdout: countOut } = railwayExec(
+    `find ${remotePath} -type f 2>/dev/null | wc -l`,
+    target
+  );
+  const { stdout: sizeOut } = railwayExec(`du -sb ${remotePath} 2>/dev/null | cut -f1`, target);
+  return {
+    exists: true,
+    path: remotePath,
+    fileCount: Number.parseInt(countOut, 10) || 0,
+    totalBytes: Number.parseInt(sizeOut, 10) || 0
+  };
+}
+function findSessionsPath(target, customPath) {
+  if (customPath) {
+    const check = checkRemotePath(customPath, target);
+    return check.exists ? customPath : null;
+  }
+  const { stdout: expandedDefault } = railwayExec(`eval echo ${DEFAULT_SESSIONS_DIR2}`, target);
+  const defaultPath = expandedDefault || DEFAULT_SESSIONS_DIR2;
+  const defaultCheck = checkRemotePath(defaultPath, target);
+  if (defaultCheck.exists && defaultCheck.fileCount > 0) {
+    return defaultPath;
+  }
+  for (const altPath of ALTERNATE_SESSION_PATHS) {
+    const check = checkRemotePath(altPath, target);
+    if (check.exists && check.fileCount > 0) {
+      return altPath;
+    }
+  }
+  return null;
+}
+function buildRailwaySourceFromFlags(opts) {
+  const name = opts.railway ? `railway-${opts.railway.serviceId.slice(0, 8)}` : "railway-linked";
+  return {
+    name,
+    transport: "railway",
+    host: name,
+    logFile: opts.remoteLogFile,
+    sessionsDir: opts.remoteSessionsDir,
+    railway: opts.railway
+  };
+}
+function buildComparisonKeyForRailway(source) {
+  const logPath = source.logFile ?? DEFAULT_GATEWAY_DIR2;
+  const sessPath = source.sessionsDir ?? DEFAULT_SESSIONS_DIR2;
+  if (source.railway) {
+    return `railway:${source.railway.projectId}:${source.railway.environmentId}:${source.railway.serviceId}:${logPath}:${sessPath}`;
+  }
+  return `railway-linked:${logPath}:${sessPath}`;
+}
+async function pullRemoteFilesRailway(opts) {
+  const { source, since, keepFiles = false } = opts;
+  const target = source.railway;
+  const { status } = railwayExec("echo ok", target);
+  if (status !== 0) {
+    throw new Error(
+      `Cannot reach Railway service${target ? ` (project: ${target.projectId})` : " (linked project)"}. Check railway CLI auth and service configuration.`
+    );
+  }
+  const localBase = resolveLocalPath2(source, keepFiles);
+  const gatewayDir = join6(localBase, "gateway");
+  const sessionsDir = join6(localBase, "sessions");
+  const remoteLogPath = source.logFile ?? DEFAULT_GATEWAY_DIR2;
+  const logCheck = checkRemotePath(remoteLogPath, target);
+  const resolvedSessionsPath = findSessionsPath(target, source.sessionsDir);
+  let pulledLog = false;
+  let pulledSessions = false;
+  if (logCheck.exists) {
+    const { stdout: isFile } = railwayExec(`test -f ${remoteLogPath} && echo file`, target);
+    if (isFile === "file") {
+      const parentDir = remoteLogPath.slice(0, remoteLogPath.lastIndexOf("/")) || "/tmp";
+      pulledLog = tarRailwayPull({
+        target,
+        remotePath: parentDir,
+        localDir: gatewayDir,
+        since
+      });
+    } else {
+      pulledLog = tarRailwayPull({
+        target,
+        remotePath: remoteLogPath,
+        localDir: gatewayDir,
+        since
+      });
+    }
+  }
+  if (resolvedSessionsPath) {
+    pulledSessions = tarRailwayPull({
+      target,
+      remotePath: resolvedSessionsPath,
+      localDir: sessionsDir,
+      since
+    });
+  }
+  if (!pulledLog && !pulledSessions) {
+    if (keepFiles) {
+      rmSync3(localBase, { recursive: true, force: true });
+    }
+    const checkedPaths = [remoteLogPath, DEFAULT_SESSIONS_DIR2, ...ALTERNATE_SESSION_PATHS].join(
+      ", "
+    );
+    throw new Error(
+      `No OpenClaw data found on Railway service. Checked: ${checkedPaths}. Use --remote-log-file or --remote-sessions-dir to specify custom paths.`
+    );
+  }
+  const result = {
+    localPath: localBase,
+    source
+  };
+  if (pulledLog) result.logFile = gatewayDir;
+  if (pulledSessions) result.sessionsDir = sessionsDir;
+  return result;
+}
+async function runRailwayDoctor(opts) {
+  const { source } = opts;
+  const target = source.railway;
+  const notes = [];
+  const whichCheck = spawnSync2("which", ["railway"], { stdio: "pipe", timeout: 5e3 });
+  const railwayCliInstalled = whichCheck.status === 0;
+  if (!railwayCliInstalled) {
+    return {
+      transport: "railway",
+      name: source.name,
+      railwayCliInstalled: false,
+      railwayAuthenticated: false,
+      serviceReachable: false,
+      defaultPaths: emptyDefaultPaths(),
+      alternateSessionPaths: [],
+      notes: ["Railway CLI is not installed. Install it: npm i -g @railway/cli"]
+    };
+  }
+  const railwayPath = whichCheck.stdout?.toString().trim() ?? "railway";
+  const versionCheck = spawnSync2("railway", ["version"], { stdio: "pipe", timeout: 1e4 });
+  const versionStr = versionCheck.status === 0 ? versionCheck.stdout?.toString().trim() : railwayPath;
+  notes.push(`Railway CLI: installed (${versionStr})`);
+  const whoami = spawnSync2("railway", ["whoami"], { stdio: "pipe", timeout: 1e4 });
+  const railwayAuthenticated = whoami.status === 0;
+  const railwayAuthUser = railwayAuthenticated ? whoami.stdout?.toString().trim() : void 0;
+  if (!railwayAuthenticated) {
+    return {
+      transport: "railway",
+      name: source.name,
+      railwayCliInstalled: true,
+      railwayAuthenticated: false,
+      serviceReachable: false,
+      defaultPaths: emptyDefaultPaths(),
+      alternateSessionPaths: [],
+      notes: [...notes, "Not authenticated. Run: railway login"]
+    };
+  }
+  notes.push(`Authenticated as: ${railwayAuthUser}`);
+  const { status: reachStatus } = railwayExec("echo ok", target);
+  const serviceReachable = reachStatus === 0;
+  if (!serviceReachable) {
+    return {
+      transport: "railway",
+      name: source.name,
+      railwayCliInstalled: true,
+      railwayAuthenticated: true,
+      railwayAuthUser,
+      serviceReachable: false,
+      serviceError: target ? `Cannot reach service ${target.serviceId}` : "Cannot reach linked service. Run: railway link",
+      defaultPaths: emptyDefaultPaths(),
+      alternateSessionPaths: [],
+      notes: [
+        ...notes,
+        target ? `Service unreachable (project: ${target.projectId}, service: ${target.serviceId})` : "Service unreachable. Ensure a project is linked with: railway link"
+      ]
+    };
+  }
+  notes.push("Service connectivity: OK");
+  const gateway = checkRemotePath(DEFAULT_GATEWAY_DIR2, target);
+  const { stdout: expandedDefault } = railwayExec(`eval echo ${DEFAULT_SESSIONS_DIR2}`, target);
+  const resolvedDefault = expandedDefault || DEFAULT_SESSIONS_DIR2;
+  const sessions = checkRemotePath(resolvedDefault, target);
+  if (gateway.exists) {
+    notes.push(
+      `Gateway logs at ${gateway.path}: ${gateway.fileCount} files, ${formatBytes2(gateway.totalBytes)}`
+    );
+  } else {
+    notes.push(`No gateway logs at ${DEFAULT_GATEWAY_DIR2}`);
+  }
+  if (sessions.exists) {
+    notes.push(
+      `Sessions at ${sessions.path}: ${sessions.fileCount} files, ${formatBytes2(sessions.totalBytes)}`
+    );
+  } else {
+    notes.push(`No sessions at ${resolvedDefault}`);
+  }
+  const alternateSessionPaths = ALTERNATE_SESSION_PATHS.map((altPath) => {
+    const check = checkRemotePath(altPath, target);
+    if (check.exists) {
+      notes.push(
+        `Alternate sessions at ${altPath}: ${check.fileCount} files, ${formatBytes2(check.totalBytes)}`
+      );
+    } else {
+      notes.push(`No alternate sessions at ${altPath}`);
+    }
+    return {
+      path: altPath,
+      exists: check.exists,
+      fileCount: check.fileCount,
+      totalBytes: check.totalBytes
+    };
+  });
+  const report = {
+    transport: "railway",
+    name: source.name,
+    railwayCliInstalled: true,
+    railwayAuthenticated: true,
+    railwayAuthUser,
+    serviceReachable: true,
+    defaultPaths: {
+      gatewayExists: gateway.exists,
+      gatewayPath: gateway.path,
+      gatewayFileCount: gateway.fileCount,
+      gatewayTotalBytes: gateway.totalBytes,
+      sessionsExists: sessions.exists,
+      sessionsPath: sessions.path,
+      sessionsFileCount: sessions.fileCount,
+      sessionsTotalBytes: sessions.totalBytes
+    },
+    alternateSessionPaths,
+    notes
+  };
+  if (source.logFile || source.sessionsDir) {
+    const logCheck = source.logFile ? checkRemotePath(source.logFile, target) : null;
+    const sessCheck = source.sessionsDir ? checkRemotePath(source.sessionsDir, target) : null;
+    report.customPaths = {
+      logFileExists: logCheck?.exists ?? false,
+      logFilePath: source.logFile ?? "",
+      logFileBytes: logCheck?.totalBytes ?? 0,
+      sessionsDirExists: sessCheck?.exists ?? false,
+      sessionsDirPath: source.sessionsDir ?? "",
+      sessionsFileCount: sessCheck?.fileCount ?? 0,
+      sessionsTotalBytes: sessCheck?.totalBytes ?? 0
+    };
+    if (logCheck?.exists) {
+      notes.push(`Custom log path ${source.logFile}: ${formatBytes2(logCheck.totalBytes)}`);
+    } else if (source.logFile) {
+      notes.push(`Custom log path ${source.logFile}: not found`);
+    }
+    if (sessCheck?.exists) {
+      notes.push(
+        `Custom sessions path ${source.sessionsDir}: ${sessCheck.fileCount} files, ${formatBytes2(sessCheck.totalBytes)}`
+      );
+    } else if (source.sessionsDir) {
+      notes.push(`Custom sessions path ${source.sessionsDir}: not found`);
+    }
+  }
+  return report;
+}
+function emptyDefaultPaths() {
+  return {
+    gatewayExists: false,
+    gatewayPath: DEFAULT_GATEWAY_DIR2,
+    gatewayFileCount: 0,
+    gatewayTotalBytes: 0,
+    sessionsExists: false,
+    sessionsPath: DEFAULT_SESSIONS_DIR2,
+    sessionsFileCount: 0,
+    sessionsTotalBytes: 0
+  };
+}
+function formatBytes2(bytes) {
+  if (bytes === 0) return "0 B";
+  const units = ["B", "KB", "MB", "GB"];
+  const i = Math.floor(Math.log(bytes) / Math.log(1024));
+  const value = bytes / 1024 ** i;
+  return `${value.toFixed(i === 0 ? 0 : 1)} ${units[i]}`;
+}
+
+// src/transport/config.ts
+import { readFileSync as readFileSync4 } from "fs";
+import { resolve as resolve2 } from "path";
+function loadRemoteConfig(configPath) {
+  const resolved = resolve2(configPath);
+  let raw;
+  try {
+    raw = readFileSync4(resolved, "utf8");
+  } catch {
+    throw new Error(`Cannot read remote config at ${resolved}`);
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    throw new Error(`Invalid JSON in remote config at ${resolved}`);
+  }
+  const config = parsed;
+  if (!config.remotes || !Array.isArray(config.remotes)) {
+    throw new Error('Remote config must have a "remotes" array');
+  }
+  if (config.remotes.length === 0) {
+    throw new Error('Remote config "remotes" array is empty');
+  }
+  return config.remotes.map((entry) => validateAndNormalize(entry));
+}
+function validateAndNormalize(entry) {
+  if (!entry.name || typeof entry.name !== "string") {
+    throw new Error('Each remote must have a "name" string');
+  }
+  const transport = entry.transport ?? "ssh";
+  if (transport !== "ssh" && transport !== "railway") {
+    throw new Error(
+      `Remote "${entry.name}" has invalid transport "${transport}". Use "ssh" or "railway".`
+    );
+  }
+  if (transport === "railway") {
+    return validateRailwayEntry(entry);
+  }
+  return validateSshEntry(entry);
+}
+function validateSshEntry(entry) {
+  if (!entry.host || typeof entry.host !== "string") {
+    throw new Error(`Remote "${entry.name}" must have a "host" string`);
+  }
+  return {
+    name: entry.name,
+    transport: "ssh",
+    host: entry.host,
+    logFile: entry.logFile,
+    sessionsDir: entry.sessionsDir,
+    identityFile: entry.identityFile
+  };
+}
+function validateRailwayEntry(entry) {
+  if (!entry.railway || typeof entry.railway !== "object") {
+    throw new Error(`Remote "${entry.name}" with transport "railway" must have a "railway" object`);
+  }
+  const { projectId, environmentId, serviceId } = entry.railway;
+  if (!projectId || typeof projectId !== "string") {
+    throw new Error(`Remote "${entry.name}" railway config must have a "projectId" string`);
+  }
+  if (!environmentId || typeof environmentId !== "string") {
+    throw new Error(`Remote "${entry.name}" railway config must have an "environmentId" string`);
+  }
+  if (!serviceId || typeof serviceId !== "string") {
+    throw new Error(`Remote "${entry.name}" railway config must have a "serviceId" string`);
+  }
+  return {
+    name: entry.name,
+    transport: "railway",
+    host: `railway-${serviceId.slice(0, 8)}`,
+    logFile: entry.logFile,
+    sessionsDir: entry.sessionsDir,
+    railway: { projectId, environmentId, serviceId }
+  };
+}
+
+// src/commands/audit.ts
+var NO_DATA_PATTERN = /no openclaw sources were detected/i;
+async function auditOrNoData(...args) {
+  try {
+    return await auditOpenClaw(...args);
+  } catch (err) {
+    if (err instanceof Error && NO_DATA_PATTERN.test(err.message)) {
+      throw new NoDataError(err.message);
+    }
+    throw err;
+  }
+}
+async function runAuditCommand(options) {
+  if (options.dryRun && !options.push) {
+    throw new Error("--dry-run requires --push.");
+  }
+  const remoteFlags = [options.remote, options.remoteConfig, options.railway].filter(
+    Boolean
+  ).length;
+  if (remoteFlags > 1) {
+    throw new Error("Use only one of --remote, --remote-config, or --railway.");
+  }
+  if (!options.remote && !options.remoteConfig && !options.railway) {
+    return runLocalAudit(options);
+  }
+  if (options.railway) {
+    const railwayTarget = buildRailwayTarget(options);
+    const source2 = buildRailwaySourceFromFlags({
+      railway: railwayTarget,
+      remoteLogFile: options.remoteLogFile,
+      remoteSessionsDir: options.remoteSessionsDir
+    });
+    return runSingleRemoteAudit(source2, options);
+  }
+  if (options.remoteConfig) {
+    const sources = loadRemoteConfig(options.remoteConfig);
+    if (sources.length === 1) {
+      return runSingleRemoteAudit(sources[0], options);
+    }
+    return runMultiRemoteAudit(sources, options);
+  }
+  const remote = options.remote;
+  const source = buildSourceFromFlags({
+    remote,
+    remoteLogFile: options.remoteLogFile,
+    remoteSessionsDir: options.remoteSessionsDir
+  });
+  return runSingleRemoteAudit(source, options);
+}
+function buildRailwayTarget(options) {
+  if (options.railwayProject && options.railwayEnvironment && options.railwayService) {
+    return {
+      projectId: options.railwayProject,
+      environmentId: options.railwayEnvironment,
+      serviceId: options.railwayService
+    };
+  }
+  return void 0;
+}
+async function runLocalAudit(options) {
+  const summary = await auditOrNoData({
+    logFile: options.logFile,
+    sessionsDir: options.sessionsDir,
+    since: options.since,
+    compare: options.compare,
+    dbPath: options.db,
+    noDb: options.noDb
+  });
+  renderOutput(summary, options);
+  if (options.push) {
+    const meta = buildMeta({ environment: "local", sourceId: hostname(), sourceHost: hostname() });
+    await handlePush(summary, meta, options);
+  }
+  checkThresholds(summary, options);
+}
+function getComparisonKey(source) {
+  if (source.transport === "railway") {
+    return buildComparisonKeyForRailway(source);
+  }
+  return buildComparisonKeyForRemote(source);
+}
+function pullFiles(source, since, keepFiles) {
+  if (source.transport === "railway") {
+    return pullRemoteFilesRailway({ source, since, keepFiles });
+  }
+  return pullRemoteFiles({ source, since, keepFiles });
+}
+function describeSource(source) {
+  if (source.transport === "railway") {
+    return source.railway ? `${source.name} (Railway service ${source.railway.serviceId.slice(0, 8)})` : `${source.name} (Railway linked project)`;
+  }
+  return source.host;
+}
+function sourceEnvironment(source) {
+  return source.transport === "railway" ? "railway" : "remote";
+}
+async function runSingleRemoteAudit(source, options) {
+  process.stderr.write(`Pulling files from ${describeSource(source)}...
+`);
+  const pullResult = await pullFiles(source, options.since, options.keepRemoteFiles);
+  try {
+    const comparisonKeyOverride = getComparisonKey(source);
+    const summary = await auditOrNoData({
+      logFile: pullResult.logFile,
+      sessionsDir: pullResult.sessionsDir,
+      since: options.since,
+      compare: options.compare,
+      dbPath: options.db,
+      noDb: options.noDb,
+      comparisonKeyOverride
+    });
+    renderOutput(summary, options);
+    if (options.push) {
+      const meta = buildMeta({
+        environment: sourceEnvironment(source),
+        sourceId: source.name,
+        sourceHost: source.host
+      });
+      await handlePush(summary, meta, options);
+    }
+    checkThresholds(summary, options);
+  } finally {
+    cleanupPullResult(pullResult, options.keepRemoteFiles);
+  }
+}
+async function runMultiRemoteAudit(sources, options) {
+  const results = [];
+  const errors = [];
+  for (const source of sources) {
+    process.stderr.write(`Pulling files from ${source.name} (${describeSource(source)})...
+`);
+    try {
+      const pullResult = await pullFiles(source, options.since, options.keepRemoteFiles);
+      results.push({ source, pullResult });
+    } catch (err) {
+      const message = err instanceof Error ? err.message : "Unknown error";
+      errors.push({ source, error: message });
+      process.stderr.write(`  Warning: ${message}
+`);
+    }
+  }
+  if (results.length === 0) {
+    const errorMessages = errors.map((e) => `  ${e.source.name}: ${e.error}`).join("\n");
+    throw new Error(`No sources could be pulled:
+${errorMessages}`);
+  }
+  try {
+    const summaries = [];
+    for (const { source, pullResult } of results) {
+      const comparisonKeyOverride = getComparisonKey(source);
+      const summary = await auditOrNoData({
+        logFile: pullResult.logFile,
+        sessionsDir: pullResult.sessionsDir,
+        since: options.since,
+        compare: options.compare,
+        dbPath: options.db,
+        noDb: options.noDb,
+        comparisonKeyOverride
+      });
+      summaries.push({ name: source.name, source, summary });
+    }
+    if (options.json) {
+      const output = summaries.length === 1 ? { ...summaries[0].summary, recommendations: buildRecommendations(summaries[0].summary) } : {
+        sources: summaries.map((s) => ({
+          name: s.name,
+          ...s.summary,
+          recommendations: buildRecommendations(s.summary)
+        }))
+      };
+      process.stdout.write(`${JSON.stringify(output, null, 2)}
+`);
+    } else {
+      for (const { name, summary } of summaries) {
+        if (summaries.length > 1) {
+          process.stdout.write(`
+${"\u2550".repeat(60)}
+  Source: ${name}
+${"\u2550".repeat(60)}
+
+`);
+        }
+        if (options.markdown) {
+          process.stdout.write(`${renderMarkdownSummary(summary)}
+`);
+        } else {
+          process.stdout.write(`${renderTerminalSummary(summary)}
+`);
+        }
+      }
+    }
+    if (errors.length > 0) {
+      process.stderr.write("\nSources that could not be reached:\n");
+      for (const { source, error } of errors) {
+        process.stderr.write(`  ${source.name}: ${error}
+`);
+      }
+    }
+    if (options.push) {
+      for (const { source, summary } of summaries) {
+        const meta = buildMeta({
+          environment: sourceEnvironment(source),
+          sourceId: source.name,
+          sourceHost: source.host
+        });
+        await handlePush(summary, meta, options);
+      }
+    }
+    for (const { summary } of summaries) {
+      checkThresholds(summary, options);
+    }
+  } finally {
+    for (const { pullResult } of results) {
+      cleanupPullResult(pullResult, options.keepRemoteFiles);
+    }
+  }
+}
+function readCliVersion() {
+  try {
+    const packageJsonPath = new URL("../../package.json", import.meta.url);
+    const pkg = JSON.parse(readFileSync5(packageJsonPath, "utf8"));
+    return pkg.version ?? "0.0.0";
+  } catch {
+    return "0.0.0";
+  }
+}
+function buildMeta(input) {
+  return {
+    cliVersion: readCliVersion(),
+    sourceId: input.sourceId,
+    sourceHost: input.sourceHost,
+    environment: input.environment
+  };
+}
+async function handlePush(summary, meta, options) {
+  const payload = toWirePayload(summary, meta);
+  if (options.dryRun) {
+    process.stdout.write(`${JSON.stringify(payload, null, 2)}
+`);
+    return;
+  }
+  const config = loadPushConfig();
+  process.stderr.write(`Pushing audit ${summary.auditId} to ${config.apiUrl}...
+`);
+  const result = await pushAudit(payload, config);
+  if (result.ok) {
+    process.stderr.write(`Pushed successfully (audit: ${result.auditId}).
+`);
+  } else {
+    const statusInfo = result.status > 0 ? ` (HTTP ${result.status})` : "";
+    throw new Error(`Push failed${statusInfo}: ${result.message}`);
+  }
+}
+function renderOutput(summary, options) {
+  if (options.push && options.dryRun) {
+    return;
+  }
+  if (options.json) {
+    const recommendations = buildRecommendations(summary);
+    const output = { ...summary, recommendations };
+    process.stdout.write(`${JSON.stringify(output, null, 2)}
+`);
+    return;
+  }
+  if (options.markdown) {
+    process.stdout.write(`${renderMarkdownSummary(summary)}
+`);
+    return;
+  }
+  process.stdout.write(`${renderTerminalSummary(summary)}
+`);
+}
+function checkThresholds(summary, options) {
+  const breaches = [];
+  if (options.failAboveWasteRate !== void 0 && summary.structuralWasteRate > options.failAboveWasteRate) {
+    breaches.push(
+      `Structural waste rate ${(summary.structuralWasteRate * 100).toFixed(1)}% exceeds threshold ${(options.failAboveWasteRate * 100).toFixed(1)}%`
+    );
+  }
+  if (options.failAboveWasteUsd !== void 0 && summary.wasteSpendUsd > options.failAboveWasteUsd) {
+    breaches.push(
+      `Waste spend $${summary.wasteSpendUsd.toFixed(2)} exceeds threshold $${options.failAboveWasteUsd.toFixed(2)}`
+    );
+  }
+  if (breaches.length > 0) {
+    process.stderr.write(`
+Threshold exceeded:
+${breaches.map((b) => `  ${b}`).join("\n")}
+`);
+    process.exitCode = 3;
+  }
+}
+function cleanupPullResult(pullResult, keepFiles) {
+  if (keepFiles) return;
+  try {
+    rmSync4(pullResult.localPath, { recursive: true, force: true });
+  } catch {
+  }
+}
+
+// src/commands/doctor.ts
+async function runDoctorCommand(options) {
+  if (options.railway) {
+    const railwayTarget = buildRailwayTarget2(options);
+    const source = buildRailwaySourceFromFlags({
+      railway: railwayTarget,
+      remoteLogFile: options.remoteLogFile,
+      remoteSessionsDir: options.remoteSessionsDir
+    });
+    const report2 = await runRailwayDoctor({ source });
+    process.stdout.write(`${renderRailwayDoctorReport(report2)}
+`);
+    return;
+  }
+  if (options.remote) {
+    const source = buildSourceFromFlags({
+      remote: options.remote,
+      remoteLogFile: options.remoteLogFile,
+      remoteSessionsDir: options.remoteSessionsDir
+    });
+    const report2 = await runRemoteDoctor({ source });
+    process.stdout.write(`${renderRemoteDoctorReport(report2)}
+`);
+    return;
+  }
+  const report = await doctorOpenClaw({
+    logFile: options.logFile,
+    sessionsDir: options.sessionsDir
+  });
+  process.stdout.write(`${renderDoctorReport(report)}
+`);
+}
+function buildRailwayTarget2(options) {
+  if (options.railwayProject && options.railwayEnvironment && options.railwayService) {
+    return {
+      projectId: options.railwayProject,
+      environmentId: options.railwayEnvironment,
+      serviceId: options.railwayService
+    };
+  }
+  return void 0;
+}
+function formatBytes3(bytes) {
+  if (bytes === 0) return "0 B";
+  const units = ["B", "KB", "MB", "GB"];
+  const i = Math.floor(Math.log(bytes) / Math.log(1024));
+  const value = bytes / 1024 ** i;
+  return `${value.toFixed(i === 0 ? 0 : 1)} ${units[i]}`;
+}
+function renderRemoteDoctorReport(report) {
+  const sections = [
+    "# Xerg doctor [remote]",
+    "",
+    `Host: ${report.host}`,
+    `SSH connectivity: ${report.sshConnectivity ? "OK" : "FAILED"}`
+  ];
+  if (!report.sshConnectivity) {
+    sections.push("", ...report.notes.map((n) => `[remote] ${n}`));
+    return sections.join("\n");
+  }
+  sections.push(
+    `rsync (local): ${report.rsyncAvailableLocal ? "available" : "not found"}`,
+    `rsync (remote): ${report.rsyncAvailableRemote ? "available" : "not found"}`,
+    "",
+    "## Default paths",
+    `[remote] Gateway (${report.defaultPaths.gatewayPath}): ${report.defaultPaths.gatewayExists ? `${report.defaultPaths.gatewayFileCount} files, ${formatBytes3(report.defaultPaths.gatewayTotalBytes)}` : "not found"}`,
+    `[remote] Sessions (${report.defaultPaths.sessionsPath}): ${report.defaultPaths.sessionsExists ? `${report.defaultPaths.sessionsFileCount} files, ${formatBytes3(report.defaultPaths.sessionsTotalBytes)}` : "not found"}`
+  );
+  if (report.customPaths) {
+    sections.push("", "## Custom paths");
+    if (report.customPaths.logFilePath) {
+      sections.push(
+        `[remote] Log file (${report.customPaths.logFilePath}): ${report.customPaths.logFileExists ? formatBytes3(report.customPaths.logFileBytes) : "not found"}`
+      );
+    }
+    if (report.customPaths.sessionsDirPath) {
+      sections.push(
+        `[remote] Sessions dir (${report.customPaths.sessionsDirPath}): ${report.customPaths.sessionsDirExists ? `${report.customPaths.sessionsFileCount} files, ${formatBytes3(report.customPaths.sessionsTotalBytes)}` : "not found"}`
+      );
+    }
+  }
+  sections.push("", "## Notes", ...report.notes.map((n) => `[remote] ${n}`));
+  return sections.join("\n");
+}
+function renderRailwayDoctorReport(report) {
+  const sections = [
+    "# Xerg doctor [railway]",
+    "",
+    `Source: ${report.name}`,
+    `Railway CLI: ${report.railwayCliInstalled ? "installed" : "NOT INSTALLED"}`
+  ];
+  if (!report.railwayCliInstalled) {
+    sections.push("", ...report.notes.map((n) => `[railway] ${n}`));
+    return sections.join("\n");
+  }
+  sections.push(`Authentication: ${report.railwayAuthenticated ? "OK" : "NOT AUTHENTICATED"}`);
+  if (!report.railwayAuthenticated) {
+    sections.push("", ...report.notes.map((n) => `[railway] ${n}`));
+    return sections.join("\n");
+  }
+  if (report.railwayAuthUser) {
+    sections.push(`User: ${report.railwayAuthUser}`);
+  }
+  sections.push(`Service reachable: ${report.serviceReachable ? "OK" : "FAILED"}`);
+  if (!report.serviceReachable) {
+    if (report.serviceError) {
+      sections.push(`Error: ${report.serviceError}`);
+    }
+    sections.push("", ...report.notes.map((n) => `[railway] ${n}`));
+    return sections.join("\n");
+  }
+  sections.push(
+    "",
+    "## Default paths",
+    `[railway] Gateway (${report.defaultPaths.gatewayPath}): ${report.defaultPaths.gatewayExists ? `${report.defaultPaths.gatewayFileCount} files, ${formatBytes3(report.defaultPaths.gatewayTotalBytes)}` : "not found"}`,
+    `[railway] Sessions (${report.defaultPaths.sessionsPath}): ${report.defaultPaths.sessionsExists ? `${report.defaultPaths.sessionsFileCount} files, ${formatBytes3(report.defaultPaths.sessionsTotalBytes)}` : "not found"}`
+  );
+  if (report.alternateSessionPaths.length > 0) {
+    sections.push("", "## Alternate session paths");
+    for (const alt of report.alternateSessionPaths) {
+      sections.push(
+        `[railway] ${alt.path}: ${alt.exists ? `${alt.fileCount} files, ${formatBytes3(alt.totalBytes)}` : "not found"}`
+      );
+    }
+  }
+  if (report.customPaths) {
+    sections.push("", "## Custom paths");
+    if (report.customPaths.logFilePath) {
+      sections.push(
+        `[railway] Log file (${report.customPaths.logFilePath}): ${report.customPaths.logFileExists ? formatBytes3(report.customPaths.logFileBytes) : "not found"}`
+      );
+    }
+    if (report.customPaths.sessionsDirPath) {
+      sections.push(
+        `[railway] Sessions dir (${report.customPaths.sessionsDirPath}): ${report.customPaths.sessionsDirExists ? `${report.customPaths.sessionsFileCount} files, ${formatBytes3(report.customPaths.sessionsTotalBytes)}` : "not found"}`
+      );
+    }
+  }
+  sections.push("", "## Notes", ...report.notes.map((n) => `[railway] ${n}`));
+  return sections.join("\n");
+}
+
+// src/commands/login.ts
+import { styleText } from "util";
+var DEFAULT_AUTH_URL = "https://xerg.ai/dashboard/settings";
+var DEFAULT_API_URL2 = "https://api.xerg.ai";
+var POLL_INTERVAL_MS = 2e3;
+var POLL_TIMEOUT_MS = 3e5;
+async function runLoginCommand() {
+  const existing = loadStoredCredentials();
+  if (existing) {
+    process.stderr.write(
+      `Already logged in. Credentials stored at ${getCredentialsPath()}.
+Run ${colorBold("xerg logout")} first to re-authenticate.
+`
+    );
+    return;
+  }
+  const apiUrl = process.env.XERG_API_URL || DEFAULT_API_URL2;
+  const deviceCodeUrl = `${apiUrl}/v1/auth/device-code`;
+  let deviceResponse;
+  try {
+    const res = await fetch(deviceCodeUrl, { method: "POST" });
+    if (!res.ok) {
+      throw new Error(`HTTP ${res.status}: ${res.statusText}`);
+    }
+    deviceResponse = await res.json();
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : "Unknown error";
+    throw new Error(
+      `Could not start device auth flow (${msg}).
+
+Alternative: create an API key at ${DEFAULT_AUTH_URL}
+and set XERG_API_KEY in your environment.`
+    );
+  }
+  const verifyUrl = deviceResponse.verificationUrl || DEFAULT_AUTH_URL;
+  const pollInterval = (deviceResponse.interval || 2) * 1e3;
+  process.stderr.write(
+    `
+Open this URL in your browser to authenticate:
+
+  ${colorBold(verifyUrl)}
+
+`
+  );
+  if (deviceResponse.userCode) {
+    process.stderr.write(`Your code: ${colorBold(deviceResponse.userCode)}
+
+`);
+  }
+  process.stderr.write("Waiting for authentication...\n");
+  await openBrowser(verifyUrl);
+  const tokenUrl = `${apiUrl}/v1/auth/device-token`;
+  const startTime = Date.now();
+  while (Date.now() - startTime < POLL_TIMEOUT_MS) {
+    await sleep(Math.max(pollInterval, POLL_INTERVAL_MS));
+    try {
+      const res = await fetch(tokenUrl, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ deviceCode: deviceResponse.deviceCode })
+      });
+      if (res.status === 200) {
+        const data = await res.json();
+        storeCredentials(data.token);
+        const teamInfo = data.teamName ? ` (team: ${data.teamName})` : "";
+        process.stderr.write(
+          `
+${colorSuccess("Authenticated successfully")}${teamInfo}.
+Credentials saved to ${getCredentialsPath()}.
+`
+        );
+        return;
+      }
+      if (res.status === 428) {
+        continue;
+      }
+      if (res.status === 410) {
+        throw new Error("Device code expired. Please run `xerg login` again.");
+      }
+      const body = await res.json().catch(() => ({}));
+      throw new Error(body.error || `Unexpected response: HTTP ${res.status}`);
+    } catch (err) {
+      if (err instanceof Error && (err.message.includes("expired") || err.message.includes("Unexpected"))) {
+        throw err;
+      }
+    }
+  }
+  throw new Error("Authentication timed out. Please run `xerg login` again.");
+}
+async function openBrowser(url) {
+  const { exec } = await import("child_process");
+  const { platform: platform2 } = await import("os");
+  const commands = {
+    darwin: "open",
+    win32: "start",
+    linux: "xdg-open"
+  };
+  const cmd = commands[platform2()];
+  if (!cmd) return;
+  return new Promise((resolve3) => {
+    exec(`${cmd} ${JSON.stringify(url)}`, () => resolve3());
+  });
+}
+function sleep(ms) {
+  return new Promise((resolve3) => setTimeout(resolve3, ms));
+}
+function colorBold(text) {
+  return process.stderr.isTTY ? styleText("bold", text) : text;
+}
+function colorSuccess(text) {
+  return process.stderr.isTTY ? styleText("green", text) : text;
+}
+
+// src/commands/logout.ts
+function runLogoutCommand() {
+  const removed = clearCredentials();
+  if (removed) {
+    process.stderr.write(`Credentials removed from ${getCredentialsPath()}.
+`);
+  } else {
+    process.stderr.write("No stored credentials found. Already logged out.\n");
+  }
+}
+
+// src/commands/push.ts
+import { readFileSync as readFileSync6 } from "fs";
+import { hostname as hostname2 } from "os";
+async function runPushCommand(options) {
+  const payload = options.file ? loadPayloadFromFile(options.file) : loadPayloadFromCache();
+  if (options.dryRun) {
+    process.stdout.write(`${JSON.stringify(payload, null, 2)}
+`);
+    return;
+  }
+  const config = loadPushConfig();
+  const auditId = payload.summary.auditId;
+  process.stderr.write(`Pushing audit ${auditId} to ${config.apiUrl}...
+`);
+  const result = await pushAudit(payload, config);
+  if (result.ok) {
+    process.stderr.write(`Pushed successfully (audit: ${result.auditId}).
+`);
+  } else {
+    const statusInfo = result.status > 0 ? ` (HTTP ${result.status})` : "";
+    throw new Error(`Push failed${statusInfo}: ${result.message}`);
+  }
+}
+function loadPayloadFromFile(filePath) {
+  let raw;
+  try {
+    raw = readFileSync6(filePath, "utf8");
+  } catch {
+    throw new Error(`Cannot read file: ${filePath}`);
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    throw new Error(`File is not valid JSON: ${filePath}`);
+  }
+  const payload = parsed;
+  if (!payload.version || !payload.summary || !payload.meta) {
+    throw new Error(
+      `File does not look like an AuditPushPayload (missing version, summary, or meta): ${filePath}`
+    );
+  }
+  return payload;
+}
+function loadPayloadFromCache() {
+  const dbPath = getDefaultDbPath();
+  let summaries;
+  try {
+    summaries = listStoredAuditSummaries(dbPath);
+  } catch {
+    throw new NoDataError(
+      "No local audit database found. Run `xerg audit` first, or use `xerg push --file <path>`."
+    );
+  }
+  if (summaries.length === 0) {
+    throw new NoDataError(
+      "No cached audit snapshots found. Run `xerg audit` first, or use `xerg push --file <path>`."
+    );
+  }
+  const latest = summaries[0];
+  const meta = buildMeta2();
+  process.stderr.write(
+    `Using most recent cached audit: ${latest.auditId} (${latest.generatedAt})
+`
+  );
+  return toWirePayload(latest, meta);
+}
+function readCliVersion2() {
+  try {
+    const packageJsonPath = new URL("../../package.json", import.meta.url);
+    const pkg = JSON.parse(readFileSync6(packageJsonPath, "utf8"));
+    return pkg.version ?? "0.0.0";
+  } catch {
+    return "0.0.0";
+  }
+}
+function buildMeta2() {
+  return {
+    cliVersion: readCliVersion2(),
+    sourceId: hostname2(),
+    sourceHost: hostname2(),
+    environment: "local"
+  };
+}
+
+// src/index.ts
+var VERSION = readVersion();
+var argv = process.argv.slice(2);
+var command = argv[0];
+if (!command || command === "--help" || command === "-h" || command === "help") {
+  process.stdout.write(renderRootHelp());
+  process.exit(0);
+}
+if (command === "--version" || command === "-v" || command === "version") {
+  process.stdout.write(`${VERSION}
+`);
+  process.exit(0);
+}
+run().catch((error) => {
+  const message = error instanceof Error ? error.message : "Unknown error";
+  process.stderr.write(`${colorError(`xerg failed: ${message}`)}
+`);
+  process.exitCode = error instanceof NoDataError ? 2 : 1;
+});
+async function run() {
+  if (command === "audit") {
+    const options = parseAuditOptions(argv.slice(1));
+    if (options.json && options.markdown) {
+      throw new Error("Use either --json or --markdown, not both.");
+    }
+    await runAuditCommand(options);
+    return;
+  }
+  if (command === "doctor") {
+    const options = parseDoctorOptions(argv.slice(1));
+    await runDoctorCommand(options);
+    return;
+  }
+  if (command === "push") {
+    const options = parsePushOptions(argv.slice(1));
+    await runPushCommand(options);
+    return;
+  }
+  if (command === "login") {
+    await runLoginCommand();
+    return;
+  }
+  if (command === "logout") {
+    runLogoutCommand();
+    return;
+  }
+  throw new Error(`Unknown command "${command}". Run \`xerg --help\` to see available commands.`);
+}
+function parseAuditOptions(raw) {
+  const argv2 = expandEqualsArgs(raw);
+  const options = {};
+  for (let index = 0; index < argv2.length; index += 1) {
+    const arg = argv2[index];
+    switch (arg) {
+      case "--help":
+      case "-h":
+        process.stdout.write(renderAuditHelp());
+        process.exit(0);
+        break;
+      case "--log-file":
+        options.logFile = readValue(arg, argv2[index + 1]);
+        index += 1;
+        break;
+      case "--sessions-dir":
+        options.sessionsDir = readValue(arg, argv2[index + 1]);
+        index += 1;
+        break;
+      case "--since":
+        options.since = readValue(arg, argv2[index + 1]);
+        index += 1;
+        break;
+      case "--db":
+        options.db = readValue(arg, argv2[index + 1]);
+        index += 1;
+        break;
+      case "--compare":
+        options.compare = true;
+        break;
+      case "--json":
+        options.json = true;
+        break;
+      case "--markdown":
+        options.markdown = true;
+        break;
+      case "--no-db":
+        options.noDb = true;
+        break;
+      case "--remote":
+        options.remote = readValue(arg, argv2[index + 1]);
+        index += 1;
+        break;
+      case "--remote-log-file":
+        options.remoteLogFile = readValue(arg, argv2[index + 1]);
+        index += 1;
+        break;
+      case "--remote-sessions-dir":
+        options.remoteSessionsDir = readValue(arg, argv2[index + 1]);
+        index += 1;
+        break;
+      case "--remote-config":
+        options.remoteConfig = readValue(arg, argv2[index + 1]);
+        index += 1;
+        break;
+      case "--keep-remote-files":
+        options.keepRemoteFiles = true;
+        break;
+      case "--railway":
+        options.railway = true;
+        break;
+      case "--project":
+        options.railwayProject = readValue(arg, argv2[index + 1]);
+        index += 1;
+        break;
+      case "--environment":
+        options.railwayEnvironment = readValue(arg, argv2[index + 1]);
+        index += 1;
+        break;
+      case "--service":
+        options.railwayService = readValue(arg, argv2[index + 1]);
+        index += 1;
+        break;
+      case "--push":
+        options.push = true;
+        break;
+      case "--dry-run":
+        options.dryRun = true;
+        break;
+      case "--fail-above-waste-rate":
+        options.failAboveWasteRate = readFloat(arg, argv2[index + 1]);
+        index += 1;
+        break;
+      case "--fail-above-waste-usd":
+        options.failAboveWasteUsd = readFloat(arg, argv2[index + 1]);
+        index += 1;
+        break;
+      default:
+        throw new Error(`Unknown audit option "${arg}". Run \`xerg audit --help\` for usage.`);
+    }
+  }
+  return options;
+}
+function parsePushOptions(raw) {
+  const argv2 = expandEqualsArgs(raw);
+  const options = {};
+  for (let index = 0; index < argv2.length; index += 1) {
+    const arg = argv2[index];
+    switch (arg) {
+      case "--help":
+      case "-h":
+        process.stdout.write(renderPushHelp());
+        process.exit(0);
+        break;
+      case "--file":
+        options.file = readValue(arg, argv2[index + 1]);
+        index += 1;
+        break;
+      case "--dry-run":
+        options.dryRun = true;
+        break;
+      default:
+        throw new Error(`Unknown push option "${arg}". Run \`xerg push --help\` for usage.`);
+    }
+  }
+  return options;
+}
+function parseDoctorOptions(raw) {
+  const argv2 = expandEqualsArgs(raw);
+  const options = {};
+  for (let index = 0; index < argv2.length; index += 1) {
+    const arg = argv2[index];
+    switch (arg) {
+      case "--help":
+      case "-h":
+        process.stdout.write(renderDoctorHelp());
+        process.exit(0);
+        break;
+      case "--log-file":
+        options.logFile = readValue(arg, argv2[index + 1]);
+        index += 1;
+        break;
+      case "--sessions-dir":
+        options.sessionsDir = readValue(arg, argv2[index + 1]);
+        index += 1;
+        break;
+      case "--remote":
+        options.remote = readValue(arg, argv2[index + 1]);
+        index += 1;
+        break;
+      case "--remote-log-file":
+        options.remoteLogFile = readValue(arg, argv2[index + 1]);
+        index += 1;
+        break;
+      case "--remote-sessions-dir":
+        options.remoteSessionsDir = readValue(arg, argv2[index + 1]);
+        index += 1;
+        break;
+      case "--railway":
+        options.railway = true;
+        break;
+      case "--project":
+        options.railwayProject = readValue(arg, argv2[index + 1]);
+        index += 1;
+        break;
+      case "--environment":
+        options.railwayEnvironment = readValue(arg, argv2[index + 1]);
+        index += 1;
+        break;
+      case "--service":
+        options.railwayService = readValue(arg, argv2[index + 1]);
+        index += 1;
+        break;
+      default:
+        throw new Error(`Unknown doctor option "${arg}". Run \`xerg doctor --help\` for usage.`);
+    }
+  }
+  return options;
+}
+function expandEqualsArgs(argv2) {
+  const result = [];
+  for (const arg of argv2) {
+    const eqIndex = arg.indexOf("=");
+    if (eqIndex > 0 && arg.startsWith("--")) {
+      result.push(arg.slice(0, eqIndex), arg.slice(eqIndex + 1));
+    } else {
+      result.push(arg);
+    }
+  }
+  return result;
+}
+function readValue(flag, value) {
+  if (!value || value.startsWith("-")) {
+    throw new Error(`The ${flag} flag needs a value.`);
+  }
+  return value;
+}
+function readFloat(flag, value) {
+  const raw = readValue(flag, value);
+  const num = Number.parseFloat(raw);
+  if (Number.isNaN(num)) {
+    throw new Error(`The ${flag} flag requires a numeric value, got "${raw}".`);
+  }
+  return num;
+}
+function renderRootHelp() {
+  return `xerg ${VERSION}
 
 Waste intelligence for OpenClaw workflows.
 
@@ -172,13 +3659,19 @@ Usage:
   xerg <command> [options]
 
 Commands:
-  audit   Analyze OpenClaw logs and produce a waste intelligence report.
-  doctor  Inspect your machine for OpenClaw sources and audit readiness.
+  audit    Analyze OpenClaw logs and produce a waste intelligence report.
+  doctor   Inspect your machine for OpenClaw sources and audit readiness.
+  push     Push a cached audit snapshot to the Xerg API.
+  login    Authenticate with the Xerg API via browser.
+  logout   Remove stored Xerg API credentials.
 
 Global options:
   -h, --help     Show help
   -v, --version  Show version
-`}function gt(){return`xerg audit
+`;
+}
+function renderAuditHelp() {
+  return `xerg audit
 
 Analyze OpenClaw logs and produce a waste intelligence report.
 
@@ -186,16 +3679,66 @@ Usage:
   xerg audit [options]
 
 Options:
-  --log-file <path>      Explicit OpenClaw gateway log file to analyze
-  --sessions-dir <path>  Explicit OpenClaw sessions directory to analyze
-  --since <duration>     Look back window such as 24h, 7d, or 30m
-  --compare              Compare this audit to the newest compatible prior local snapshot
-  --json                 Render the report as JSON
-  --markdown             Render the report as Markdown
-  --db <path>            Custom SQLite database path
-  --no-db                Skip local persistence
-  -h, --help             Show help
-`}function ht(){return`xerg doctor
+  --log-file <path>           Explicit OpenClaw gateway log file to analyze
+  --sessions-dir <path>       Explicit OpenClaw sessions directory to analyze
+  --since <duration>          Look back window such as 24h, 7d, or 30m
+  --compare                   Compare this audit to the newest compatible prior local snapshot
+  --json                      Render the report as JSON
+  --markdown                  Render the report as Markdown
+  --db <path>                 Custom SQLite database path
+  --no-db                     Skip local persistence
+
+Remote options (SSH):
+  --remote <user@host>        SSH target in user@host or user@host:port format
+  --remote-log-file <path>    Override the default gateway log path on the remote host
+  --remote-sessions-dir <path>  Override the default sessions directory on the remote host
+  --remote-config <path>      Path to a JSON file defining multiple remote sources
+  --keep-remote-files         Retain pulled files in ~/.xerg/remote-cache/ instead of using a temp directory
+
+Prerequisites:
+  SSH remote audits require ssh and rsync on your PATH.
+
+Railway options:
+  --railway                   Audit a Railway service (uses linked project by default)
+  --project <id>              Railway project ID
+  --environment <id>          Railway environment ID
+  --service <id>              Railway service ID
+
+  Railway audits require the railway CLI on your PATH.
+
+Push options:
+  --push                      Push the audit summary to the Xerg API after computing it
+  --dry-run                   With --push: print the payload to stdout without sending it
+
+Threshold options:
+  --fail-above-waste-rate <n> Exit with code 3 if structural waste rate exceeds threshold (e.g. 0.30)
+  --fail-above-waste-usd <n>  Exit with code 3 if waste spend exceeds threshold in USD (e.g. 50)
+
+  -h, --help                  Show help
+`;
+}
+function renderPushHelp() {
+  return `xerg push
+
+Push a cached audit snapshot to the Xerg API.
+
+Usage:
+  xerg push [options]
+
+Options:
+  --file <path>               Push a specific snapshot file instead of the most recent cached audit
+  --dry-run                   Print the payload to stdout without sending it
+
+  -h, --help                  Show help
+
+Authentication:
+  Set XERG_API_KEY in your environment, add "apiKey" to ~/.xerg/config.json,
+  or run \`xerg login\` to authenticate via browser.
+  Browser login stores a token at ~/.config/xerg/credentials.json by default.
+`;
+}
+function renderDoctorHelp() {
+  return `xerg doctor
 
 Inspect your machine for OpenClaw sources and audit readiness.
 
@@ -203,7 +3746,33 @@ Usage:
   xerg doctor [options]
 
 Options:
-  --log-file <path>      Explicit OpenClaw gateway log file to inspect
-  --sessions-dir <path>  Explicit OpenClaw sessions directory to inspect
-  -h, --help             Show help
-`}function wt(e){return process.stderr.isTTY?ut("red",e):e}function Ut(){let e=new URL("../package.json",import.meta.url);return JSON.parse(ct(e,"utf8")).version??"0.0.0"}
+  --log-file <path>           Explicit OpenClaw gateway log file to inspect
+  --sessions-dir <path>       Explicit OpenClaw sessions directory to inspect
+
+Remote options (SSH):
+  --remote <user@host>        SSH target in user@host or user@host:port format
+  --remote-log-file <path>    Override the default gateway log path on the remote host
+  --remote-sessions-dir <path>  Override the default sessions directory on the remote host
+
+  SSH checks require ssh and rsync on your PATH.
+
+Railway options:
+  --railway                   Check a Railway service (uses linked project by default)
+  --project <id>              Railway project ID
+  --environment <id>          Railway environment ID
+  --service <id>              Railway service ID
+
+  Railway checks require the railway CLI on your PATH.
+
+  -h, --help                  Show help
+`;
+}
+function colorError(message) {
+  return process.stderr.isTTY ? styleText2("red", message) : message;
+}
+function readVersion() {
+  const packageJsonPath = new URL("../package.json", import.meta.url);
+  const packageJson = JSON.parse(readFileSync7(packageJsonPath, "utf8"));
+  return packageJson.version ?? "0.0.0";
+}
+//# sourceMappingURL=index.js.map