@sanqianx/project-knowledge 5.0.23 → 5.0.25

package/_site/_test/parallel-logging-acceptance-log005-test.js

@@ -0,0 +1,208 @@
+'use strict';
+// P-LOG-ACCEPTANCE-01 LOG-005 acceptance driver (real product page in a real
+// browser against an isolated managed instance).
+//
+// Case (qa-autopilot/config/test-cases.json LOG-005, P1):
+//   steps:    写入超过100条日志，查看DOM有界且早期记录仍可查询。
+//   expected: 1) DOM 渲染有界（≤100），不随总量增长。
+//             2) 早期（超出首页的）记录仍可通过查询/导出获取。
+//
+// Real behaviour under test: the diagnostics dialog GETs pageSize=100 and
+// appendLog caps #logsContent at 100 entries (ui/product.js appendLog trims
+// firstElementChild), including live stream appends. With 140 seeded records
+// the first page shows exactly 100; three real GOAL updates stream in and the
+// DOM must stay bounded at 100. The oldest records stay reachable through the
+// real query path (unique marker search in the UI), cursor pagination, export
+// and the on-disk JSONL.
+
+const fs = require('node:fs');
+const path = require('node:path');
+const crypto = require('node:crypto');
+
+// Portable isolation (P-QA-LOG-INTEGRATION-5025): the temp root comes from
+// PK_TEST_TEMP_ROOT or os.tmpdir() and must live outside the source tree;
+// HOME/APPDATA/LOCALAPPDATA/TEMP/CODEX_HOME/CLAUDE_CONFIG_DIR and the dual
+// product data roots are redirected before any other module is loaded.
+const { installLoggingTestEnv, resolveEvidenceDir } = require('./helpers/parallel-logging-integration-5025-env');
+const lane = installLoggingTestEnv({ caseId: 'LOG-005', prefix: 'log005' });
+const laneTmp = lane.laneTmp;
+
+const { spawnServer } = require('./helpers/spawn-server');
+const { findChrome } = require('./helpers/find-chrome');
+const { launchCdpBrowser, waitFor } = require('./helpers/cdp-browser');
+const freePort = require('./helpers/free-port');
+const { createLoggingAcceptanceFixture, writeProjectLogs } = require('./helpers/parallel-logging-acceptance-fixture');
+const { createObservationProxy } = require('./helpers/parallel-logging-acceptance-proxy');
+// The logger names its day files by LOCAL day; the disk assertions must use
+// the same clock, not the UTC day (a UTC+8 machine runs 00:00-08:00 on the
+// previous UTC date).
+const { localDay } = require('../lib/structured-logger');
+
+const ROOT = path.resolve(__dirname, '../..');
+const ARTIFACTS = resolveEvidenceDir(path.resolve(ROOT, 'qa-autopilot/artifacts/parallel-20261023/logging-acceptance-r1/evidence/log005'));
+
+const PROJECT_A = 'project-log005-alpha';
+const run = crypto.randomBytes(6).toString('hex');
+const TOTAL = 140;
+const markerOf = index => `LOG005-R-${index}-${run}`;
+const GOAL_EVENT = 'goal.updated';
+const GOAL_BYTES = { a: 1600, b: 1601, c: 1602 };
+
+async function main() {
+  fs.mkdirSync(ARTIFACTS, { recursive: true });
+  const evidence = { caseId: 'LOG-005', startedAt: new Date().toISOString(), total: TOTAL, oldestMarker: markerOf(0), newestMarker: markerOf(TOTAL - 1), phases: {} };
+
+  const fixture = await createLoggingAcceptanceFixture({
+    caseId: 'log005',
+    projects: [{ projectId: PROJECT_A, displayName: 'LOG005甲项目' }],
+  });
+  await writeProjectLogs(fixture.logger, PROJECT_A, Array.from({ length: TOTAL }, (_, index) => ({
+    level: index % 3 === 0 ? 'info' : index % 3 === 1 ? 'warn' : 'debug',
+    event: `log005.bulk.${index}`,
+    message: `${markerOf(index)} LOG005 bulk record ${index}`,
+    operationId: `op-log005-r${index}-${run}`,
+  })));
+  await fixture.logger.close();
+
+  const port = await freePort();
+  const proxyPort = await freePort();
+  const base = `http://127.0.0.1:${port}`;
+  const server = spawnServer({ root: ROOT, port, dataDir: fixture.dataDir, tag: 'log005', stdio: 'ignore' });
+  const putGoal = async target => {
+    const content = `LOG005-LIVE ${run} ${target}`.padEnd(target, '.');
+    const res = await fetch(`${base}/api/projects/${PROJECT_A}/goal`, { method: 'PUT', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ content }) });
+    return { status: res.status, bytes: Buffer.byteLength(content, 'utf8') };
+  };
+  let browser;
+  let proxy;
+  try {
+    await waitFor(async () => { try { return (await fetch(`${base}/api/health`)).ok; } catch { return false; } }, 'isolated web shell', 20000);
+    proxy = await createObservationProxy({ targetPort: port, port: proxyPort });
+    evidence.server = { pid: server.child.pid, port, proxyPort, dataDir: fixture.dataDir };
+
+    browser = await launchCdpBrowser({ chrome: findChrome(), profileDir: path.join(laneTmp, 'browser'), url: proxy.url, width: 1440, height: 900 });
+    const runExpr = expression => browser.evaluate(expression);
+    const click = selector => runExpr(`document.querySelector(${JSON.stringify(selector)}).click()`);
+    const readDom = () => runExpr(`JSON.stringify({ count: document.querySelectorAll('#logsContent .log-entry').length, records: [...document.querySelectorAll('#logsContent .log-detail')].map(node => JSON.parse(node.textContent)) })`);
+    evidence.browser = await runExpr('navigator.userAgent');
+
+    await waitFor(() => runExpr(`document.getElementById('projectSelect') && document.getElementById('projectSelect').length >= 1`), 'isolated project registered', 20000);
+    await runExpr(`document.getElementById('projectSelect').value = ${JSON.stringify(PROJECT_A)}; document.getElementById('projectSelect').dispatchEvent(new Event('change'))`);
+    await waitFor(() => runExpr(`document.getElementById('projectSelect').value === ${JSON.stringify(PROJECT_A)}`), 'project A selected');
+
+    // 系统状态 → 诊断 (project scope, empty search).
+    await click('#openSystem');
+    await runExpr(`document.getElementById('logsScope').value = 'project'`);
+    await click('#openLogs');
+    await waitFor(async () => {
+      const dom = JSON.parse(await readDom());
+      return dom.count === 100 && dom.records.length === 100;
+    }, 'DOM renders exactly the 100-entry first page', 20000);
+    const domPage1 = JSON.parse(await readDom());
+    const oldestInPage1 = domPage1.records.some(record => (record.message || '').includes(markerOf(0)));
+    const newestInPage1 = domPage1.records.some(record => (record.message || '').includes(markerOf(TOTAL - 1)));
+
+    // expected1 (bounded): live appends must keep the DOM capped at 100.
+    const putA = await putGoal(GOAL_BYTES.a);
+    await waitFor(async () => {
+      const dom = JSON.parse(await readDom());
+      return dom.records.some(record => record.event === GOAL_EVENT && record.context && record.context.bytes === GOAL_BYTES.a);
+    }, 'live append lands in the open dialog', 20000);
+    const putB = await putGoal(GOAL_BYTES.b);
+    const putC = await putGoal(GOAL_BYTES.c);
+    await waitFor(async () => {
+      const dom = JSON.parse(await readDom());
+      return dom.records.some(record => record.event === GOAL_EVENT && record.context && record.context.bytes === GOAL_BYTES.c);
+    }, 'all live appends received', 20000);
+    const domCapped = JSON.parse(await readDom());
+    const cappedIds = domCapped.records.map(record => record.id);
+    evidence.phases.boundedDom = {
+      page1Count: domPage1.count,
+      oldestMarkerInPage1: oldestInPage1,
+      newestMarkerInPage1: newestInPage1,
+      liveAppends: [putA, putB, putC],
+      countAfterLiveAppends: domCapped.count,
+      cappedAt100: domCapped.count === 100,
+      domIdsUnique: new Set(cappedIds).size === cappedIds.length,
+      oldestTrimmed: !domCapped.records.some(record => (record.message || '').includes(markerOf(0))) || domCapped.count === 100,
+    };
+    if (domCapped.count !== 100) throw new Error(`DOM is not bounded at 100 after live appends: ${domCapped.count}`);
+    if (!newestInPage1) throw new Error('first page lost the newest seeded record');
+    await browser.screenshot(path.join(ARTIFACTS, 'log005-bounded-dom.png'));
+
+    // expected2 (early records still queryable) — via the real UI search.
+    await runExpr(`document.getElementById('logsSearch').value = ${JSON.stringify(markerOf(0))}`);
+    await click('#loadLogs');
+    await waitFor(async () => {
+      const dom = JSON.parse(await readDom());
+      return dom.count === 1 && dom.records.length === 1 && (dom.records[0].message || '').includes(markerOf(0));
+    }, 'UI search finds the oldest (page-2) record', 20000);
+    evidence.phases.uiOldestQuery = { found: true, marker: markerOf(0) };
+    await browser.screenshot(path.join(ARTIFACTS, 'log005-oldest-query.png'));
+
+    // Via cursor pagination (API parity with the UI's own query mechanics).
+    const page1 = await fetch(`${base}/api/logs?pageSize=100&q=&projectId=${PROJECT_A}`).then(r => r.json());
+    const page2 = await fetch(`${base}/api/logs?pageSize=100&cursor=${encodeURIComponent(page1.nextCursor)}&projectId=${PROJECT_A}`).then(r => r.json());
+    const oldestApi = [...page1.entries, ...(page2.entries || [])].filter(entry => (entry.message || '').includes(markerOf(0)));
+    evidence.phases.cursorPagination = {
+      page1Count: page1.entries.length,
+      page1NextCursor: Boolean(page1.nextCursor),
+      page2Count: (page2.entries || []).length,
+      page2HasOldest: oldestApi.length === 1,
+    };
+    if (page1.entries.length !== 100 || !page1.nextCursor) throw new Error('first page is not a full bounded page with a cursor');
+    if (oldestApi.length !== 1) throw new Error('cursor pagination lost the oldest record');
+
+    // Via export (real file re-query path).
+    const exportRes = await fetch(`${base}/api/logs/export?projectId=${PROJECT_A}`);
+    const exportText = await exportRes.text();
+    const exportRecords = exportText.trim().split('\n').filter(Boolean).map(line => JSON.parse(line));
+    const exportOldest = exportRecords.filter(record => (record.message || '').includes(markerOf(0)));
+    evidence.phases.export = {
+      status: exportRes.status,
+      contentType: exportRes.headers.get('content-type'),
+      exportedCount: exportRecords.length,
+      hasAllSeeded: exportRecords.filter(record => (record.message || '').includes(`LOG005-R-`)).length >= TOTAL,
+      oldestExactlyOnce: exportOldest.length === 1,
+    };
+    if (exportRes.status !== 200 || exportOldest.length !== 1 || evidence.phases.export.hasAllSeeded === false) throw new Error('export lost early records');
+
+    // Disk truth.
+    const day = localDay();
+    const projectFile = path.join(fixture.dataDir, 'logs', 'projects', PROJECT_A, `${day}.jsonl`);
+    const diskRecords = fs.readFileSync(projectFile, 'utf8').trim().split('\n').filter(Boolean).map(line => JSON.parse(line));
+    const diskOldest = diskRecords.filter(record => (record.message || '').includes(markerOf(0)));
+    evidence.phases.disk = {
+      diskCount: diskRecords.length,
+      diskSeededCount: diskRecords.filter(record => (record.message || '').includes('LOG005-R-')).length,
+      oldestExactlyOnceOnDisk: diskOldest.length === 1,
+    };
+    if (diskRecords.filter(record => (record.message || '').includes('LOG005-R-')).length !== TOTAL) throw new Error('disk does not hold every seeded record');
+    if (diskOldest.length !== 1) throw new Error('disk lost or duplicated the oldest record');
+
+    if (browser.exceptions.length) throw new Error(`browser exceptions: ${JSON.stringify(browser.exceptions)}`);
+    evidence.verdict = { 'expected1 DOM有界(≤100)': 'PASS', 'expected2 早期记录仍可查询': 'PASS' };
+    console.log('LOG-005 PASS');
+    process.exitCode = 0;
+  } catch (error) {
+    evidence.verdict = { failed: String((error && error.stack) || error) };
+    try {
+      if (browser) {
+        evidence.debugDom = JSON.parse(await browser.evaluate(`JSON.stringify({ dialogOpen: document.getElementById('logsDialog').open, entries: document.querySelectorAll('#logsContent .log-entry').length, search: document.getElementById('logsSearch').value })`));
+        evidence.debugConsoleErrors = browser.consoleErrors;
+      }
+      if (proxy) evidence.debugProxy = proxy.state.snapshot();
+    } catch {}
+    process.exitCode = 1;
+    console.error(`LOG-005 FAIL: ${error.message}`);
+  } finally {
+    evidence.finishedAt = new Date().toISOString();
+    try { if (browser) await browser.screenshot(path.join(ARTIFACTS, 'log005-final.png')); } catch {}
+    fs.mkdirSync(ARTIFACTS, { recursive: true });
+    fs.writeFileSync(path.join(ARTIFACTS, 'log005-evidence.json'), JSON.stringify(evidence, null, 2) + '\n');
+    try { await browser?.close(); } finally { try { if (proxy) await proxy.close(); } finally { try { await server.cleanup(); } finally { fixture.cleanup(); } } }
+    lane.cleanup();
+  }
+}
+
+main();

package/_site/_test/parallel-logging-acceptance-log006-test.js

@@ -0,0 +1,214 @@
+'use strict';
+// P-LOG-ACCEPTANCE-01 LOG-006 acceptance driver (real product page in a real
+// browser against an isolated managed instance).
+//
+// Case (qa-autopilot/config/test-cases.json LOG-006, P0):
+//   steps:    使用完全虚构的 canary 密钥（嵌套 error/context），验证写入、
+//             查询、导出全链路脱敏。
+//   expected: 1) 写入路径：磁盘 JSONL 不含 canary 明文。
+//             2) 查询与导出路径（API + 真实 UI DOM）：不含 canary 明文，
+//                敏感位置显示 [REDACTED]。
+//
+// Canary discipline: every canary is a fully fictional random string prefixed
+// 'pkz-canary-'. Evidence records only sha256 prefixes, never raw canaries.
+// Redaction under test is the real product path: write-time normalizeRecord
+// (key-name pattern), query-time and export-time re-redaction, and the real
+// diagnostics UI rendering the redacted JSON.
+
+const fs = require('node:fs');
+const path = require('node:path');
+const crypto = require('node:crypto');
+
+// Portable isolation (P-QA-LOG-INTEGRATION-5025): the temp root comes from
+// PK_TEST_TEMP_ROOT or os.tmpdir() and must live outside the source tree;
+// HOME/APPDATA/LOCALAPPDATA/TEMP/CODEX_HOME/CLAUDE_CONFIG_DIR and the dual
+// product data roots are redirected before any other module is loaded.
+const { installLoggingTestEnv, resolveEvidenceDir } = require('./helpers/parallel-logging-integration-5025-env');
+const lane = installLoggingTestEnv({ caseId: 'LOG-006', prefix: 'log006' });
+const laneTmp = lane.laneTmp;
+
+const { spawnServer } = require('./helpers/spawn-server');
+const { findChrome } = require('./helpers/find-chrome');
+const { launchCdpBrowser, waitFor } = require('./helpers/cdp-browser');
+const freePort = require('./helpers/free-port');
+const { createLoggingAcceptanceFixture, writeProjectLogs } = require('./helpers/parallel-logging-acceptance-fixture');
+const { createObservationProxy } = require('./helpers/parallel-logging-acceptance-proxy');
+// The logger names its day files by LOCAL day; the disk assertions must use
+// the same clock, not the UTC day (a UTC+8 machine runs 00:00-08:00 on the
+// previous UTC date).
+const { localDay } = require('../lib/structured-logger');
+
+const ROOT = path.resolve(__dirname, '../..');
+const ARTIFACTS = resolveEvidenceDir(path.resolve(ROOT, 'qa-autopilot/artifacts/parallel-20261023/logging-acceptance-r1/evidence/log006'));
+
+const PROJECT_A = 'project-log006-alpha';
+const run = crypto.randomBytes(6).toString('hex');
+const MARK = `LOG006-REDACT-${run}`;
+const CANARY = {
+  apiKey: `pkz-canary-apikey-${run}-KQ7`,
+  clientSecret: `pkz-canary-clientsecret-${run}-W21`,
+  refreshToken: `pkz-canary-refreshtoken-${run}-ZX9`,
+  authorization: `pkz-canary-authorization-${run}-AA3`,
+  bearer: `pkz-canary-bearer-${run}-BB4`,
+  urlToken: `pkz-canary-urltoken-${run}-CC5`,
+  errorBearer: `pkz-canary-errbearer-${run}-DD6`,
+  password: `pkz-canary-password-${run}-EE7`,
+};
+const canaryHashes = Object.fromEntries(Object.entries(CANARY).map(([name, value]) => [name, crypto.createHash('sha256').update(value).digest('hex').slice(0, 16)]));
+
+async function main() {
+  fs.mkdirSync(ARTIFACTS, { recursive: true });
+  const evidence = { caseId: 'LOG-006', startedAt: new Date().toISOString(), marker: MARK, canarySha256Prefixes: canaryHashes, phases: {} };
+  const canaryValues = Object.values(CANARY);
+  const leakedCanaries = text => canaryValues.filter(canary => String(text).includes(canary));
+
+  const fixture = await createLoggingAcceptanceFixture({
+    caseId: 'log006',
+    projects: [{ projectId: PROJECT_A, displayName: 'LOG006甲项目' }],
+  });
+  const plainError = new Error(`auth failed for Bearer ${CANARY.errorBearer}`);
+  await writeProjectLogs(fixture.logger, PROJECT_A, [
+    {
+      level: 'info',
+      event: 'log006.redact.keys',
+      message: `${MARK} 键名模式脱敏记录`,
+      operationId: `op-log006-keys-${run}`,
+      context: {
+        apiKey: CANARY.apiKey,
+        clientSecret: CANARY.clientSecret,
+        refreshToken: CANARY.refreshToken,
+        nested: { authorization: CANARY.authorization, note: '普通字段' },
+      },
+    },
+    {
+      level: 'warn',
+      event: 'log006.redact.string',
+      message: `${MARK} 字符串值脱敏记录`,
+      operationId: `op-log006-string-${run}`,
+      context: {
+        tokenText: `Bearer ${CANARY.bearer}`,
+        callbackUrl: `https://example.test/cb?token=${CANARY.urlToken}`,
+        plain: '普通值',
+      },
+    },
+    {
+      level: 'error',
+      event: 'log006.redact.error',
+      message: `${MARK} error 序列化脱敏记录`,
+      operationId: `op-log006-error-${run}`,
+      context: { password: CANARY.password },
+      error: plainError,
+    },
+  ]);
+  await fixture.logger.close();
+
+  const port = await freePort();
+  const proxyPort = await freePort();
+  const base = `http://127.0.0.1:${port}`;
+  const server = spawnServer({ root: ROOT, port, dataDir: fixture.dataDir, tag: 'log006', stdio: 'ignore' });
+  let browser;
+  let proxy;
+  try {
+    await waitFor(async () => { try { return (await fetch(`${base}/api/health`)).ok; } catch { return false; } }, 'isolated web shell', 20000);
+    proxy = await createObservationProxy({ targetPort: port, port: proxyPort });
+    evidence.server = { pid: server.child.pid, port, proxyPort, dataDir: fixture.dataDir };
+
+    // expected1 (write path): raw disk JSONL never contains a canary.
+    const day = localDay();
+    const projectFile = path.join(fixture.dataDir, 'logs', 'projects', PROJECT_A, `${day}.jsonl`);
+    const diskRaw = fs.readFileSync(projectFile, 'utf8');
+    const diskLeak = leakedCanaries(diskRaw);
+    const diskRecords = diskRaw.trim().split('\n').filter(Boolean).map(line => JSON.parse(line));
+    const redactedRecordCount = diskRecords.filter(record => JSON.stringify(record).includes('[REDACTED]')).length;
+    evidence.phases.diskWrite = {
+      diskRecordCount: diskRecords.length,
+      diskLeakedCanaries: diskLeak.length,
+      recordsWithRedactedPlaceholder: redactedRecordCount,
+      redactedKeySample: (() => { const record = diskRecords.find(r => r.event === 'log006.redact.keys'); return record ? { apiKey: record.context && record.context.apiKey, nestedAuthorization: record.context && record.context.nested && record.context.nested.authorization } : null; })(),
+    };
+    if (diskLeak.length) throw new Error(`write path leaked canaries to disk: ${diskLeak.join(', ')}`);
+    if (redactedRecordCount < 3) throw new Error('write path did not redact every canary-bearing record');
+
+    // Query path (API parity before the UI step).
+    const getQuery = await fetch(`${base}/api/logs?pageSize=100&q=${encodeURIComponent(MARK)}&projectId=${PROJECT_A}`).then(r => r.json());
+    const getLeak = leakedCanaries(JSON.stringify(getQuery));
+    evidence.phases.queryApi = {
+      entryCount: (getQuery.entries || []).length,
+      leakedCanaries: getLeak.length,
+      redactedPlaceholdersPerEntry: (getQuery.entries || []).map(entry => (JSON.stringify(entry).match(/\[REDACTED\]/g) || []).length),
+    };
+    if ((getQuery.entries || []).length !== 3) throw new Error('canary records missing from the query path');
+    if (getLeak.length) throw new Error(`query path leaked canaries: ${getLeak.join(', ')}`);
+    if (evidence.phases.queryApi.redactedPlaceholdersPerEntry.some(count => count < 1)) throw new Error('query path returned unredacted sensitive fields');
+
+    // Real UI: open the diagnostics dialog and search the marker.
+    browser = await launchCdpBrowser({ chrome: findChrome(), profileDir: path.join(laneTmp, 'browser'), url: proxy.url, width: 1440, height: 900 });
+    const runExpr = expression => browser.evaluate(expression);
+    const click = selector => runExpr(`document.querySelector(${JSON.stringify(selector)}).click()`);
+    const readDom = () => runExpr(`JSON.stringify({ count: document.querySelectorAll('#logsContent .log-entry').length, records: [...document.querySelectorAll('#logsContent .log-detail')].map(node => JSON.parse(node.textContent)), dialogText: document.getElementById('logsDialog').textContent })`);
+    evidence.browser = await runExpr('navigator.userAgent');
+
+    await waitFor(() => runExpr(`document.getElementById('projectSelect') && document.getElementById('projectSelect').length >= 1`), 'isolated project registered', 20000);
+    await runExpr(`document.getElementById('projectSelect').value = ${JSON.stringify(PROJECT_A)}; document.getElementById('projectSelect').dispatchEvent(new Event('change'))`);
+    await waitFor(() => runExpr(`document.getElementById('projectSelect').value === ${JSON.stringify(PROJECT_A)}`), 'project A selected');
+    await click('#openSystem');
+    await runExpr(`document.getElementById('logsScope').value = 'project'; document.getElementById('logsSearch').value = ${JSON.stringify(MARK)}`);
+    await click('#openLogs');
+    await waitFor(async () => {
+      const dom = JSON.parse(await readDom());
+      return dom.count === 3 && dom.records.length === 3;
+    }, 'UI search renders the 3 canary records', 20000);
+    const domRedact = JSON.parse(await readDom());
+    const domLeak = leakedCanaries(domRedact.dialogText);
+    evidence.phases.uiDom = {
+      domEntryCount: domRedact.count,
+      leakedCanariesInDialog: domLeak.length,
+      redactedPlaceholdersPerRecord: domRedact.records.map(record => (JSON.stringify(record).match(/\[REDACTED\]/g) || []).length),
+      apiKeyFieldInDom: domRedact.records.find(r => r.event === 'log006.redact.keys')?.context?.apiKey,
+    };
+    if (domLeak.length) throw new Error(`UI leaked canaries into the DOM: ${domLeak.join(', ')}`);
+    if (evidence.phases.uiDom.redactedPlaceholdersPerRecord.some(count => count < 1)) throw new Error('UI rendered unredacted sensitive fields');
+    if (evidence.phases.uiDom.apiKeyFieldInDom !== '[REDACTED]') throw new Error('UI apiKey field is not the redaction placeholder');
+    await browser.screenshot(path.join(ARTIFACTS, 'log006-ui-redacted.png'));
+
+    // Export path: the real export file must be redacted end to end.
+    const exportRes = await fetch(`${base}/api/logs/export?q=${encodeURIComponent(MARK)}&projectId=${PROJECT_A}`);
+    const exportText = await exportRes.text();
+    const exportLeak = leakedCanaries(exportText);
+    const exportRecords = exportText.trim().split('\n').filter(Boolean).map(line => JSON.parse(line));
+    evidence.phases.export = {
+      status: exportRes.status,
+      exportedCount: exportRecords.length,
+      leakedCanaries: exportLeak.length,
+      redactedPlaceholdersPerRecord: exportRecords.map(record => (JSON.stringify(record).match(/\[REDACTED\]/g) || []).length),
+    };
+    if (exportRes.status !== 200 || exportRecords.length !== 3) throw new Error('export path lost canary records');
+    if (exportLeak.length) throw new Error(`export path leaked canaries: ${exportLeak.join(', ')}`);
+    if (evidence.phases.export.redactedPlaceholdersPerRecord.some(count => count < 1)) throw new Error('export path returned unredacted sensitive fields');
+
+    if (browser.exceptions.length) throw new Error(`browser exceptions: ${JSON.stringify(browser.exceptions)}`);
+    evidence.verdict = { 'expected1 写入路径磁盘无canary明文': 'PASS', 'expected2 查询/导出/API/UI全脱敏': 'PASS' };
+    console.log('LOG-006 PASS');
+    process.exitCode = 0;
+  } catch (error) {
+    evidence.verdict = { failed: String((error && error.stack) || error) };
+    try {
+      if (browser) {
+        evidence.debugDom = JSON.parse(await browser.evaluate(`JSON.stringify({ dialogOpen: document.getElementById('logsDialog').open, entries: document.querySelectorAll('#logsContent .log-entry').length })`));
+        evidence.debugConsoleErrors = browser.consoleErrors;
+      }
+      if (proxy) evidence.debugProxy = proxy.state.snapshot();
+    } catch {}
+    process.exitCode = 1;
+    console.error(`LOG-006 FAIL: ${error.message}`);
+  } finally {
+    evidence.finishedAt = new Date().toISOString();
+    try { if (browser) await browser.screenshot(path.join(ARTIFACTS, 'log006-final.png')); } catch {}
+    fs.mkdirSync(ARTIFACTS, { recursive: true });
+    fs.writeFileSync(path.join(ARTIFACTS, 'log006-evidence.json'), JSON.stringify(evidence, null, 2) + '\n');
+    try { await browser?.close(); } finally { try { if (proxy) await proxy.close(); } finally { try { await server.cleanup(); } finally { fixture.cleanup(); } } }
+    lane.cleanup();
+  }
+}
+
+main();

package/_site/_test/parallel-logging-acceptance-log007-test.js

@@ -0,0 +1,223 @@
+'use strict';
+// P-LOG-ACCEPTANCE-01 LOG-007 acceptance driver (real product page in a real
+// browser against an isolated managed instance).
+//
+// Case (qa-autopilot/config/test-cases.json LOG-007, P1):
+//   steps:    分别核对API日志级别、时间、component字段与当前UI控件。
+//   expected: 1) API支持不等于UI已提供控件（如实记录差异）。
+//             2) README与DOM差异记录而不造按钮。
+//
+// What this driver does NOT do: invent level/time/component controls. The
+// real dialog DOM is inventoried; the real API filter surface is probed with
+// fixture records; the README claims are hashed and diffed against the DOM
+// inventory and the logger source. Differences are recorded, not patched.
+
+const fs = require('node:fs');
+const path = require('node:path');
+const crypto = require('node:crypto');
+
+// Portable isolation (P-QA-LOG-INTEGRATION-5025): the temp root comes from
+// PK_TEST_TEMP_ROOT or os.tmpdir() and must live outside the source tree;
+// HOME/APPDATA/LOCALAPPDATA/TEMP/CODEX_HOME/CLAUDE_CONFIG_DIR and the dual
+// product data roots are redirected before any other module is loaded.
+const { installLoggingTestEnv, resolveEvidenceDir } = require('./helpers/parallel-logging-integration-5025-env');
+const lane = installLoggingTestEnv({ caseId: 'LOG-007', prefix: 'log007' });
+const laneTmp = lane.laneTmp;
+
+const { spawnServer } = require('./helpers/spawn-server');
+const { findChrome } = require('./helpers/find-chrome');
+const { launchCdpBrowser, waitFor } = require('./helpers/cdp-browser');
+const freePort = require('./helpers/free-port');
+const { createLoggingAcceptanceFixture, writeProjectLogs } = require('./helpers/parallel-logging-acceptance-fixture');
+const { createObservationProxy } = require('./helpers/parallel-logging-acceptance-proxy');
+// The API filters from/to are compared against the record's LOCAL day
+// (LogRepository.matches recomputes localDay(record.ts)). The day probes are
+// anchored to the record ts the server itself echoes — never to a second
+// clock — so day boundaries and machine zones cannot desynchronize them.
+const { localDay } = require('../lib/structured-logger');
+
+const ROOT = path.resolve(__dirname, '../..');
+const ARTIFACTS = resolveEvidenceDir(path.resolve(ROOT, 'qa-autopilot/artifacts/parallel-20261023/logging-acceptance-r1/evidence/log007'));
+
+const PROJECT_A = 'project-log007-alpha';
+const run = crypto.randomBytes(6).toString('hex');
+const sha256 = file => crypto.createHash('sha256').update(fs.readFileSync(file)).digest('hex');
+
+async function main() {
+  fs.mkdirSync(ARTIFACTS, { recursive: true });
+  const evidence = { caseId: 'LOG-007', startedAt: new Date().toISOString(), run, phases: {} };
+
+  // Fixture records engineered so every API filter has an exact expected set.
+  // groupEarly and groupLate are separated by a real wall-clock gap so from/to
+  // windows split them deterministically.
+  const early = [
+    { level: 'info', event: `log007.early.info`, component: 'log007-comp-a', message: `LOG007-EARLY-INFO-${run} 早组信息`, operationId: `op-log007-early-info-${run}`, commitSha: 'a'.repeat(40) },
+    { level: 'warn', event: `log007.early.warn`, component: 'log007-comp-b', message: `LOG007-EARLY-WARN-${run} 早组警告`, operationId: `op-log007-early-warn-${run}`, commitSha: 'b'.repeat(40) },
+  ];
+  const late = [
+    { level: 'warn', event: `log007.late.warn`, component: 'log007-comp-b', message: `LOG007-LATE-WARN-${run} 晚组警告`, operationId: `op-log007-late-warn-${run}`, commitSha: 'c'.repeat(40) },
+    { level: 'error', event: `log007.late.error`, component: 'log007-comp-c', message: `LOG007-LATE-ERROR-${run} 晚组错误`, operationId: `op-log007-late-error-${run}`, commitSha: 'd'.repeat(40) },
+  ];
+
+  const fixture = await createLoggingAcceptanceFixture({
+    caseId: 'log007',
+    projects: [{ projectId: PROJECT_A, displayName: 'LOG007甲项目' }],
+  });
+  await writeProjectLogs(fixture.logger, PROJECT_A, early);
+  await writeProjectLogs(fixture.logger, PROJECT_A, late);
+  await fixture.logger.close();
+
+  const port = await freePort();
+  const proxyPort = await freePort();
+  const base = `http://127.0.0.1:${port}`;
+  const server = spawnServer({ root: ROOT, port, dataDir: fixture.dataDir, tag: 'log007', stdio: 'ignore' });
+  let browser;
+  let proxy;
+  try {
+    await waitFor(async () => { try { return (await fetch(`${base}/api/health`)).ok; } catch { return false; } }, 'isolated web shell', 20000);
+    proxy = await createObservationProxy({ targetPort: port, port: proxyPort });
+    evidence.server = { pid: server.child.pid, port, proxyPort, dataDir: fixture.dataDir };
+
+    // API filter surface (real server, exact expected sets).
+    const query = async params => {
+      const res = await fetch(`${base}/api/logs?${params}`);
+      const body = await res.json();
+      return { status: res.status, count: (body.entries || []).length, events: (body.entries || []).map(entry => entry.event).sort(), levels: [...new Set((body.entries || []).map(entry => entry.level))], entries: body.entries || [] };
+    };
+    const apiAll = await query(`pageSize=100&projectId=${PROJECT_A}`);
+    const apiWarn = await query(`pageSize=100&projectId=${PROJECT_A}&levels=warn`);
+    const apiError = await query(`pageSize=100&projectId=${PROJECT_A}&levels=error`);
+    const apiComponent = await query(`pageSize=100&projectId=${PROJECT_A}&component=log007-comp-b`);
+    // from/to are local-day strings by design (LogRepository.matches compares
+    // localDay(record.ts)). The day windows are anchored to the records the
+    // server itself echoed (never a second clock, never now±24h) and moved by
+    // pure day-string arithmetic. The live server ALSO writes project-scoped
+    // startup records (bridge_consumer.identity_backfilled lands in the same
+    // day file ~0.2-1s after health), so a bare count===4 is a race against
+    // the server's own async writes — the R7 CI failure on both Linux jobs.
+    // The actual contract: every entry of a from=X&to=X window carries
+    // localDay(ts)===X, and the four fixture records appear in exactly their
+    // own day's window.
+    const fixtureEvents = [...early, ...late].map(record => record.event);
+    const fixtureDay = localDay(apiError.entries[0].ts);
+    const shiftDay = (day, delta) => new Date(Date.UTC(Number(day.slice(0, 4)), Number(day.slice(5, 7)) - 1, Number(day.slice(8, 10)) + delta)).toISOString().slice(0, 10);
+    const nextDay = shiftDay(fixtureDay, 1);
+    const prevDay = shiftDay(fixtureDay, -1);
+    const apiFromToday = await query(`pageSize=100&projectId=${PROJECT_A}&from=${fixtureDay}&to=${fixtureDay}`);
+    const apiFromTomorrow = await query(`pageSize=100&projectId=${PROJECT_A}&from=${nextDay}&to=${nextDay}`);
+    const apiToYesterday = await query(`pageSize=100&projectId=${PROJECT_A}&from=${prevDay}&to=${prevDay}`);
+    const apiEvent = await query(`pageSize=100&projectId=${PROJECT_A}&event=log007.late.error`);
+    const apiOperation = await query(`pageSize=100&projectId=${PROJECT_A}&operationId=op-log007-early-warn-${run}`);
+    const apiCommit = await query(`pageSize=100&projectId=${PROJECT_A}&commitSha=${'d'.repeat(40)}`);
+    const apiFullTextMarker = await query(`pageSize=100&projectId=${PROJECT_A}&q=${encodeURIComponent(`LOG007-EARLY-WARN-${run}`)}`);
+    evidence.phases.apiFilters = { apiAll, apiWarn, apiError, apiComponent, apiEvent, apiOperation, apiCommit, apiFullTextMarker };
+    evidence.phases.apiDayWindows = {
+      fixtureDay, nextDay, prevDay,
+      today: { count: apiFromToday.count, events: apiFromToday.events, nonFixtureRecords: apiFromToday.entries.filter(entry => !fixtureEvents.includes(entry.event)).map(entry => ({ event: entry.event, component: entry.component, ts: entry.ts })) },
+      tomorrow: { count: apiFromTomorrow.count, events: apiFromTomorrow.events },
+      yesterday: { count: apiToYesterday.count, events: apiToYesterday.events },
+    };
+    const everyEntryOnDay = (result, day) => result.entries.every(entry => localDay(entry.ts) === day);
+    const containsAllEvents = (result, events) => events.every(event => result.events.includes(event));
+    const excludesFixtureEvents = result => result.entries.every(entry => !fixtureEvents.includes(entry.event));
+    const apiSupported = {
+      levels: apiWarn.count === 2 && apiWarn.levels.every(level => level === 'warn') && apiError.count === 1,
+      component: apiComponent.count === 2 && apiComponent.events.filter(event => event.endsWith('warn')).length === 2,
+      timeDayGranularity: apiFromToday.count >= fixtureEvents.length
+        && containsAllEvents(apiFromToday, fixtureEvents)
+        && everyEntryOnDay(apiFromToday, fixtureDay)
+        && excludesFixtureEvents(apiFromTomorrow) && everyEntryOnDay(apiFromTomorrow, nextDay)
+        && excludesFixtureEvents(apiToYesterday) && everyEntryOnDay(apiToYesterday, prevDay),
+      event: apiEvent.count === 1,
+      operationId: apiOperation.count === 1,
+      commitSha: apiCommit.count === 1,
+      fullText: apiFullTextMarker.count === 1,
+    };
+    // component events check: both warn records share comp-b.
+    apiSupported.component = apiComponent.count === 2 && apiComponent.events.filter(event => event.endsWith('warn')).length === 2;
+    evidence.phases.apiSupported = apiSupported;
+
+    // Real UI DOM inventory: every control that actually exists.
+    browser = await launchCdpBrowser({ chrome: findChrome(), profileDir: path.join(laneTmp, 'browser'), url: proxy.url, width: 1440, height: 900 });
+    const runExpr = expression => browser.evaluate(expression);
+    const click = selector => runExpr(`document.querySelector(${JSON.stringify(selector)}).click()`);
+    evidence.browser = await runExpr('navigator.userAgent');
+    await waitFor(() => runExpr(`document.getElementById('projectSelect') && document.getElementById('projectSelect').length >= 1`), 'isolated project registered', 20000);
+    await runExpr(`document.getElementById('projectSelect').value = ${JSON.stringify(PROJECT_A)}; document.getElementById('projectSelect').dispatchEvent(new Event('change'))`);
+    await waitFor(() => runExpr(`document.getElementById('projectSelect').value === ${JSON.stringify(PROJECT_A)}`), 'project A selected');
+    await click('#openSystem');
+    await click('#openLogs');
+    await waitFor(() => runExpr(`document.getElementById('logsDialog').open === true && document.querySelectorAll('#logsContent .log-entry').length >= 4`), 'diagnostics dialog rendered', 20000);
+    const domInventory = JSON.parse(await runExpr(`JSON.stringify({
+      controls: [...document.querySelectorAll('#logsDialog button, #logsDialog input, #logsDialog select, #logsDialog textarea')].map(node => ({ tag: node.tagName.toLowerCase(), id: node.id || null, type: node.getAttribute('type'), ariaLabel: node.getAttribute('aria-label'), text: (node.textContent || '').trim().slice(0, 24) })),
+      statusText: document.getElementById('logsStatus').textContent,
+      searchPlaceholder: document.getElementById('logsSearch').placeholder,
+      scopeOptions: [...document.getElementById('logsScope').options].map(option => ({ value: option.value, text: option.textContent })),
+    })`));
+    evidence.phases.domInventory = domInventory;
+    const controls = domInventory.controls;
+    const ids = controls.map(control => control.id).filter(Boolean);
+    const uiHasOnly = { scope: ids.includes('logsScope'), search: ids.includes('logsSearch'), load: ids.includes('loadLogs'), export: ids.includes('exportLogs') };
+    const banned = /level|级别|time|时间|component|组件|event|事件|commit/i;
+    const extraFilterControls = controls.filter(control => control.id !== 'logsScope' && control.id !== 'logsSearch' && control.id !== 'loadLogs' && control.id !== 'exportLogs' && !(control.tag === 'button' && !control.id && (control.text === '×' || control.ariaLabel === '关闭')));
+    evidence.phases.uiControlSurface = {
+      uiHasOnly,
+      unexpectedFilterControls: extraFilterControls,
+      anyControlMentionsBannedFilter: controls.filter(control => banned.test([control.id, control.ariaLabel, control.text, control.searchPlaceholder || ''].join(' '))).map(control => control.id || control.text),
+    };
+    // The one input's own placeholder names its full-text nature.
+    evidence.phases.uiControlSurface.searchPlaceholder = domInventory.searchPlaceholder;
+    await browser.screenshot(path.join(ARTIFACTS, 'log007-dom-inventory.png'));
+
+    // README vs DOM/source difference record (read-only; never patched here).
+    const readmePath = path.join(ROOT, 'docs', 'README.zh-CN.md');
+    const readmeHash = sha256(readmePath);
+    const readmeLines = fs.readFileSync(readmePath, 'utf8').split('\n');
+    const claimLines = readmeLines.slice(170, 181).map((text, offset) => ({ line: offset + 171, text: text.trim() })).filter(entry => entry.text);
+    const loggerSource = fs.readFileSync(path.join(ROOT, '_site', 'lib', 'structured-logger.js'), 'utf8');
+    const productSourceHash = sha256(path.join(ROOT, 'ui', 'product.js'));
+    evidence.phases.readmeVsReality = {
+      readmeSha256: readmeHash,
+      uiProductSha256: productSourceHash,
+      claimLines,
+      loggerHas: {
+        segmentRotation: /segment|rotat/i.test(loggerSource),
+        retentionEnforcement: /retentionDays|prune[A-Z_]|\bdeleteOld|cleanupOld/i.test(loggerSource),
+        totalSizePolicy: /maxTotalSize|enforceQuota/i.test(loggerSource),
+      },
+      domOffers: { scope: true, fullText: true, level: false, time: false, component: false, event: false, commitSha: false, pause: false },
+      apiOffers: apiSupported,
+    };
+
+    if (browser.exceptions.length) throw new Error(`browser exceptions: ${JSON.stringify(browser.exceptions)}`);
+    const expected1 = apiSupported.levels && apiSupported.component && apiSupported.timeDayGranularity && apiSupported.event && apiSupported.operationId && apiSupported.commitSha && uiHasOnly.scope && uiHasOnly.search && extraFilterControls.length === 0;
+    const expected2 = claimLines.length > 0 && extraFilterControls.length === 0;
+    evidence.verdict = {
+      'expected1 API支持而UI未提供控件(差异已记录)': expected1 ? 'PASS' : 'FAIL',
+      'expected2 README与DOM差异已记录且未造按钮': expected2 ? 'PASS' : 'FAIL',
+    };
+    if (!expected1 || !expected2) throw new Error(`difference recording failed: ${JSON.stringify({ apiSupported, uiHasOnly, extraFilterControls: extraFilterControls.length })}`);
+    console.log('LOG-007 PASS');
+    process.exitCode = 0;
+  } catch (error) {
+    evidence.verdict = { failed: String((error && error.stack) || error) };
+    try {
+      if (browser) {
+        evidence.debugDom = JSON.parse(await browser.evaluate(`JSON.stringify({ dialogOpen: document.getElementById('logsDialog').open, entries: document.querySelectorAll('#logsContent .log-entry').length })`));
+        evidence.debugConsoleErrors = browser.consoleErrors;
+      }
+      if (proxy) evidence.debugProxy = proxy.state.snapshot();
+    } catch {}
+    process.exitCode = 1;
+    console.error(`LOG-007 FAIL: ${error.message}`);
+  } finally {
+    evidence.finishedAt = new Date().toISOString();
+    try { if (browser) await browser.screenshot(path.join(ARTIFACTS, 'log007-final.png')); } catch {}
+    fs.mkdirSync(ARTIFACTS, { recursive: true });
+    fs.writeFileSync(path.join(ARTIFACTS, 'log007-evidence.json'), JSON.stringify(evidence, null, 2) + '\n');
+    try { await browser?.close(); } finally { try { if (proxy) await proxy.close(); } finally { try { await server.cleanup(); } finally { fixture.cleanup(); } } }
+    lane.cleanup();
+  }
+}
+
+main();