feat(ava): add tool trace viewer mini-app

- Add SQLite storage for tool traces (Omni/Ava/Trace.hs)
- Add web server to serve trace viewer (Omni/Ava/Web.hs)
- Add HTML/CSS/JS trace viewer UI (Omni/Ava/Web/trace.html)
- Integrate trace storage into Engine.hs tool execution callback
- Add trace links to Telegram responses when AVA_WEB_URL is set
- Configure Tailscale Funnel for public access
- Fix pre-push hook variable scope bug
- Add direnv, bash, nix to Ava service PATH
- Add mustache dep to Ava.hs for template rendering

Epic: t-272

1 files changed, 9 insertions, 0 deletions

diff --git a/Omni/Dev/Beryllium/Ava.nix b/Omni/Dev/Beryllium/Ava.nix
index becbf9e..7563b26 100644
--- a/Omni/Dev/Beryllium/Ava.nix
+++ b/Omni/Dev/Beryllium/Ava.nix
@@ -35,12 +35,14 @@
         bild.pkgs.git
         bild.pkgs.sqlite
         bild.pkgs.ffmpeg
+        bild.pkgs.bash
         pkgs.curl
         pkgs.pandoc
         pkgs.imagemagick
         pkgs.csvkit
         pkgs.openai-whisper-cpp
         pkgs.direnv
+        pkgs.nix
       ]}
     '';
   };
@@ -61,6 +63,8 @@ in {
         "AVA_DATA_ROOT=/home/ava"
         "HOME=/home/ava"
         "OLLAMA_URL=http://localhost:11434"
+        "AVA_WEB_PORT=8079"
+        "AVA_WEB_URL=https://beryllium.oryx-ide.ts.net"
       ];
 
       EnvironmentFile = "/run/secrets/ava.env";
@@ -111,4 +115,9 @@ in {
       chown ava:users /home/ava/.bashrc
     fi
   '';
+
+  # Note: Tailscale Funnel for Ava web server is configured via:
+  #   tailscale funnel --bg 8079
+  # This persists in tailscaled config and doesn't need a systemd service.
+  # URL: https://beryllium.oryx-ide.ts.net/
 }