Add ward audit read surface via cli-guard scope (audit tail/path, scope filter) #58

New issue

Closed

opened 2026-06-06 04:05:52 +00:00 by coilysiren · 0 comments

coilysiren commented

2026-06-06 04:05:52 +00:00

Owner

Summary

Add an audit read surface to ward by adopting cli-guard's scope package: ward audit {tail,path} plus scope-filtered query, mirroring coily audit / coily git audit-show --scope <repo>.

Motivation

Ward writes append-only JSONL audit rows via audit.Writer and stamps a best-effort repo_root, but ships no way to read those rows back. A contributor cannot answer "what did ward run in this repo" without hand-grepping ~/.coily/audit/<repo>.jsonl. coily imports cli-guard/scope to resolve cwd->git-toplevel for audit records and exposes coily audit {path,tail} + coily git audit-show --scope.

Scope

Import cli-guard/scope.
Add ward audit path (print the resolved audit log path) and ward audit tail (tail recent rows).
Add scope filtering so a contributor can restrict to the current repo's rows.
Update docs/FEATURES.md and add a short docs/audit.md if warranted.

Out of scope

The audit dashboard / personal-dashboard surfaces (operator-only). Rotation config beyond what audit.Writer already provides.

Boundary check

Contributor-safe: read-only inspection of ward's own audit trail.

## Summary Add an audit read surface to ward by adopting cli-guard's `scope` package: `ward audit {tail,path}` plus scope-filtered query, mirroring `coily audit` / `coily git audit-show --scope <repo>`. ## Motivation Ward writes append-only JSONL audit rows via `audit.Writer` and stamps a best-effort `repo_root`, but ships no way to read those rows back. A contributor cannot answer "what did ward run in this repo" without hand-grepping `~/.coily/audit/<repo>.jsonl`. coily imports `cli-guard/scope` to resolve cwd->git-toplevel for audit records and exposes `coily audit {path,tail}` + `coily git audit-show --scope`. ## Scope - Import `cli-guard/scope`. - Add `ward audit path` (print the resolved audit log path) and `ward audit tail` (tail recent rows). - Add scope filtering so a contributor can restrict to the current repo's rows. - Update `docs/FEATURES.md` and add a short `docs/audit.md` if warranted. ## Out of scope The audit dashboard / personal-dashboard surfaces (operator-only). Rotation config beyond what `audit.Writer` already provides. ## Boundary check Contributor-safe: read-only inspection of ward's own audit trail.

coilysiren added the

sunday-sprint

labels

2026-06-06 04:16:42 +00:00

coilysiren referenced this issue from a commit

2026-06-06 05:06:42 +00:00

feat(audit): add ward audit read surface (path, tail, scope filter)

coilysiren closed this issue

2026-06-06 05:06:42 +00:00

coilysiren referenced this issue

2026-07-14 15:27:09 +00:00

director should emit colorized, space buffered, visually distinct messages about the categories of actions its performing on startup #1283