xerg audit --jsonreturns the local audit summary including recommendationsxerg audit --push --dry-runandxerg push --dry-runreturn the push payload that would be sent to the Xerg API
@xerg/schemas.
Audit summary JSON
Hermes audits can include a local-onlymechanicalEfficiency block with metrics, separate non-monetary findings, coverage, and optional comparison deltas. Mechanical findings do not have classification or costImpactUsd. The entire block—including event IDs, fingerprints, session IDs, and mechanical kinds—is removed recursively before any push payload is built.
OpenClaw and Hermes audits can include local-only analysisCoverage, toolActivity, and workloadEconomics blocks. They contain eligibility, neutral tool-association, and lineage economics—not findings or savings claims—and are removed before push payload construction. Request correlation evidence and orchestration events also remain local-only.
recommendationsare part of the audit summary itselfsourceFilesanddbPathare present here because this is the local summary format- local findings may include
signalSource,ruleId, andevidence;ruleIdandevidenceare local-only, whilesignalSourcealso crosses the wire wasteBySignalSource.unknownUsdis used for older summaries that predate provenance fieldscomparisonisnullunless a compatible baseline was foundspendByDayandwasteByDayuse UTCYYYY-MM-DDbucketspricingCoveragereports how many calls had resolvable pricing; unpriced calls are counted as $0 and flagged rather than silently zeroedpricingCoverage.pricedTokenCountandunpricedTokenCountcount priced input plus output tokens. Cache buckets remain visible in token economics and are included in total run tokens and cost.- Cursor CSV audits also add a local-only
cursorUsagetoken/mode breakdown
Multi-source JSON
sources wrapper.
Push payload JSON
Preview the push payload without sending it:- the push payload does not include
sourceFilesordbPath - findings carry an optional
signalSource(observed, inferred, or declared);ruleId,evidence, anddetailsnever cross the wire wasteBySignalSourceandpricingCoverageare optional rollup-level provenance fields; no raw prompts, paths, per-call request evidence, analysis coverage, tool activity, workload lineage, or mechanical data are included- payload version 3 includes
recommendations, token economics, outcomes, provenance rollups, pricing coverage counts, and the content-addressed dedup key - the push payload now includes daily spend and confirmed waste rollups for charting
meta.dedupKeyis the content-addressed audit ID; the API deduplicates repeat pushes within its server-side windowaudit --push --dry-runprints only the payload, not the normal audit reportmeta.environmentislocal,remote, orrailwaydepending on how the audit was run
Wire schema notes
The push payload is a mapped wire contract, not a raw dump of the internal local summary.AuditPushPayloadis the top-level type sent by the CLIWireFindingintentionally excludes internaldetails,ruleId, andevidence; it carries an optionalsignalSourceWireComparisonincludes the top-line delta fields only- per-workflow deltas and per-model deltas are not part of the push payload
summary.recommendationsis part of payload version 3
When to use which JSON
- use
audit --jsonfor local automation that needs recommendations or source metadata - use
--push --dry-runwhen you want the exact wire payload that would be sent to the API