morpheus-cli 0.8.6 → 0.8.8

package/dist/channels/telegram.js

@@ -14,6 +14,7 @@ import { SQLiteChatMessageHistory } from '../runtime/memory/sqlite.js';
 import { SatiRepository } from '../runtime/memory/sati/repository.js';
 import { MCPManager } from '../config/mcp-manager.js';
 import { Construtor } from '../runtime/tools/factory.js';
+import { AuditRepository } from '../runtime/audit/repository.js';
 function escapeHtml(text) {
     return text
         .replace(/&/g, '&')
@@ -310,8 +311,34 @@ export class TelegramAdapter {
                     filePath = await this.downloadToTemp(fileLink);
                     // Transcribe
                     this.display.log(`Transcribing audio for @${user}...`, { source: 'Telephonist' });
+                    const transcribeStart = Date.now();
                     const { text, usage } = await this.telephonist.transcribe(filePath, 'audio/ogg', apiKey);
+                    const transcribeDurationMs = Date.now() - transcribeStart;
                     this.display.log(`Transcription success for @${user}: "${text}"`, { source: 'Telephonist', level: 'success' });
+                    // Audit: record telephonist execution
+                    try {
+                        const sessionId = await this.history.getCurrentSessionOrCreate();
+                        AuditRepository.getInstance().insert({
+                            session_id: sessionId,
+                            event_type: 'telephonist',
+                            agent: 'telephonist',
+                            provider: config.audio.provider,
+                            model: config.audio.model,
+                            input_tokens: usage.input_tokens ?? null,
+                            output_tokens: usage.output_tokens ?? null,
+                            duration_ms: transcribeDurationMs,
+                            status: 'success',
+                            metadata: {
+                                audio_duration_seconds: usage.audio_duration_seconds ?? duration,
+                                text_preview: text.slice(0, 120),
+                                text_length: text.length,
+                                user,
+                            },
+                        });
+                    }
+                    catch {
+                        // Audit failure never breaks the main flow
+                    }
                     // Reply with transcription (optional, maybe just process it?)
                     // The prompt says "reply with the answer".
                     // "Transcribe them... and process the resulting text as a standard user prompt."
@@ -352,6 +379,22 @@ export class TelegramAdapter {
                 catch (error) {
                     const detail = error?.cause?.message || error?.response?.data?.error?.message || error.message;
                     this.display.log(`Audio processing error for @${user}: ${detail}`, { source: 'Telephonist', level: 'error' });
+                    try {
+                        const sessionId = await this.history.getCurrentSessionOrCreate();
+                        AuditRepository.getInstance().insert({
+                            session_id: sessionId,
+                            event_type: 'telephonist',
+                            agent: 'telephonist',
+                            provider: this.config.get().audio.provider,
+                            model: this.config.get().audio.model,
+                            duration_ms: null,
+                            status: 'error',
+                            metadata: { error: detail, user },
+                        });
+                    }
+                    catch {
+                        // Audit failure never breaks the main flow
+                    }
                     await ctx.reply("Sorry, I failed to process your audio message.");
                 }
                 finally {

package/dist/http/api.js

@@ -178,6 +178,7 @@ export function createApiRouter(oracle, chronosWorker) {
                     duration_ms: row.duration_ms ?? null,
                     provider: row.provider ?? null,
                     model: row.model ?? null,
+                    audio_duration_seconds: row.audio_duration_seconds ?? null,
                     sati_memories_count: null,
                 };
             });
@@ -211,7 +212,16 @@ export function createApiRouter(oracle, chronosWorker) {
             sessionHistory.close();
         }
     });
-    // --- Session Audit ---
+    // --- Audit ---
+    router.get('/audit/global', (_req, res) => {
+        try {
+            const summary = AuditRepository.getInstance().getGlobalSummary();
+            res.json(summary);
+        }
+        catch (err) {
+            res.status(500).json({ error: err.message });
+        }
+    });
     router.get('/sessions/:id/audit', (req, res) => {
         try {
             const { id } = req.params;
@@ -259,14 +269,25 @@ export function createApiRouter(oracle, chronosWorker) {
             const originChannel = req.query.origin_channel;
             const sessionId = req.query.session_id;
             const limit = req.query.limit;
+            const pageRaw = req.query.page;
+            const perPageRaw = req.query.per_page;
             const parsedStatus = typeof status === 'string' ? TaskStatusSchema.safeParse(status) : null;
             const parsedAgent = typeof agent === 'string' ? TaskAgentSchema.safeParse(agent) : null;
             const parsedOrigin = typeof originChannel === 'string' ? OriginChannelSchema.safeParse(originChannel) : null;
-            const tasks = taskRepository.listTasks({
+            const filters = {
                 status: parsedStatus?.success ? parsedStatus.data : undefined,
                 agent: parsedAgent?.success ? parsedAgent.data : undefined,
                 origin_channel: parsedOrigin?.success ? parsedOrigin.data : undefined,
                 session_id: typeof sessionId === 'string' ? sessionId : undefined,
+            };
+            if (pageRaw !== undefined || perPageRaw !== undefined) {
+                const page = Math.max(1, parseInt(String(pageRaw ?? '1'), 10) || 1);
+                const per_page = Math.min(100, Math.max(1, parseInt(String(perPageRaw ?? '20'), 10) || 20));
+                const result = taskRepository.listTasksPaginated({ ...filters, page, per_page });
+                return res.json(result);
+            }
+            const tasks = taskRepository.listTasks({
+                ...filters,
                 limit: typeof limit === 'string' ? Math.max(1, Math.min(500, Number(limit) || 200)) : 200,
             });
             res.json(tasks);
@@ -424,7 +445,8 @@ export function createApiRouter(oracle, chronosWorker) {
         provider: z.string().min(1),
         model: z.string().min(1),
         input_price_per_1m: z.number().nonnegative(),
-        output_price_per_1m: z.number().nonnegative()
+        output_price_per_1m: z.number().nonnegative(),
+        audio_cost_per_second: z.number().nonnegative().nullable().optional(),
     });
     router.get('/model-pricing', (req, res) => {
         try {
@@ -456,7 +478,8 @@ export function createApiRouter(oracle, chronosWorker) {
         const { provider, model } = req.params;
         const partial = z.object({
             input_price_per_1m: z.number().nonnegative().optional(),
-            output_price_per_1m: z.number().nonnegative().optional()
+            output_price_per_1m: z.number().nonnegative().optional(),
+            audio_cost_per_second: z.number().nonnegative().nullable().optional(),
         }).safeParse(req.body);
         if (!partial.success) {
             return res.status(400).json({ error: 'Invalid payload', details: partial.error.issues });
@@ -472,7 +495,10 @@ export function createApiRouter(oracle, chronosWorker) {
                 provider,
                 model,
                 input_price_per_1m: partial.data.input_price_per_1m ?? existing.input_price_per_1m,
-                output_price_per_1m: partial.data.output_price_per_1m ?? existing.output_price_per_1m
+                output_price_per_1m: partial.data.output_price_per_1m ?? existing.output_price_per_1m,
+                audio_cost_per_second: 'audio_cost_per_second' in partial.data
+                    ? partial.data.audio_cost_per_second
+                    : existing.audio_cost_per_second,
             });
             h.close();
             res.json({ success: true });
@@ -701,15 +727,25 @@ export function createApiRouter(oracle, chronosWorker) {
     router.get('/sati/memories', async (req, res) => {
         try {
             const repository = SatiRepository.getInstance();
-            const memories = repository.getAllMemories();
-            // Convert dates to ISO strings for JSON serialization
-            const serializedMemories = memories.map(memory => ({
+            const pageRaw = req.query.page;
+            const perPageRaw = req.query.per_page;
+            const category = typeof req.query.category === 'string' && req.query.category !== 'all' ? req.query.category : undefined;
+            const importance = typeof req.query.importance === 'string' && req.query.importance !== 'all' ? req.query.importance : undefined;
+            const search = typeof req.query.search === 'string' && req.query.search.trim() ? req.query.search.trim() : undefined;
+            const serializeMemory = (memory) => ({
                 ...memory,
-                created_at: memory.created_at.toISOString(),
-                updated_at: memory.updated_at.toISOString(),
-                last_accessed_at: memory.last_accessed_at ? memory.last_accessed_at.toISOString() : null
-            }));
-            res.json(serializedMemories);
+                created_at: memory.created_at instanceof Date ? memory.created_at.toISOString() : memory.created_at,
+                updated_at: memory.updated_at instanceof Date ? memory.updated_at.toISOString() : memory.updated_at,
+                last_accessed_at: memory.last_accessed_at instanceof Date ? memory.last_accessed_at.toISOString() : (memory.last_accessed_at ?? null),
+            });
+            if (pageRaw !== undefined || perPageRaw !== undefined) {
+                const page = Math.max(1, parseInt(String(pageRaw ?? '1'), 10) || 1);
+                const per_page = Math.min(100, Math.max(1, parseInt(String(perPageRaw ?? '20'), 10) || 20));
+                const result = repository.getMemoriesPaginated({ category, importance, search, page, per_page });
+                return res.json({ ...result, data: result.data.map(serializeMemory) });
+            }
+            const memories = repository.getAllMemories();
+            res.json(memories.map(serializeMemory));
         }
         catch (error) {
             res.status(500).json({ error: error.message });

package/dist/http/routers/chronos.js

@@ -75,11 +75,22 @@ export function createChronosJobRouter(repo, _worker) {
             res.status(400).json({ error: err.message });
         }
     });
-    // GET /api/chronos — list jobs
+    // GET /api/chronos — list jobs (paginated)
     router.get('/', (req, res) => {
         try {
             const enabled = req.query.enabled;
             const created_by = req.query.created_by;
+            const page = req.query.page ? Math.max(1, parseInt(String(req.query.page), 10) || 1) : undefined;
+            const per_page = req.query.per_page ? Math.min(100, Math.max(1, parseInt(String(req.query.per_page), 10) || 20)) : undefined;
+            if (page !== undefined || per_page !== undefined) {
+                const result = repo.listJobsPaginated({
+                    enabled: enabled === 'true' ? true : enabled === 'false' ? false : undefined,
+                    created_by,
+                    page,
+                    per_page,
+                });
+                return res.json(result);
+            }
             const jobs = repo.listJobs({
                 enabled: enabled === 'true' ? true : enabled === 'false' ? false : undefined,
                 created_by,

package/dist/http/webhooks-router.js

@@ -74,11 +74,19 @@ export function createWebhooksRouter() {
     // ─────────────────────────────────────────────────────────────────────────────
     router.get('/notifications', authMiddleware, (req, res) => {
         try {
-            const { webhookId, unreadOnly } = req.query;
-            const notifications = repo.listNotifications({
+            const { webhookId, unreadOnly, status, page: pageRaw, per_page: perPageRaw } = req.query;
+            const filters = {
                 webhookId: typeof webhookId === 'string' ? webhookId : undefined,
                 unreadOnly: unreadOnly === 'true',
-            });
+                status: typeof status === 'string' && status !== 'all' ? status : undefined,
+            };
+            if (pageRaw !== undefined || perPageRaw !== undefined) {
+                const page = Math.max(1, parseInt(String(pageRaw ?? '1'), 10) || 1);
+                const per_page = Math.min(100, Math.max(1, parseInt(String(perPageRaw ?? '20'), 10) || 20));
+                const result = repo.listNotificationsPaginated({ ...filters, page, per_page });
+                return res.json(result);
+            }
+            const notifications = repo.listNotifications(filters);
             res.json(notifications);
         }
         catch (err) {

package/dist/runtime/ISubagent.js

@@ -0,0 +1 @@
+export {};

package/dist/runtime/apoc.js

@@ -4,7 +4,8 @@ import { ProviderFactory } from "./providers/factory.js";
 import { ProviderError } from "./errors.js";
 import { DisplayManager } from "./display.js";
 import { buildDevKit } from "../devkit/index.js";
-import { SQLiteChatMessageHistory } from "./memory/sqlite.js";
+import { extractRawUsage, persistAgentMessage, buildAgentResult, emitToolAuditEvents } from "./subagent-utils.js";
+import { buildDelegationTool } from "./tools/delegation-utils.js";
 /**
  * Apoc is a subagent of Oracle specialized in devtools operations.
  * It receives delegated tasks from Oracle and executes them using DevKit tools
@@ -17,6 +18,7 @@ import { SQLiteChatMessageHistory } from "./memory/sqlite.js";
 export class Apoc {
     static instance = null;
     static currentSessionId = undefined;
+    static _delegateTool = null;
     agent;
     config;
     display = DisplayManager.getInstance();
@@ -38,10 +40,10 @@ export class Apoc {
     }
     static resetInstance() {
         Apoc.instance = null;
+        Apoc._delegateTool = null;
     }
     async initialize() {
         const apocConfig = this.config.apoc || this.config.llm;
-        // console.log(`Apoc configuration: ${JSON.stringify(apocConfig)}`);
         const devkit = ConfigManager.getInstance().getDevKitConfig();
         const timeout_ms = devkit.timeout_ms || this.config.apoc?.timeout_ms || 30_000;
         const personality = this.config.apoc?.personality || 'pragmatic_dev';
@@ -73,8 +75,9 @@ export class Apoc {
      * @param task Natural language task description
      * @param context Optional additional context from the ongoing conversation
      * @param sessionId Session to attribute token usage to (defaults to 'apoc')
+     * @param taskContext Optional Oracle task context (unused by Apoc directly — kept for ISubagent compatibility)
      */
-    async execute(task, context, sessionId) {
+    async execute(task, context, sessionId, taskContext) {
         if (!this.agent) {
             await this.initialize();
         }
@@ -194,7 +197,7 @@ If refinement is triggered:
 
 2. Execute a second search cycle (Cycle 2).
 3. Repeat selection, navigation, extraction, verification.
-4. Choose the stronger cycle’s evidence.
+4. Choose the stronger cycle's evidence.
 5. Do NOT perform more than 2 cycles.
 
 If Cycle 2 also fails:
@@ -239,10 +242,10 @@ LOW:
 OUTPUT FORMAT (STRICT)
 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
 
-1. Direct Answer  
-2. Evidence Summary  
-3. Sources (URLs)  
-4. Confidence Level (HIGH / MEDIUM / LOW)  
+1. Direct Answer
+2. Evidence Summary
+3. Sources (URLs)
+4. Confidence Level (HIGH / MEDIUM / LOW)
 5. Completion Status (true / false)
 
 No conversational filler.
@@ -254,6 +257,7 @@ ${context ? `CONTEXT FROM ORACLE:\n${context}` : ""}
         const userMessage = new HumanMessage(task);
         const messages = [systemMessage, userMessage];
         try {
+            const inputCount = messages.length;
             const startMs = Date.now();
             const response = await this.agent.invoke({ messages });
             const durationMs = Date.now() - startMs;
@@ -262,45 +266,51 @@ ${context ? `CONTEXT FROM ORACLE:\n${context}` : ""}
             const content = typeof lastMessage.content === "string"
                 ? lastMessage.content
                 : JSON.stringify(lastMessage.content);
-            // Aggregate token usage across all AI messages in this invocation
-            const rawUsage = lastMessage.usage_metadata
-                ?? lastMessage.response_metadata?.usage
-                ?? lastMessage.response_metadata?.tokenUsage
-                ?? lastMessage.usage;
-            const inputTokens = rawUsage?.input_tokens ?? 0;
-            const outputTokens = rawUsage?.output_tokens ?? 0;
+            const rawUsage = extractRawUsage(lastMessage);
             const stepCount = response.messages.filter((m) => m instanceof AIMessage).length;
             const targetSession = sessionId ?? Apoc.currentSessionId ?? "apoc";
-            const history = new SQLiteChatMessageHistory({ sessionId: targetSession });
-            try {
-                const persisted = new AIMessage(content);
-                if (rawUsage)
-                    persisted.usage_metadata = rawUsage;
-                persisted.provider_metadata = { provider: apocConfig.provider, model: apocConfig.model };
-                persisted.agent_metadata = { agent: 'apoc' };
-                persisted.duration_ms = durationMs;
-                await history.addMessage(persisted);
-            }
-            finally {
-                history.close();
-            }
+            await persistAgentMessage('apoc', content, apocConfig, targetSession, rawUsage, durationMs);
+            emitToolAuditEvents(response.messages.slice(inputCount), targetSession, 'apoc');
             this.display.log("Apoc task completed.", { source: "Apoc" });
-            return {
-                output: content,
-                usage: {
-                    provider: apocConfig.provider,
-                    model: apocConfig.model,
-                    inputTokens,
-                    outputTokens,
-                    durationMs,
-                    stepCount,
-                },
-            };
+            return buildAgentResult(content, apocConfig, rawUsage, durationMs, stepCount);
         }
         catch (err) {
             throw new ProviderError(this.config.apoc?.provider || this.config.llm.provider, err, "Apoc task execution failed");
         }
     }
+    createDelegateTool() {
+        if (!Apoc._delegateTool) {
+            Apoc._delegateTool = buildDelegationTool({
+                name: "apoc_delegate",
+                description: `Delegate a devtools task to Apoc, the specialized development subagent.
+
+This tool enqueues a background task and returns an acknowledgement with task id.
+Do not expect final execution output in the same response.
+Each task must contain a single atomic action with a clear expected result.
+
+Use this tool when the user asks for ANY of the following:
+- File operations: read, write, create, delete files or directories
+- Shell commands: run scripts, execute commands, check output
+- Git: status, log, diff, commit, push, pull, clone, branch
+- Package management: npm install/update/audit, yarn, package.json inspection
+- Process management: list processes, kill processes, check ports
+- Network: ping hosts, curl URLs, DNS lookups
+- System info: environment variables, OS info, disk space, memory
+- Internet search: search DuckDuckGo and verify facts by reading at least 3 sources via browser_navigate before reporting results.
+- Browser automation: navigate websites (JS/SPA), inspect DOM, click elements, fill forms. Apoc will ask for missing user input (e.g. credentials, form fields) before proceeding.
+
+Provide a clear natural language task description. Optionally provide context
+from the current conversation to help Apoc understand the broader goal.`,
+                agentKey: "apoc",
+                agentLabel: "Apoc",
+                auditAgent: "apoc",
+                isSync: () => ConfigManager.getInstance().get().apoc?.execution_mode === 'sync',
+                notifyText: '🧑‍🔬 Apoc is executing your request...',
+                executeSync: (task, context, sessionId) => Apoc.getInstance().execute(task, context, sessionId),
+            });
+        }
+        return Apoc._delegateTool;
+    }
     /** Reload with updated config (called when settings change) */
     async reload() {
         this.config = ConfigManager.getInstance().get();

package/dist/runtime/audit/repository.js

@@ -65,7 +65,24 @@ export class AuditRepository {
         const rows = this.db.prepare(`
       SELECT ae.*,
         CASE
-          WHEN ae.provider IS NOT NULL AND ae.model IS NOT NULL AND ae.input_tokens IS NOT NULL
+          -- Telephonist: prefer audio_cost_per_second when set
+          WHEN ae.event_type = 'telephonist'
+            AND mp.audio_cost_per_second IS NOT NULL
+            AND mp.audio_cost_per_second > 0
+          THEN
+            COALESCE(CAST(json_extract(ae.metadata, '$.audio_duration_seconds') AS REAL), 0)
+            * mp.audio_cost_per_second
+          -- Telephonist with token-based pricing (e.g. Gemini/OpenRouter with real tokens)
+          WHEN ae.event_type = 'telephonist'
+            AND ae.provider IS NOT NULL AND ae.model IS NOT NULL
+            AND ae.input_tokens IS NOT NULL AND ae.input_tokens > 0
+          THEN (
+            COALESCE(ae.input_tokens, 0) / 1000000.0 * COALESCE(mp.input_price_per_1m, 0) +
+            COALESCE(ae.output_tokens, 0) / 1000000.0 * COALESCE(mp.output_price_per_1m, 0)
+          )
+          -- All other events: token-based
+          WHEN ae.event_type != 'telephonist'
+            AND ae.provider IS NOT NULL AND ae.model IS NOT NULL AND ae.input_tokens IS NOT NULL
           THEN (
             COALESCE(ae.input_tokens, 0) / 1000000.0 * COALESCE(mp.input_price_per_1m, 0) +
             COALESCE(ae.output_tokens, 0) / 1000000.0 * COALESCE(mp.output_price_per_1m, 0)
@@ -84,11 +101,16 @@ export class AuditRepository {
         const events = this.getBySession(sessionId, { limit: 10_000 });
         const llmEvents = events.filter(e => e.event_type === 'llm_call');
         const toolEvents = events.filter(e => e.event_type === 'tool_call' || e.event_type === 'mcp_tool');
-        const totalCostUsd = llmEvents.reduce((sum, e) => sum + (e.estimated_cost_usd ?? 0), 0);
+        const telephonistEvents = events.filter(e => e.event_type === 'telephonist');
+        const totalCostUsd = [...llmEvents, ...telephonistEvents].reduce((sum, e) => sum + (e.estimated_cost_usd ?? 0), 0);
         const totalDurationMs = events.reduce((sum, e) => sum + (e.duration_ms ?? 0), 0);
-        // By agent
+        const totalAudioSeconds = telephonistEvents.reduce((sum, e) => {
+            const meta = e.metadata ? JSON.parse(e.metadata) : null;
+            return sum + (meta?.audio_duration_seconds ?? 0);
+        }, 0);
+        // By agent (llm + telephonist)
         const agentMap = new Map();
-        for (const e of llmEvents) {
+        for (const e of [...llmEvents, ...telephonistEvents]) {
             const key = e.agent ?? 'unknown';
             const existing = agentMap.get(key) ?? { llmCalls: 0, inputTokens: 0, outputTokens: 0, estimatedCostUsd: 0 };
             agentMap.set(key, {
@@ -98,9 +120,9 @@ export class AuditRepository {
                 estimatedCostUsd: existing.estimatedCostUsd + (e.estimated_cost_usd ?? 0),
             });
         }
-        // By model
+        // By model (llm + telephonist)
         const modelMap = new Map();
-        for (const e of llmEvents) {
+        for (const e of [...llmEvents, ...telephonistEvents]) {
             if (!e.model)
                 continue;
             const key = `${e.provider}/${e.model}`;
@@ -116,6 +138,7 @@ export class AuditRepository {
         return {
             totalCostUsd,
             totalDurationMs,
+            totalAudioSeconds,
             llmCallCount: llmEvents.length,
             toolCallCount: toolEvents.length,
             byAgent: Array.from(agentMap.entries()).map(([agent, s]) => ({ agent, ...s })),
@@ -129,4 +152,168 @@ export class AuditRepository {
             })),
         };
     }
+    getGlobalSummary() {
+        // Reusable cost expression (telephonist + token-based)
+        const costExpr = `
+      CASE
+        WHEN ae.event_type = 'telephonist'
+          AND mp.audio_cost_per_second IS NOT NULL AND mp.audio_cost_per_second > 0
+        THEN COALESCE(CAST(json_extract(ae.metadata, '$.audio_duration_seconds') AS REAL), 0)
+             * mp.audio_cost_per_second
+        WHEN ae.event_type = 'telephonist'
+          AND ae.input_tokens IS NOT NULL AND ae.input_tokens > 0
+        THEN COALESCE(ae.input_tokens, 0) / 1000000.0 * COALESCE(mp.input_price_per_1m, 0)
+             + COALESCE(ae.output_tokens, 0) / 1000000.0 * COALESCE(mp.output_price_per_1m, 0)
+        WHEN ae.event_type != 'telephonist'
+          AND ae.provider IS NOT NULL AND ae.input_tokens IS NOT NULL
+        THEN COALESCE(ae.input_tokens, 0) / 1000000.0 * COALESCE(mp.input_price_per_1m, 0)
+             + COALESCE(ae.output_tokens, 0) / 1000000.0 * COALESCE(mp.output_price_per_1m, 0)
+        ELSE 0
+      END`;
+        // ── Sessions ─────────────────────────────────────────────────────────────
+        const sessionsRow = this.db.prepare(`
+      SELECT
+        COUNT(*) as total,
+        SUM(CASE WHEN status = 'active'   THEN 1 ELSE 0 END) as active,
+        SUM(CASE WHEN status = 'paused'   THEN 1 ELSE 0 END) as paused,
+        SUM(CASE WHEN status = 'archived' THEN 1 ELSE 0 END) as archived,
+        SUM(CASE WHEN status = 'deleted'  THEN 1 ELSE 0 END) as deleted
+      FROM sessions
+    `).get();
+        const withAuditRow = this.db.prepare(`SELECT COUNT(DISTINCT session_id) as n FROM audit_events`).get();
+        // ── Global totals (single JOIN pass) ─────────────────────────────────────
+        const totalsRow = this.db.prepare(`
+      SELECT
+        COUNT(*) as totalEventCount,
+        SUM(CASE WHEN ae.event_type = 'llm_call'        THEN 1 ELSE 0 END) as llmCallCount,
+        SUM(CASE WHEN ae.event_type = 'tool_call'       THEN 1 ELSE 0 END) as toolCallCount,
+        SUM(CASE WHEN ae.event_type = 'mcp_tool'        THEN 1 ELSE 0 END) as mcpToolCount,
+        SUM(CASE WHEN ae.event_type = 'skill_executed'  THEN 1 ELSE 0 END) as skillCount,
+        SUM(CASE WHEN ae.event_type = 'memory_recovery' THEN 1 ELSE 0 END) as memoryRecoveryCount,
+        SUM(CASE WHEN ae.event_type = 'chronos_job'     THEN 1 ELSE 0 END) as chronosJobCount,
+        SUM(CASE WHEN ae.event_type = 'task_created'    THEN 1 ELSE 0 END) as taskCreatedCount,
+        SUM(CASE WHEN ae.event_type = 'task_completed'  THEN 1 ELSE 0 END) as taskCompletedCount,
+        SUM(CASE WHEN ae.event_type = 'telephonist'     THEN 1 ELSE 0 END) as telephonistCount,
+        COALESCE(SUM(ae.input_tokens),  0) as totalInputTokens,
+        COALESCE(SUM(ae.output_tokens), 0) as totalOutputTokens,
+        COALESCE(SUM(ae.duration_ms),   0) as totalDurationMs,
+        COALESCE(SUM(
+          CASE WHEN ae.event_type = 'telephonist'
+            THEN COALESCE(CAST(json_extract(ae.metadata,'$.audio_duration_seconds') AS REAL),0)
+            ELSE 0 END
+        ), 0) as totalAudioSeconds,
+        COALESCE(SUM(${costExpr}), 0) as estimatedCostUsd
+      FROM audit_events ae
+      LEFT JOIN model_pricing mp ON mp.provider = ae.provider AND mp.model = ae.model
+    `).get();
+        // ── By agent ─────────────────────────────────────────────────────────────
+        const byAgentRows = this.db.prepare(`
+      SELECT
+        COALESCE(ae.agent, 'unknown') as agent,
+        SUM(CASE WHEN ae.event_type = 'llm_call' THEN 1 ELSE 0 END) as llmCalls,
+        SUM(CASE WHEN ae.event_type IN ('tool_call','mcp_tool') THEN 1 ELSE 0 END) as toolCalls,
+        COALESCE(SUM(ae.input_tokens),  0) as inputTokens,
+        COALESCE(SUM(ae.output_tokens), 0) as outputTokens,
+        COALESCE(SUM(ae.duration_ms),   0) as totalDurationMs,
+        COALESCE(SUM(${costExpr}), 0) as estimatedCostUsd
+      FROM audit_events ae
+      LEFT JOIN model_pricing mp ON mp.provider = ae.provider AND mp.model = ae.model
+      GROUP BY ae.agent
+      ORDER BY estimatedCostUsd DESC
+    `).all();
+        // ── By model ─────────────────────────────────────────────────────────────
+        const byModelRows = this.db.prepare(`
+      SELECT
+        ae.provider,
+        ae.model,
+        COUNT(*) as calls,
+        COALESCE(SUM(ae.input_tokens),  0) as inputTokens,
+        COALESCE(SUM(ae.output_tokens), 0) as outputTokens,
+        COALESCE(SUM(${costExpr}), 0) as estimatedCostUsd
+      FROM audit_events ae
+      LEFT JOIN model_pricing mp ON mp.provider = ae.provider AND mp.model = ae.model
+      WHERE ae.model IS NOT NULL
+      GROUP BY ae.provider, ae.model
+      ORDER BY estimatedCostUsd DESC
+    `).all();
+        // ── Top tools ─────────────────────────────────────────────────────────────
+        const topToolsRows = this.db.prepare(`
+      SELECT
+        ae.tool_name,
+        ae.agent,
+        ae.event_type,
+        COUNT(*) as count,
+        SUM(CASE WHEN ae.status = 'error' THEN 1 ELSE 0 END) as errorCount
+      FROM audit_events ae
+      WHERE ae.tool_name IS NOT NULL
+        AND ae.event_type IN ('tool_call','mcp_tool')
+      GROUP BY ae.tool_name, ae.agent, ae.event_type
+      ORDER BY count DESC
+      LIMIT 20
+    `).all();
+        // ── Recent sessions ──────────────────────────────────────────────────────
+        const recentRows = this.db.prepare(`
+      SELECT
+        ae.session_id,
+        s.title,
+        s.status,
+        s.started_at,
+        COUNT(ae.id) as event_count,
+        SUM(CASE WHEN ae.event_type = 'llm_call' THEN 1 ELSE 0 END) as llmCallCount,
+        COALESCE(SUM(ae.duration_ms), 0) as totalDurationMs,
+        COALESCE(SUM(${costExpr}), 0) as estimatedCostUsd
+      FROM audit_events ae
+      INNER JOIN sessions s ON ae.session_id = s.id
+      LEFT JOIN model_pricing mp ON mp.provider = ae.provider AND mp.model = ae.model
+      GROUP BY ae.session_id
+      ORDER BY MAX(ae.created_at) DESC
+      LIMIT 20
+    `).all();
+        // ── Daily activity (last 30 days) ─────────────────────────────────────────
+        const since = Date.now() - 30 * 24 * 60 * 60 * 1000;
+        const dailyRows = this.db.prepare(`
+      SELECT
+        date(ae.created_at / 1000, 'unixepoch') as date,
+        COUNT(*) as eventCount,
+        SUM(CASE WHEN ae.event_type = 'llm_call' THEN 1 ELSE 0 END) as llmCallCount,
+        COALESCE(SUM(${costExpr}), 0) as estimatedCostUsd
+      FROM audit_events ae
+      LEFT JOIN model_pricing mp ON mp.provider = ae.provider AND mp.model = ae.model
+      WHERE ae.created_at >= ?
+      GROUP BY date
+      ORDER BY date ASC
+    `).all(since);
+        return {
+            sessions: {
+                total: sessionsRow?.total ?? 0,
+                active: sessionsRow?.active ?? 0,
+                paused: sessionsRow?.paused ?? 0,
+                archived: sessionsRow?.archived ?? 0,
+                deleted: sessionsRow?.deleted ?? 0,
+                withAudit: withAuditRow?.n ?? 0,
+            },
+            totals: {
+                estimatedCostUsd: totalsRow?.estimatedCostUsd ?? 0,
+                totalDurationMs: totalsRow?.totalDurationMs ?? 0,
+                totalAudioSeconds: totalsRow?.totalAudioSeconds ?? 0,
+                totalInputTokens: totalsRow?.totalInputTokens ?? 0,
+                totalOutputTokens: totalsRow?.totalOutputTokens ?? 0,
+                totalEventCount: totalsRow?.totalEventCount ?? 0,
+                llmCallCount: totalsRow?.llmCallCount ?? 0,
+                toolCallCount: totalsRow?.toolCallCount ?? 0,
+                mcpToolCount: totalsRow?.mcpToolCount ?? 0,
+                skillCount: totalsRow?.skillCount ?? 0,
+                memoryRecoveryCount: totalsRow?.memoryRecoveryCount ?? 0,
+                chronosJobCount: totalsRow?.chronosJobCount ?? 0,
+                taskCreatedCount: totalsRow?.taskCreatedCount ?? 0,
+                taskCompletedCount: totalsRow?.taskCompletedCount ?? 0,
+                telephonistCount: totalsRow?.telephonistCount ?? 0,
+            },
+            byAgent: byAgentRows,
+            byModel: byModelRows,
+            topTools: topToolsRows,
+            recentSessions: recentRows,
+            dailyActivity: dailyRows,
+        };
+    }
 }