arkaos 3.33.0 → 3.34.0

package/VERSION

@@ -1 +1 @@
-3.33.0
+3.34.0

package/dashboard/app/layouts/default.vue

@@ -83,6 +83,13 @@ const links = [[{
   onSelect: () => {
     open.value = false
   }
+}, {
+  label: 'Audit',
+  icon: 'i-lucide-shield-alert',
+  to: '/audit',
+  onSelect: () => {
+    open.value = false
+  }
 }, {
   label: 'Trash',
   icon: 'i-lucide-trash-2',

package/dashboard/app/pages/audit.vue

@@ -0,0 +1,125 @@
+<script setup lang="ts">
+// PR90d v3.34.0 — Audit log page.
+//
+// Lists hook bypass / block events from the enforcement telemetry log.
+// Operators filter by kind (bypass / blocked) and tool name.
+
+interface AuditEvent {
+  ts: string
+  tool: string
+  reason: string
+  cwd: string
+  bypass_used: boolean
+  kind: 'bypass' | 'blocked'
+}
+
+const { fetchApi } = useApi()
+
+const kind = ref<'all' | 'bypass' | 'blocked'>('all')
+const toolFilter = ref('')
+const limit = ref(100)
+
+const { data, status, error, refresh } = await fetchApi<{
+  events: AuditEvent[]
+  total: number
+}>(
+  '/api/audit',
+  {
+    query: computed(() => ({
+      limit: limit.value,
+      kind: kind.value === 'all' ? undefined : kind.value,
+      tool: toolFilter.value.trim() || undefined,
+    })),
+  },
+)
+
+const events = computed<AuditEvent[]>(() => data.value?.events ?? [])
+
+const kindOptions = [
+  { label: 'All kinds', value: 'all' },
+  { label: 'Bypass used', value: 'bypass' },
+  { label: 'Blocked', value: 'blocked' },
+]
+
+function formatTs(ts: string): string {
+  if (!ts) return '—'
+  try {
+    return new Date(ts).toLocaleString()
+  } catch {
+    return ts
+  }
+}
+
+function kindColor(k: string): 'warning' | 'error' | 'neutral' {
+  return k === 'bypass' ? 'warning' : k === 'blocked' ? 'error' : 'neutral'
+}
+
+watch([kind, toolFilter, limit], async () => {
+  await refresh()
+})
+</script>
+
+<template>
+  <UDashboardPanel id="audit">
+    <template #header>
+      <UDashboardNavbar title="Audit log">
+        <template #leading>
+          <UDashboardSidebarCollapse />
+        </template>
+        <template #trailing>
+          <UBadge v-if="data?.total" :label="`${data.total} event${data.total === 1 ? '' : 's'}`" variant="subtle" />
+        </template>
+      </UDashboardNavbar>
+    </template>
+
+    <template #body>
+      <DashboardState
+        :status="status"
+        :error="error"
+        :empty="!events.length"
+        empty-title="No audit events"
+        empty-description="Hook bypass + block events show up here. Nothing yet — good news."
+        empty-icon="i-lucide-shield-check"
+        loading-label="Loading audit"
+        :on-retry="() => refresh()"
+      >
+        <div class="flex flex-wrap items-center gap-3 mb-4">
+          <USelect
+            v-model="kind"
+            :items="kindOptions"
+            placeholder="Kind"
+            class="min-w-40"
+            aria-label="Filter by kind"
+          />
+          <UInput
+            v-model="toolFilter"
+            class="max-w-xs"
+            icon="i-lucide-wrench"
+            placeholder="Filter by tool…"
+          />
+          <span class="ml-auto text-xs text-muted">
+            {{ events.length }} match{{ events.length === 1 ? '' : 'es' }}
+          </span>
+        </div>
+
+        <ul class="space-y-2 max-w-5xl">
+          <li
+            v-for="(ev, idx) in events"
+            :key="`${ev.ts}-${idx}`"
+            class="rounded-lg border border-default p-3"
+          >
+            <div class="flex items-center gap-3 flex-wrap text-xs mb-1.5">
+              <UBadge :label="ev.kind" :color="kindColor(ev.kind)" variant="subtle" size="sm" />
+              <UBadge :label="ev.tool || '—'" variant="outline" size="sm" />
+              <span class="text-muted font-mono">{{ formatTs(ev.ts) }}</span>
+            </div>
+            <p class="text-sm">{{ ev.reason || '(no reason recorded)' }}</p>
+            <p v-if="ev.cwd" class="text-xs text-muted font-mono mt-1 truncate" :title="ev.cwd">
+              {{ ev.cwd }}
+            </p>
+          </li>
+        </ul>
+      </DashboardState>
+    </template>
+  </UDashboardPanel>
+</template>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arkaos",
-  "version": "3.33.0",
+  "version": "3.34.0",
   "description": "The Operating System for AI Agent Teams",
   "type": "module",
   "bin": {

package/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "arkaos-core"
-version = "3.33.0"
+version = "3.34.0"
 description = "Core engine for ArkaOS — The Operating System for AI Agent Teams"
 readme = "README.md"
 license = {text = "MIT"}

package/scripts/dashboard-api.py

@@ -2251,6 +2251,58 @@ def _last_commit_days(project_path: str) -> Optional[int]:
         return None
 
 
+@app.get("/api/audit")
+def audit_log(
+    limit: int = 100,
+    kind: Optional[str] = None,
+    tool: Optional[str] = None,
+):
+    """PR90d v3.34.0 — paginated audit log of bypass/block events.
+
+    Reads the same telemetry file as `_recent_incidents` but returns
+    a larger window and accepts filter params. ``kind`` is one of
+    ``"bypass"`` / ``"blocked"``. ``tool`` filters by tool name
+    (Edit/Write/Bash/…).
+    """
+    log = Path.home() / ".arkaos" / "telemetry" / "enforcement.jsonl"
+    if not log.exists():
+        return {"events": [], "total": 0}
+    try:
+        text = log.read_text(encoding="utf-8", errors="replace")
+    except OSError:
+        return {"events": [], "total": 0}
+    events: list[dict] = []
+    cap = max(0, min(int(limit), 500))
+    for line in reversed(text.splitlines()):
+        if len(events) >= cap:
+            break
+        if not line.strip():
+            continue
+        try:
+            entry = json.loads(line)
+        except json.JSONDecodeError:
+            continue
+        bypass = bool(entry.get("bypass_used"))
+        allowed = entry.get("allow")
+        if not bypass and allowed is not False:
+            continue
+        row_kind = "bypass" if bypass else "blocked"
+        if kind and kind != row_kind:
+            continue
+        row_tool = entry.get("tool", "")
+        if tool and tool != row_tool:
+            continue
+        events.append({
+            "ts": entry.get("ts", ""),
+            "tool": row_tool,
+            "reason": entry.get("reason", ""),
+            "cwd": entry.get("cwd", ""),
+            "bypass_used": bypass,
+            "kind": row_kind,
+        })
+    return {"events": events, "total": len(events)}
+
+
 def _recent_incidents(limit: int = 8) -> list[dict]:
     """Recent enforcement / bypass events from telemetry.