Source code
Revision control
Copy as Markdown
Other Tools
/* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
/**
* Security audit logger for AI Window policy decisions.
* Outputs logs for debugging and development.
*
* ## Viewing Logs
*
* Logs appear in the Browser Console (Ctrl+Shift+J) and terminal.
*
* To enable debug-level output:
* ./mach run --setpref browser.ml.logLevel=Debug
*
* Or using MOZ_LOG:
* MOZ_LOG=SecurityLogger:5 ./mach run
*
* To filter in Browser Console:
* Type "SecurityLogger" in the filter box
*
* To save logs from Browser Console:
* Right-click --> "Save all Messages to File"
* Then filter: grep "SecurityLogger" security.log
*
* To capture terminal output:
* ./mach run 2>&1 | grep "SecurityLogger" | tee security.log
*/
import { XPCOMUtils } from "resource://gre/modules/XPCOMUtils.sys.mjs";
const lazy = XPCOMUtils.declareLazy({
EFFECT_DENY: "chrome://global/content/ml/security/DecisionTypes.sys.mjs",
console: () =>
console.createInstance({
maxLogLevelPref: "browser.ml.logLevel",
prefix: "SecurityLogger",
}),
});
/**
* Logs a security decision event.
*
* @param {object} event - The security event to log
* @param {string} event.requestId - Request identifier
* @param {string} event.sessionId - Session identifier
* @param {string} event.phase - Security phase (tool.execution, etc.)
* @param {object} event.action - Action details (type, tool, urls, args)
* @param {object} event.context - Context summary (tainted, trustedCount)
* @param {object} event.decision - Policy decision (effect, policyId, code, reason)
* @param {number} event.durationMs - Evaluation duration in milliseconds
* @param {Error} [event.error] - Optional error if evaluation failed
*/
export function logSecurityEvent(event) {
const { phase, decision, durationMs, error } = event;
// Summary line for quick visibility
if (error) {
lazy.console.error(
`[${phase}] Security evaluation error:`,
error.message || error
);
} else if (decision.effect === lazy.EFFECT_DENY) {
lazy.console.warn(
`[${phase}] DENY: ${decision.code} - ${decision.reason} (${durationMs}ms)`
);
} else {
lazy.console.debug(`[${phase}] ALLOW (${durationMs}ms)`);
}
// Full event for detailed debugging (object for Browser Console interactivity)
lazy.console.debug(`[${phase}] Event:`, event);
}