Function computeAuditDiff

pkg/cli/audit_diff.go:370–403

computeAuditDiff produces a full AuditDiff combining firewall, MCP tool, and run metrics diffs.

(run1ID, run2ID int64, summary1, summary2 *RunSummary)

// computeAuditDiff produces a full AuditDiff combining firewall, MCP tool, and run metrics diffs.
func computeAuditDiff(run1ID, run2ID int64, summary1, summary2 *RunSummary) *AuditDiff {
	auditDiffLog.Printf("Computing full audit diff: run1=%d, run2=%d", run1ID, run2ID)
	diff := &AuditDiff{
		Run1ID: run1ID,
		Run2ID: run2ID,
	}

	var fw1, fw2 *FirewallAnalysis
	if summary1 != nil {
		fw1 = summary1.FirewallAnalysis
	}
	if summary2 != nil {
		fw2 = summary2.FirewallAnalysis
	}
	diff.FirewallDiff = computeFirewallDiff(run1ID, run2ID, fw1, fw2)

	var mcp1, mcp2 *MCPToolUsageData
	if summary1 != nil {
		mcp1 = summary1.MCPToolUsage
	}
	if summary2 != nil {
		mcp2 = summary2.MCPToolUsage
	}
	if mcp1 != nil || mcp2 != nil {
		diff.MCPToolsDiff = computeMCPToolsDiff(mcp1, mcp2)
	}

	metricsDiff := computeRunMetricsDiff(summary1, summary2)
	if metricsDiff != nil {
		diff.RunMetricsDiff = metricsDiff
	}

	return diff
}

// mcpToolKey returns a unique key for an MCP tool given its server and tool name.
func mcpToolKey(serverName, toolName string) string {