@runtimescope/collector 0.10.8 → 0.10.10

package/dist/chunk-CYDXIW4L.js

@@ -0,0 +1,38 @@
+// src/log.ts
+function formatArg(a) {
+  if (typeof a === "string") return a;
+  if (a instanceof Error) return a.stack ?? a.message;
+  if (a === null || a === void 0) return String(a);
+  if (typeof a === "object") {
+    try {
+      return JSON.stringify(a);
+    } catch {
+      return String(a);
+    }
+  }
+  return String(a);
+}
+function write(stream, args) {
+  try {
+    if (!stream.writable) {
+      process.exit(1);
+    }
+    const formatted = args.map(formatArg).join(" ");
+    stream.write(formatted + "\n");
+  } catch {
+    process.exit(1);
+  }
+}
+var safeLog = {
+  error(...args) {
+    write(process.stderr, args);
+  },
+  warn(...args) {
+    write(process.stderr, args);
+  }
+};
+
+export {
+  safeLog
+};
+//# sourceMappingURL=chunk-CYDXIW4L.js.map

package/dist/chunk-CYDXIW4L.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/log.ts"],"sourcesContent":["// ============================================================\n// safeLog — EPIPE-resilient stderr writes\n//\n// Why this exists:\n//   v0.10.8 fixed a class of bug where the npx-spawned MCP server got\n//   reparented to init when Claude Code exited, then entered a tight\n//   uncaughtException → console.error → uncaughtException loop against\n//   a closed stderr pipe. The fix wrapped the two handler entry points,\n//   but the codebase has 100+ raw `console.error` / `process.stderr.write`\n//   sites in ordinary code paths (PM discovery, otel exporter, WAL\n//   recovery, etc.). Any one of those can re-trigger the same loop if\n//   it fires while stderr is broken — the v0.10.8 fix is necessary but\n//   not sufficient.\n//\n//   See audit: docs/audits/0001-collector-process-lifetime.md F1\n//   See ADR:   docs/decisions/0001-audit-then-rust.md\n//\n// Contract:\n//   - Synchronous writes to stderr, formatted similarly to console.error.\n//   - If stderr is unwritable (parent died, pipe closed), the call exits\n//     the process with code 1 rather than throwing. We cannot meaningfully\n//     surface anything to a dead pipe; the only behavior that doesn't\n//     cascade into a CPU-pegged loop is to bail.\n//   - Drop-in replacement for console.error / console.warn — supports\n//     multi-arg format (`safeLog.error('foo:', err.message)`).\n//   - Never throws; never re-enters. Safe to call from inside an\n//     uncaughtException handler.\n// ============================================================\n\nfunction formatArg(a: unknown): string {\n  if (typeof a === 'string') return a;\n  if (a instanceof Error) return a.stack ?? a.message;\n  if (a === null || a === undefined) return String(a);\n  if (typeof a === 'object') {\n    try {\n      return JSON.stringify(a);\n    } catch {\n      // Circular refs or non-serializable values — fall back to toString.\n      return String(a);\n    }\n  }\n  return String(a);\n}\n\nfunction write(stream: NodeJS.WriteStream, args: unknown[]): void {\n  try {\n    if (!stream.writable) {\n      // Pipe is gone. Don't try to log anything else, just exit.\n      // We use code 1 to distinguish \"I exited because my stderr broke\"\n      // from \"I exited because my stdin closed\" (which uses code 0).\n      process.exit(1);\n    }\n    const formatted = args.map(formatArg).join(' ');\n    stream.write(formatted + '\\n');\n  } catch {\n    // The write itself threw (EPIPE landed between the writable check and\n    // the write). Same conclusion: exit, do not loop.\n    process.exit(1);\n  }\n}\n\nexport const safeLog = {\n  error(...args: unknown[]): void {\n    write(process.stderr, args);\n  },\n  warn(...args: unknown[]): void {\n    write(process.stderr, args);\n  },\n};\n"],"mappings":";AA6BA,SAAS,UAAU,GAAoB;AACrC,MAAI,OAAO,MAAM,SAAU,QAAO;AAClC,MAAI,aAAa,MAAO,QAAO,EAAE,SAAS,EAAE;AAC5C,MAAI,MAAM,QAAQ,MAAM,OAAW,QAAO,OAAO,CAAC;AAClD,MAAI,OAAO,MAAM,UAAU;AACzB,QAAI;AACF,aAAO,KAAK,UAAU,CAAC;AAAA,IACzB,QAAQ;AAEN,aAAO,OAAO,CAAC;AAAA,IACjB;AAAA,EACF;AACA,SAAO,OAAO,CAAC;AACjB;AAEA,SAAS,MAAM,QAA4B,MAAuB;AAChE,MAAI;AACF,QAAI,CAAC,OAAO,UAAU;AAIpB,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,UAAM,YAAY,KAAK,IAAI,SAAS,EAAE,KAAK,GAAG;AAC9C,WAAO,MAAM,YAAY,IAAI;AAAA,EAC/B,QAAQ;AAGN,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;AAEO,IAAM,UAAU;AAAA,EACrB,SAAS,MAAuB;AAC9B,UAAM,QAAQ,QAAQ,IAAI;AAAA,EAC5B;AAAA,EACA,QAAQ,MAAuB;AAC7B,UAAM,QAAQ,QAAQ,IAAI;AAAA,EAC5B;AACF;","names":[]}

package/dist/{chunk-TT3VVKUE.js → chunk-VNRQCY6B.js}

@@ -1,3 +1,6 @@
+import {
+  safeLog
+} from "./chunk-CYDXIW4L.js";
 import {
   __require
 } from "./chunk-UP2VWCW5.js";
@@ -483,6 +486,7 @@ var SqliteStore = class _SqliteStore {
     this.db = this.openDatabase(options);
     const flushInterval = options.flushIntervalMs ?? 100;
     this.flushTimer = setInterval(() => this.flush(), flushInterval);
+    this.flushTimer.unref?.();
   }
   openDatabase(options) {
     const Db = getDatabase();
@@ -500,14 +504,14 @@ var SqliteStore = class _SqliteStore {
       this.prepareStatements(db);
       return db;
     } catch (err) {
-      console.error(
+      safeLog.error(
         `[RuntimeScope] SQLite database corrupt or unreadable (${err.message}), recreating...`
       );
       try {
         if (existsSync(options.dbPath)) {
           const backupPath = `${options.dbPath}.corrupt.${Date.now()}`;
           renameSync(options.dbPath, backupPath);
-          console.error(`[RuntimeScope] Renamed corrupt DB to ${backupPath}`);
+          safeLog.error(`[RuntimeScope] Renamed corrupt DB to ${backupPath}`);
         }
         for (const suffix of ["-wal", "-shm"]) {
           const p = options.dbPath + suffix;
@@ -626,7 +630,7 @@ var SqliteStore = class _SqliteStore {
     try {
       insertMany();
     } catch (err) {
-      console.error("[RuntimeScope] SQLite flush error:", err.message);
+      safeLog.error("[RuntimeScope] SQLite flush error:", err.message);
     }
   }
   saveSession(info) {
@@ -890,7 +894,7 @@ function isSqliteAvailable() {
     _available = true;
   } catch {
     _available = false;
-    console.error(
+    safeLog.error(
       "[RuntimeScope] better-sqlite3 is not available \u2014 running in memory-only mode.\n[RuntimeScope] Historical data persistence is disabled. To fix this:\n[RuntimeScope]   macOS:   xcode-select --install\n[RuntimeScope]   Ubuntu:  sudo apt-get install build-essential python3\n[RuntimeScope]   Windows: npm install --global windows-build-tools\n[RuntimeScope] Then run: npm rebuild better-sqlite3"
     );
   }
@@ -1503,7 +1507,7 @@ var OtelExporter = class {
     const now = Date.now();
     if (now - this.lastFailureLog < 6e4) return;
     this.lastFailureLog = now;
-    console.error(`[RuntimeScope] ${msg}`);
+    safeLog.error(`[RuntimeScope] ${msg}`);
   }
 };
 function traceIdFromSession(sessionId) {
@@ -1644,7 +1648,7 @@ var SessionRateLimiter = class {
   maybeWarn(sessionId, w, now) {
     if (now - w.lastWarning >= 6e4) {
       w.lastWarning = now;
-      console.error(
+      safeLog.error(
         `[RuntimeScope] Rate limiting session ${sessionId.slice(0, 8)}... (dropped ${this._droppedTotal} total)`
       );
     }
@@ -1694,6 +1698,15 @@ var CollectorServer = class {
   // RSS. ensureSqliteStore() updates this on every access.
   sqliteStoreLastAccess = /* @__PURE__ */ new Map();
   wals = /* @__PURE__ */ new Map();
+  // Per-project last-access timestamps for WAL handles, mirroring
+  // sqliteStoreLastAccess. The audit (docs/audits/0001 §F3) found that
+  // WAL handles followed the same "open on first use, only closed on
+  // stop()" lifetime as the SQLite stores did pre-v0.10.8 — fewer bytes
+  // per handle than SQLite, but each holds an open FD, so on machines
+  // with many projects the leak is real (ulimit risk + small RSS drift).
+  // ensureWal() updates this on every access; the sqliteEvictTimer sweep
+  // evicts idle handles in the same pass.
+  walsLastAccess = /* @__PURE__ */ new Map();
   ready = false;
   metrics = new MetricsRegistry();
   startedAt = Date.now();
@@ -1717,6 +1730,7 @@ var CollectorServer = class {
     }
     if (this.rateLimiter.isEnabled()) {
       this.pruneTimer = setInterval(() => this.rateLimiter.prune(), 6e4);
+      this.pruneTimer.unref?.();
     }
     this.counters = {
       eventsTotal: this.metrics.counter(
@@ -1774,7 +1788,7 @@ var CollectorServer = class {
       this.store.onEvent((event) => {
         this.otelExporter?.ingest(event);
       });
-      console.error(
+      safeLog.error(
         `[RuntimeScope] OpenTelemetry export enabled \u2192 ${otelOptions.endpoint}`
       );
     }
@@ -1802,6 +1816,24 @@ var CollectorServer = class {
   getSqliteStores() {
     return this.sqliteStores;
   }
+  /**
+   * Diagnostic counters for currently-open per-project resource handles
+   * and pending bidirectional commands. Exposed for tests + future
+   * tray-app health surfaces.
+   *
+   * - `sqliteStores` / `wals`: open handle counts. The eviction sweep
+   *   (5-minute idle in production, env-overridable for tests) drives
+   *   these down to zero for idle projects and back up on reconnect.
+   * - `pendingCommands`: in-flight WS commands (server → SDK). Settles
+   *   on response or via the per-command timeout — see audit F5.
+   */
+  getOpenHandleCounts() {
+    return {
+      sqliteStores: this.sqliteStores.size,
+      wals: this.wals.size,
+      pendingCommands: this.pendingCommands.size
+    };
+  }
   getRateLimiter() {
     return this.rateLimiter;
   }
@@ -1848,7 +1880,7 @@ var CollectorServer = class {
           sqliteBytes = sqliteStore.snapshotTo(sqlitePath);
           eventCount = sqliteStore.getEventCount({ project: projectName });
         } catch (err) {
-          console.error(
+          safeLog.error(
             `[RuntimeScope] Snapshot of "${projectName}" SQLite failed:`,
             err.message
           );
@@ -1860,7 +1892,7 @@ var CollectorServer = class {
         try {
           walBytes = wal.snapshotTo(join2(projectDir, "wal"));
         } catch (err) {
-          console.error(
+          safeLog.error(
             `[RuntimeScope] Snapshot of "${projectName}" WAL failed:`,
             err.message
           );
@@ -1889,7 +1921,7 @@ var CollectorServer = class {
       try {
         this.runStartupRecovery();
       } catch (err) {
-        console.error("[RuntimeScope] Startup recovery failed (non-fatal):", err.message);
+        safeLog.error("[RuntimeScope] Startup recovery failed (non-fatal):", err.message);
       }
     }
     this.ready = true;
@@ -1929,7 +1961,7 @@ var CollectorServer = class {
         try {
           store.close();
         } catch (e) {
-          console.error(
+          safeLog.error(
             `[RuntimeScope] Failed to close idle SQLite store "${projectName}":`,
             e.message
           );
@@ -1939,6 +1971,22 @@ var CollectorServer = class {
         this.sqliteStoreLastAccess.delete(projectName);
         this.store.clearSqliteStoreIfMatches(projectName);
       }
+      for (const [projectName, wal] of this.wals) {
+        if (liveProjects.has(projectName)) continue;
+        const lastAccess = this.walsLastAccess.get(projectName) ?? 0;
+        if (now - lastAccess < IDLE_TIMEOUT_MS) continue;
+        try {
+          wal.close();
+        } catch (e) {
+          safeLog.error(
+            `[RuntimeScope] Failed to close idle WAL "${projectName}":`,
+            e.message
+          );
+          continue;
+        }
+        this.wals.delete(projectName);
+        this.walsLastAccess.delete(projectName);
+      }
     }, SWEEP_INTERVAL_MS);
     this.sqliteEvictTimer.unref?.();
   }
@@ -1990,7 +2038,7 @@ var CollectorServer = class {
       }
     }
     if (walReplayed > 0 || warmed > 0) {
-      console.error(
+      safeLog.error(
         `[RuntimeScope] Recovery: ${walReplayed} WAL events replayed, ${warmed} events warmed into ring buffer.`
       );
     }
@@ -2006,7 +2054,7 @@ var CollectorServer = class {
           this.setupConnectionHandler(wss);
           this.setupPersistentErrorHandler(wss);
           this.startHeartbeat(wss);
-          console.error(`[RuntimeScope] Collector listening on wss://${host}:${port}`);
+          safeLog.error(`[RuntimeScope] Collector listening on wss://${host}:${port}`);
           resolve2();
         });
         httpsServer.on("error", (err) => {
@@ -2021,7 +2069,7 @@ var CollectorServer = class {
           this.setupConnectionHandler(wss);
           this.setupPersistentErrorHandler(wss);
           this.startHeartbeat(wss);
-          console.error(`[RuntimeScope] Collector listening on ws://${host}:${port}`);
+          safeLog.error(`[RuntimeScope] Collector listening on ws://${host}:${port}`);
           resolve2();
         });
         wss.on("error", (err) => {
@@ -2034,12 +2082,12 @@ var CollectorServer = class {
   handleStartError(err, port, host, retriesLeft, retryDelayMs, tls, resolve2, reject) {
     if (err.code === "EADDRINUSE" && retriesLeft > 0) {
       const nextPort = port + 1;
-      console.error(
+      safeLog.error(
         `[RuntimeScope] Port ${port} in use, trying ${nextPort}...`
       );
       this.tryStart(nextPort, host, retriesLeft - 1, retryDelayMs, tls).then(resolve2).catch(reject);
     } else {
-      console.error("[RuntimeScope] WebSocket server error:", err.message);
+      safeLog.error("[RuntimeScope] WebSocket server error:", err.message);
       reject(err);
     }
   }
@@ -2055,9 +2103,9 @@ var CollectorServer = class {
         sqliteStore = new SqliteStore({ dbPath });
         this.sqliteStores.set(projectName, sqliteStore);
         this.store.setSqliteStore(sqliteStore, projectName);
-        console.error(`[RuntimeScope] SQLite store opened for project "${projectName}"`);
+        safeLog.error(`[RuntimeScope] SQLite store opened for project "${projectName}"`);
       } catch (err) {
-        console.error(
+        safeLog.error(
           `[RuntimeScope] Failed to open SQLite for "${projectName}":`,
           err.message
         );
@@ -2084,6 +2132,7 @@ var CollectorServer = class {
    */
   ensureWal(projectName) {
     if (!this.projectManager) return null;
+    this.walsLastAccess.set(projectName, Date.now());
     let wal = this.wals.get(projectName);
     if (wal) return wal;
     const dir = this.walDirFor(projectName);
@@ -2094,7 +2143,7 @@ var CollectorServer = class {
       this.wals.set(projectName, wal);
       return wal;
     } catch (err) {
-      console.error(
+      safeLog.error(
         `[RuntimeScope] Failed to open WAL for "${projectName}":`,
         err.message
       );
@@ -2131,7 +2180,7 @@ var CollectorServer = class {
     if (sqliteStore && replayed > 0) {
       sqliteStore.flush();
       for (const file of files) Wal.deleteSealed(file);
-      console.error(
+      safeLog.error(
         `[RuntimeScope] WAL recovery: replayed ${replayed} events for "${projectName}"`
       );
     }
@@ -2151,7 +2200,7 @@ var CollectorServer = class {
   /** Catch runtime errors on the WSS so an unhandled error doesn't crash the process */
   setupPersistentErrorHandler(wss) {
     wss.on("error", (err) => {
-      console.error("[RuntimeScope] WebSocket server runtime error:", err.message);
+      safeLog.error("[RuntimeScope] WebSocket server runtime error:", err.message);
     });
   }
   /** Ping all connected clients every 15s — terminate those that don't respond */
@@ -2167,6 +2216,7 @@ var CollectorServer = class {
         ws.ping();
       }
     }, 15e3);
+    this.heartbeatTimer.unref?.();
   }
   setupConnectionHandler(wss) {
     wss.on("connection", (ws) => {
@@ -2201,7 +2251,7 @@ var CollectorServer = class {
           const msg = JSON.parse(data.toString());
           this.handleMessage(ws, msg);
         } catch {
-          console.error("[RuntimeScope] Malformed WebSocket message, ignoring");
+          safeLog.error("[RuntimeScope] Malformed WebSocket message, ignoring");
         }
       });
       ws.on("close", (code) => {
@@ -2214,7 +2264,7 @@ var CollectorServer = class {
           if (sqliteStore) {
             sqliteStore.updateSessionDisconnected(clientInfo.sessionId, Date.now());
           }
-          console.error(`[RuntimeScope] Session ${clientInfo.sessionId} disconnected`);
+          safeLog.error(`[RuntimeScope] Session ${clientInfo.sessionId} disconnected`);
           for (const cb of this.disconnectCallbacks) {
             try {
               cb(clientInfo.sessionId, clientInfo.projectName, clientInfo.projectId);
@@ -2225,7 +2275,7 @@ var CollectorServer = class {
         this.clients.delete(ws);
       });
       ws.on("error", (err) => {
-        console.error("[RuntimeScope] WebSocket client error:", err.message);
+        safeLog.error("[RuntimeScope] WebSocket client error:", err.message);
       });
     });
   }
@@ -2299,7 +2349,7 @@ var CollectorServer = class {
           connectedAt: msg.timestamp,
           sdkVersion: payload.sdkVersion
         });
-        console.error(
+        safeLog.error(
           `[RuntimeScope] Session ${payload.sessionId} connected (${payload.appName} v${payload.sdkVersion})`
         );
         for (const cb of this.connectCallbacks) {
@@ -2334,7 +2384,7 @@ var CollectorServer = class {
             wal.append(accepted);
             wal.commit();
           } catch (err) {
-            console.error("[RuntimeScope] WAL append/commit failed:", err.message);
+            safeLog.error("[RuntimeScope] WAL append/commit failed:", err.message);
             this.counters.eventsDropped.inc(accepted.length, { reason: "wal_backpressure" });
           }
         }
@@ -2345,7 +2395,7 @@ var CollectorServer = class {
           try {
             this.checkpointWal(clientInfo.projectName, wal);
           } catch (err) {
-            console.error("[RuntimeScope] WAL checkpoint failed:", err.message);
+            safeLog.error("[RuntimeScope] WAL checkpoint failed:", err.message);
           }
         }
         break;
@@ -2457,14 +2507,14 @@ var CollectorServer = class {
       try {
         wal.close();
       } catch {
-        console.error(`[RuntimeScope] WAL close error for "${name}" (non-fatal)`);
+        safeLog.error(`[RuntimeScope] WAL close error for "${name}" (non-fatal)`);
       }
     }
     this.wals.clear();
     for (const [name, sqliteStore] of this.sqliteStores) {
       try {
         sqliteStore.close();
-        console.error(`[RuntimeScope] SQLite store closed for "${name}"`);
+        safeLog.error(`[RuntimeScope] SQLite store closed for "${name}"`);
       } catch {
       }
     }
@@ -2472,7 +2522,7 @@ var CollectorServer = class {
     if (this.wss) {
       this.wss.close();
       this.wss = null;
-      console.error("[RuntimeScope] Collector stopped");
+      safeLog.error("[RuntimeScope] Collector stopped");
     }
     this.ready = false;
   }
@@ -4992,6 +5042,30 @@ var HttpServer = class {
     }
     return null;
   }
+  /**
+   * Resolve the directory containing the built dashboard SPA. The tsup
+   * onSuccess hook copies packages/dashboard/dist/ into the collector's
+   * dist/dashboard-assets/ so the dashboard ships inside the @runtimescope/
+   * collector npm package. Cached after first resolution.
+   */
+  dashboardAssetsRoot = null;
+  resolveDashboardAssets() {
+    if (this.dashboardAssetsRoot) return this.dashboardAssetsRoot;
+    const __dir = dirname2(fileURLToPath(import.meta.url));
+    const candidates = [
+      resolve(__dir, "dashboard-assets"),
+      // npm published: dist/dashboard-assets/
+      resolve(__dir, "../../dashboard/dist")
+      // monorepo dev: sibling package
+    ];
+    for (const p of candidates) {
+      if (existsSync6(resolve(p, "index.html"))) {
+        this.dashboardAssetsRoot = p;
+        return p;
+      }
+    }
+    return null;
+  }
   getPort() {
     return this.activePort;
   }
@@ -5047,7 +5121,7 @@ var HttpServer = class {
       } catch (err) {
         const isAddrInUse = err.code === "EADDRINUSE";
         if (isAddrInUse && attempt < maxRetries) {
-          console.error(`[RuntimeScope] HTTP port ${port} in use, trying ${port + 1}...`);
+          safeLog.error(`[RuntimeScope] HTTP port ${port} in use, trying ${port + 1}...`);
           continue;
         }
         throw err;
@@ -5081,7 +5155,7 @@ var HttpServer = class {
         this.activePort = boundPort;
         this.startedAt = Date.now();
         const proto = tls ? "https" : "http";
-        console.error(`[RuntimeScope] HTTP API listening on ${proto}://${host}:${boundPort}`);
+        safeLog.error(`[RuntimeScope] HTTP API listening on ${proto}://${host}:${boundPort}`);
         resolve2();
       });
       server.on("error", (err) => {
@@ -5113,7 +5187,7 @@ var HttpServer = class {
       return new Promise((resolve2) => {
         this.server.close(() => {
           this.server = null;
-          console.error("[RuntimeScope] HTTP API stopped");
+          safeLog.error("[RuntimeScope] HTTP API stopped");
           resolve2();
         });
       });
@@ -5166,7 +5240,7 @@ var HttpServer = class {
       res.end();
       return;
     }
-    const isPublic = url.pathname === "/api/health" || url.pathname === "/readyz" || url.pathname === "/metrics" || url.pathname === "/runtimescope.js" || url.pathname === "/snippet";
+    const isPublic = url.pathname === "/api/health" || url.pathname === "/readyz" || url.pathname === "/metrics" || url.pathname === "/runtimescope.js" || url.pathname === "/snippet" || url.pathname === "/dashboard" || url.pathname.startsWith("/dashboard/") || url.pathname.startsWith("/assets/");
     const workspaceKeysExist = !!this.pmStore?.hasActiveApiKeys?.();
     const authActive = !!this.authManager?.isEnabled() || workspaceKeysExist;
     const caller = {
@@ -5200,6 +5274,31 @@ var HttpServer = class {
       }
       return;
     }
+    const isDashboardRoute = url.pathname === "/dashboard" || url.pathname.startsWith("/dashboard/");
+    const isAssetRoute = url.pathname.startsWith("/assets/");
+    if (req.method === "GET" && (isDashboardRoute || isAssetRoute)) {
+      const assetsRoot = this.resolveDashboardAssets();
+      if (!assetsRoot) {
+        res.writeHead(404, { "Content-Type": "text/plain" });
+        res.end("Dashboard assets not found. Run: npm run build -w packages/dashboard");
+        return;
+      }
+      const relativePath = isAssetRoute ? url.pathname.slice(1) : url.pathname === "/dashboard" || url.pathname === "/dashboard/" ? "index.html" : url.pathname.slice("/dashboard/".length);
+      const filePath = resolve(assetsRoot, relativePath);
+      const hasExtension = /\.[a-zA-Z0-9]+$/.test(relativePath);
+      const targetPath = existsSync6(filePath) ? filePath : hasExtension || isAssetRoute ? null : resolve(assetsRoot, "index.html");
+      if (!targetPath || !existsSync6(targetPath)) {
+        res.writeHead(404, { "Content-Type": "text/plain" });
+        res.end("Not found");
+        return;
+      }
+      const ext = targetPath.slice(targetPath.lastIndexOf(".")).toLowerCase();
+      const contentType = ext === ".html" ? "text/html; charset=utf-8" : ext === ".js" ? "application/javascript; charset=utf-8" : ext === ".mjs" ? "application/javascript; charset=utf-8" : ext === ".css" ? "text/css; charset=utf-8" : ext === ".json" ? "application/json; charset=utf-8" : ext === ".svg" ? "image/svg+xml" : ext === ".png" ? "image/png" : ext === ".jpg" || ext === ".jpeg" ? "image/jpeg" : ext === ".ico" ? "image/x-icon" : ext === ".woff" ? "font/woff" : ext === ".woff2" ? "font/woff2" : "application/octet-stream";
+      const cacheControl = targetPath.endsWith("index.html") || targetPath.endsWith("/index.html") ? "no-cache" : "public, max-age=31536000, immutable";
+      res.writeHead(200, { "Content-Type": contentType, "Cache-Control": cacheControl });
+      res.end(readFileSync5(targetPath));
+      return;
+    }
     if (req.method === "GET" && url.pathname === "/snippet") {
       const appName = (url.searchParams.get("app") || "my-app").replace(/[^a-zA-Z0-9_-]/g, "");
       const projectId = url.searchParams.get("project_id") || "proj_xxx";
@@ -6996,7 +7095,7 @@ var ProjectDiscovery = class {
       return mergeResults(claudeResult, runtimeResult);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
-      console.error(`${LOG_PREFIX} Fatal discovery error: ${msg}`);
+      safeLog.error(`${LOG_PREFIX} Fatal discovery error: ${msg}`);
       result.errors.push(`Fatal discovery error: ${msg}`);
       return result;
     }
@@ -7024,7 +7123,7 @@ var ProjectDiscovery = class {
       entries = dirEntries.filter((d) => d.isDirectory()).map((d) => d.name);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
-      console.error(`${LOG_PREFIX} Failed to read Claude projects dir: ${msg}`);
+      safeLog.error(`${LOG_PREFIX} Failed to read Claude projects dir: ${msg}`);
       result.errors.push(`Failed to read Claude projects dir: ${msg}`);
       return result;
     }
@@ -7033,7 +7132,7 @@ var ProjectDiscovery = class {
         await this.processClaudeProject(key, result);
       } catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
-        console.error(`${LOG_PREFIX} Error processing Claude project ${key}: ${msg}`);
+        safeLog.error(`${LOG_PREFIX} Error processing Claude project ${key}: ${msg}`);
         result.errors.push(`Claude project ${key}: ${msg}`);
       }
     }
@@ -7100,13 +7199,13 @@ var ProjectDiscovery = class {
           }
         } catch (err) {
           const msg = err instanceof Error ? err.message : String(err);
-          console.error(`${LOG_PREFIX} Error processing RuntimeScope project ${projectName}: ${msg}`);
+          safeLog.error(`${LOG_PREFIX} Error processing RuntimeScope project ${projectName}: ${msg}`);
           result.errors.push(`RuntimeScope project ${projectName}: ${msg}`);
         }
       }
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
-      console.error(`${LOG_PREFIX} Failed to list RuntimeScope projects: ${msg}`);
+      safeLog.error(`${LOG_PREFIX} Failed to list RuntimeScope projects: ${msg}`);
       result.errors.push(`Failed to list RuntimeScope projects: ${msg}`);
     }
     return result;
@@ -7119,7 +7218,7 @@ var ProjectDiscovery = class {
     const existingProjects = await this.pmStore.listProjects();
     const project = existingProjects.find((p) => p.id === projectId);
     if (!project) {
-      console.error(`${LOG_PREFIX} Project not found: ${projectId}`);
+      safeLog.error(`${LOG_PREFIX} Project not found: ${projectId}`);
       return 0;
     }
     if (!project.claudeProjectKey) {
@@ -7160,12 +7259,12 @@ var ProjectDiscovery = class {
           sessionsIndexed++;
         } catch (err) {
           const msg = err instanceof Error ? err.message : String(err);
-          console.error(`${LOG_PREFIX} Error indexing session ${jsonlFile}: ${msg}`);
+          safeLog.error(`${LOG_PREFIX} Error indexing session ${jsonlFile}: ${msg}`);
         }
       }
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
-      console.error(`${LOG_PREFIX} Error indexing sessions for project ${projectId}: ${msg}`);
+      safeLog.error(`${LOG_PREFIX} Error indexing sessions for project ${projectId}: ${msg}`);
     }
     return sessionsIndexed;
   }
@@ -7283,12 +7382,12 @@ var ProjectDiscovery = class {
           }
         } catch (err) {
           const msg = err instanceof Error ? err.message : String(err);
-          console.error(`${LOG_PREFIX} Error indexing session ${jsonlFile} in ${claudeKey}: ${msg}`);
+          safeLog.error(`${LOG_PREFIX} Error indexing session ${jsonlFile} in ${claudeKey}: ${msg}`);
         }
       }
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
-      console.error(`${LOG_PREFIX} Error scanning sessions for ${claudeKey}: ${msg}`);
+      safeLog.error(`${LOG_PREFIX} Error scanning sessions for ${claudeKey}: ${msg}`);
     }
     return counts;
   }
@@ -7382,7 +7481,7 @@ var ProjectDiscovery = class {
       };
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
-      console.error(`${LOG_PREFIX} Failed to parse session ${sessionId}: ${msg}`);
+      safeLog.error(`${LOG_PREFIX} Failed to parse session ${sessionId}: ${msg}`);
       return {
         id: sessionId,
         projectId,
@@ -7432,7 +7531,7 @@ var ProjectDiscovery = class {
       await this.pmStore.upsertCapexEntry(entry);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
-      console.error(`${LOG_PREFIX} Failed to create CapEx stub for session ${session.id}: ${msg}`);
+      safeLog.error(`${LOG_PREFIX} Failed to create CapEx stub for session ${session.id}: ${msg}`);
     }
   }
 };
@@ -7482,4 +7581,4 @@ export {
   parseSessionJsonl,
   ProjectDiscovery
 };
-//# sourceMappingURL=chunk-TT3VVKUE.js.map
+//# sourceMappingURL=chunk-VNRQCY6B.js.map