abadge audit

abadge audit
abadge audit --limit 100
abadge audit --result denied --agent-id agent_...
abadge audit --item-id item_... --event-type access.reveal
abadge audit --json | jq '.entries[] | select(.result == "denied")'

ID     Agent        Item        Event                  Outcome   Mode   Time
123    ci-deploy    prod-db     access.reveal          allowed   -      2026-04-18T01:14:22Z
122    ci-deploy    -           agent.session_issue    allowed   -      2026-04-18T01:13:55Z
121    -            prod-db     permission.create      allowed   -      2026-04-18T01:10:10Z

abadge audit --cursor <value>

# Every denied access in the last 100 events
abadge audit --limit 100 --json | jq '.entries[] | select(.result == "denied")'

# Everything one agent did
abadge audit --limit 100 --json | jq '.entries[] | select(.agentId == "agent_...")'

# Walk every entry with a cursor
NEXT=""
while true; do
  RESP=$(abadge audit --json --cursor "$NEXT")
  echo "$RESP" | jq -r '.entries[]'
  NEXT=$(echo "$RESP" | jq -r '.nextCursor // empty')
  [ -z "$NEXT" ] && break
done