Function loadRunSummaryForDiff

pkg/cli/audit_diff.go:922–968

loadRunSummaryForDiff loads or builds a RunSummary for a given run for use in diffing. It first tries to load from a cached RunSummary (which includes MCP tool usage and run metrics); otherwise it downloads artifacts and analyzes firewall logs, returning a partial summary with only FirewallAnalysis

(ctx context.Context, runID int64, outputDir string, owner, repo, hostname string, verbose bool, artifactFilter []string)

// summary with only FirewallAnalysis populated.
// artifactFilter restricts which artifacts are downloaded; nil means download all.
func loadRunSummaryForDiff(ctx context.Context, runID int64, outputDir string, owner, repo, hostname string, verbose bool, artifactFilter []string) (*RunSummary, error) {
	auditDiffLog.Printf("Loading run summary for diff: run_id=%d, owner=%q, repo=%q, artifact_filter=%v", runID, owner, repo, artifactFilter)
	runOutputDir := filepath.Join(outputDir, fmt.Sprintf("run-%d", runID))
	if absDir, err := filepath.Abs(runOutputDir); err == nil {
		runOutputDir = absDir
	}

	// Try cached summary first (full data including MCP tool usage, token usage, etc.)
	if summary, ok := loadRunSummary(runOutputDir, verbose); ok {
		auditDiffLog.Printf("Using cached run summary for run %d", runID)
		return summary, nil
	}

	// Download artifacts if needed
	if err := downloadRunArtifacts(ctx, runID, runOutputDir, verbose, owner, repo, hostname, artifactFilter); err != nil {
		if !errors.Is(err, ErrNoArtifacts) {
			auditDiffLog.Printf("Failed to download artifacts for run %d: %v", runID, err)
			return nil, fmt.Errorf("failed to download artifacts for run %d: %w", runID, err)
		}
		auditDiffLog.Printf("No artifacts found for run %d, proceeding with partial summary", runID)
	}

	// Analyze firewall logs only when the agent artifact was included in the filter.
	// Firewall audit logs are now included in the unified agent artifact.
	// Skip silently when the artifact was intentionally excluded to avoid spurious warnings.
	var analysis *FirewallAnalysis
	if artifactMatchesFilter(constants.AgentArtifactName, artifactFilter) {
		var err error
		analysis, err = analyzeFirewallLogs(runOutputDir, verbose)
		if err != nil {
			return nil, fmt.Errorf("failed to analyze firewall logs for run %d: %w", runID, err)
		}
	}

	// Analyze GitHub API rate limit consumption
	rateLimitUsage, err := analyzeGitHubRateLimits(runOutputDir, verbose)
	if err != nil {
		auditDiffLog.Printf("Failed to analyze GitHub rate limits for run %d: %v", runID, err)
		// Non-fatal: proceed without rate limit data
	}

	return &RunSummary{
		RunID:                runID,
		FirewallAnalysis:     analysis,
		GitHubRateLimitUsage: rateLimitUsage,
	}, nil
}