@tom2012/cc-web 2026.4.22-a → 2026.4.22-c

package/backend/dist/logger.js

@@ -0,0 +1,355 @@
+"use strict";
+/*
+ * ccweb 结构化日志（pino + pino-roll + ALS）
+ *
+ * === 红线（hard rules；违反视同引入安全 bug） ===
+ *   1. PTY 字节流（input 或 output）永不入日志，无论截断、preview、还是 hex。
+ *      terminal-manager.writeRaw / xterm output 都在此范围。理由：用户在 Claude TUI
+ *      粘贴的可能是 API key / token / 密码，PTY 字节流是"用户秘密污染"的。
+ *   2. 聊天消息 body 永不整段入日志；仅 { len, preview: text.slice(0, 80) }。
+ *   3. 文件内容永不入日志；仅 { path, size }。
+ *   4. REDACT_KEYS 白名单外的可疑字段按 "宁愿 redact 不冒险" 处理。
+ *
+ * === 用法 ===
+ *   启动时：  await initLogger(); installFatalHandlers();
+ *   模块：    const log = modLogger('terminal'); log.info({ projectId }, 'started');
+ *   HTTP:     als.run({ reqId, user }, () => next())  —— middleware 里一行，下游自动带
+ *   子进程:   子进程 runId 由调用方生成并塞进 mixin（见 sync / update 模块）
+ *   退出:     SIGTERM 走 flushLogger() + server.close() + process.exit(0)
+ *             uncaught 异常由 installFatalHandlers 接管，保证 rollStream.flushSync 后才退
+ *
+ * === 运行期 toggle ===
+ *   kill -USR1 $(cat ~/.ccweb/ccweb.pid)   在 info / debug 之间切换级别，无需重启
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.als = void 0;
+exports.runWithContext = runWithContext;
+exports.initLogger = initLogger;
+exports.getLogger = getLogger;
+exports.modLogger = modLogger;
+exports.installFatalHandlers = installFatalHandlers;
+exports.flushLogger = flushLogger;
+const pino_1 = __importDefault(require("pino"));
+const pino_roll_1 = __importDefault(require("pino-roll"));
+const async_hooks_1 = require("async_hooks");
+const path = __importStar(require("path"));
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+// ────────────────── 常量 ──────────────────
+const LOGS_DIR = path.join(os.homedir(), '.ccweb', 'logs');
+const VERSION = (() => {
+    try {
+        const pkg = JSON.parse(fs.readFileSync(path.join(__dirname, '../../package.json'), 'utf-8'));
+        return `v${pkg.version}`;
+    }
+    catch {
+        return 'v?';
+    }
+})();
+const DEFAULT_MAX_MB = parseInt(process.env.CCWEB_LOG_MAX_MB_PER_DAY || '20', 10);
+const DEFAULT_RETAIN = parseInt(process.env.CCWEB_LOG_RETAIN_DAYS || '7', 10);
+const DEFAULT_LEVEL = process.env.CCWEB_LOG_LEVEL || 'info';
+/** Fields whose values are always replaced with '***'. */
+const REDACT_KEYS = [
+    'password',
+    'passwordHash',
+    'token',
+    'jwtSecret',
+    'approvalSecret',
+    'authorization',
+    'apiKey',
+    'SSHPASS',
+    'hubToken',
+    'publishToken',
+    'oauthToken',
+    'accessToken',
+    'refreshToken',
+    '*.password',
+    '*.token',
+    '*.secret',
+    'req.headers.authorization',
+    'req.headers.cookie',
+];
+/**
+ * Regex redactors applied to every string value we encounter — AND to nested
+ * err.message / err.stack (pino's built-in err serializer unpacks Error into
+ * `{type, message, stack}`, which bypasses both REDACT_KEYS and the shallow
+ * top-level sweep unless we handle err explicitly).
+ *
+ * Threshold for hex redaction is 64 chars (SHA-256 / generated 32-byte hex
+ * secrets). 40-hex would false-positive on git SHAs and unlucky directory
+ * names (reviewer C2).
+ *
+ * GitHub PAT prefixes cover ghp_/gho_/ghu_/ghs_/ghr_ (legacy) and
+ * github_pat_ (fine-grained). skillhub routes user PATs through this
+ * logger when ops throw (reviewer N6 — zero-cost defence).
+ */
+const REGEX_REDACTORS = [
+    [/Bearer [A-Za-z0-9._\-]+/g, 'Bearer ***'],
+    [/npm_[A-Za-z0-9]{20,}/g, 'npm_***'],
+    [/\b(ghp_|gho_|ghu_|ghs_|ghr_|github_pat_)[A-Za-z0-9_]{20,}\b/g, 'gh_***'],
+    [/\b[a-f0-9]{64,}\b/gi, 'hex:***'],
+];
+function redactString(s) {
+    let out = s;
+    for (const [re, rep] of REGEX_REDACTORS)
+        out = out.replace(re, rep);
+    return out;
+}
+/**
+ * Recursively redact message/stack along the `err.cause` chain.
+ *
+ * Reviewer Critical #1: pino's err serializer expands `{cause}` into its own
+ * nested `{type, message, stack}` object in the final output; the parent's
+ * `err.stack` also contains a "Caused by:" block with the child stack joined.
+ * Single-level redact (obj.err.message + obj.err.stack) misses cause.message
+ * / cause.stack as separate fields. Depth cap 3 prevents infinite loops on
+ * self-referential causes and caps CPU on malicious err graphs.
+ */
+function redactErrDeep(err, depth = 0) {
+    if (!err || typeof err !== 'object' || depth > 3)
+        return;
+    const e = err;
+    if (typeof e.message === 'string')
+        e.message = redactString(e.message);
+    if (typeof e.stack === 'string')
+        e.stack = redactString(e.stack);
+    if (e.cause)
+        redactErrDeep(e.cause, depth + 1);
+}
+exports.als = new async_hooks_1.AsyncLocalStorage();
+function runWithContext(ctx, fn) {
+    return exports.als.run(ctx, fn);
+}
+// ────────────────── Logger 实例（延迟初始化）──────────────────
+let logger = null;
+// pino-roll returns a SonicBoom stream; we hold it for flushSync on fatal exit.
+let rollStream = null;
+function ensureDir() {
+    try {
+        fs.mkdirSync(LOGS_DIR, { mode: 0o700, recursive: true });
+        // chmod even if dir existed (recreated between versions)
+        fs.chmodSync(LOGS_DIR, 0o700);
+    }
+    catch {
+        /* best effort */
+    }
+}
+async function initLogger() {
+    if (logger)
+        return logger;
+    ensureDir();
+    rollStream = await (0, pino_roll_1.default)({
+        file: path.join(LOGS_DIR, 'ccweb'),
+        dateFormat: 'yyyy-MM-dd',
+        extension: '.log',
+        frequency: 'daily',
+        size: `${DEFAULT_MAX_MB}m`,
+        limit: { count: DEFAULT_RETAIN },
+        mkdir: true,
+        // sonic-boom passthrough: create log files 0600 (owner-only)
+        mode: 0o600,
+    });
+    logger = (0, pino_1.default)({
+        level: DEFAULT_LEVEL,
+        base: { ver: VERSION, pid: process.pid },
+        timestamp: pino_1.default.stdTimeFunctions.isoTime,
+        messageKey: 'msg',
+        errorKey: 'err',
+        formatters: {
+            level: (label) => ({ lvl: label }),
+            log: (obj) => {
+                // ALS injection: HTTP/WS handlers put reqId/user into ALS;
+                // any log event downstream in the same async chain auto-tags.
+                const ctx = exports.als.getStore();
+                if (ctx) {
+                    if (ctx.reqId && !obj.reqId)
+                        obj.reqId = ctx.reqId;
+                    if (ctx.user && !obj.user)
+                        obj.user = ctx.user;
+                    if (ctx.projectId && !obj.projectId)
+                        obj.projectId = ctx.projectId;
+                    if (ctx.wsId && !obj.wsId)
+                        obj.wsId = ctx.wsId;
+                    if (ctx.runId && !obj.runId)
+                        obj.runId = ctx.runId;
+                }
+                // Shallow regex sweep over string values.
+                for (const k of Object.keys(obj)) {
+                    const v = obj[k];
+                    if (typeof v === 'string')
+                        obj[k] = redactString(v);
+                }
+                // Deep sweep on serialized Error along the `cause` chain.
+                // pino's err serializer expands nested err.cause into its own
+                // {type, message, stack} sub-object; the parent stack also
+                // contains a "Caused by:" block. Single-level redact misses
+                // cause.message / cause.stack as separate fields.
+                // Reviewer C1 + new: undici (node fetch) errors surface TLS /
+                // DNS cause with stack occasionally bearing cert fingerprints /
+                // cookie headers / token fragments. Depth 3 caps self-ref loops.
+                if (obj.err)
+                    redactErrDeep(obj.err);
+                return obj;
+            },
+        },
+        redact: {
+            paths: REDACT_KEYS,
+            censor: '***',
+        },
+    }, rollStream);
+    // Runtime level toggle without restart.
+    process.on('SIGUSR1', () => {
+        if (!logger)
+            return;
+        logger.level = logger.level === 'debug' ? 'info' : 'debug';
+        logger.info({ mod: 'server', level: logger.level }, 'log level toggled');
+    });
+    return logger;
+}
+/** Get the base logger. Caller MUST initLogger() first. */
+function getLogger() {
+    if (!logger)
+        throw new Error('logger not initialized — call initLogger() first');
+    return logger;
+}
+/**
+ * Module-scoped child logger.
+ *
+ * Safe to call at module top level: returns a lazy Proxy that defers the
+ * actual `logger.child({ mod })` call until the first `.info/.warn/...`.
+ * This lets any module do `const log = modLogger('x')` regardless of
+ * import order relative to `initLogger()`.
+ *
+ * If called after init, child is created eagerly (no Proxy cost).
+ *
+ * Pre-init calls fall back to a console-shim — bootstrap-phase events
+ * still surface via daemon stdout → `~/.ccweb/ccweb.log` (plan §11). Once
+ * pino is ready, the Proxy swaps to the real child for the next call.
+ */
+function modLogger(mod) {
+    if (logger)
+        return logger.child({ mod });
+    // Pre-init fallback: shim mapping pino-style calls to console.
+    // Never throws — bootstrap code does not break if it logs before pino.
+    const bootstrapShim = {
+        fatal: (obj, msg) => console.error(`[boot ${mod}] fatal`, msg ?? '', obj),
+        error: (obj, msg) => console.error(`[boot ${mod}] ${msg ?? ''}`, obj),
+        warn: (obj, msg) => console.warn(`[boot ${mod}] ${msg ?? ''}`, obj),
+        info: (obj, msg) => console.log(`[boot ${mod}] ${msg ?? ''}`, obj),
+        debug: () => { },
+        trace: () => { },
+        child: () => bootstrapShim,
+    };
+    let cached = null;
+    const resolve = () => {
+        if (cached)
+            return cached;
+        if (!logger)
+            return bootstrapShim; // still pre-init — route to console
+        cached = logger.child({ mod });
+        return cached;
+    };
+    // Proxy every access through resolve(). Bind functions back to the target
+    // so `this` stays correct on both shim and real child.
+    return new Proxy({}, {
+        get(_target, prop) {
+            const target = resolve();
+            const val = target[prop];
+            return typeof val === 'function' ? val.bind(target) : val;
+        },
+        set(_target, prop, value) {
+            const target = resolve();
+            target[prop] = value;
+            return true;
+        },
+    });
+}
+// ────────────────── Fatal handlers ──────────────────
+/**
+ * Install process-level uncaughtException / unhandledRejection handlers
+ * that write the fatal record, then call flushSync on the pino-roll stream
+ * (sonic-boom) before exit. Without the flushSync, sonic-boom's async buffer
+ * would drop the very stack trace we most need to investigate
+ * (reviewer Critical #1).
+ *
+ * Note: pino v10 removed `pino.final` — the recommended pattern is direct
+ * flushSync on the sonic-boom destination (pino-roll returns a SonicBoom).
+ */
+function installFatalHandlers() {
+    const base = logger;
+    if (!base)
+        throw new Error('logger not initialized');
+    const handler = (err, origin) => {
+        try {
+            base.fatal({ err, origin, mod: 'server' }, 'fatal — process exiting');
+        }
+        catch {
+            /* don't let logging fail stop exit */
+        }
+        try {
+            if (rollStream && typeof rollStream.flushSync === 'function') {
+                rollStream.flushSync();
+            }
+        }
+        catch {
+            /* flush best-effort */
+        }
+        process.exit(1);
+    };
+    process.on('uncaughtException', (err) => handler(err, 'uncaughtException'));
+    process.on('unhandledRejection', (reason) => {
+        const err = reason instanceof Error ? reason : new Error(String(reason));
+        handler(err, 'unhandledRejection');
+    });
+}
+/**
+ * Graceful flush — for SIGTERM / planned shutdown. Non-fatal path.
+ * Returns a promise that resolves after pino has flushed.
+ */
+function flushLogger() {
+    return new Promise((resolve) => {
+        if (!logger) {
+            resolve();
+            return;
+        }
+        logger.flush(() => resolve());
+    });
+}
+//# sourceMappingURL=logger.js.map

package/backend/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4GH,wCAEC;AAkBD,gCAqEC;AAGD,8BAGC;AAgBD,8BAoCC;AAcD,oDAyBC;AAMD,kCAQC;AAlTD,gDAAwB;AACxB,0DAAiC;AACjC,6CAAgD;AAChD,2CAA6B;AAC7B,uCAAyB;AACzB,uCAAyB;AAEzB,2CAA2C;AAE3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAE3D,MAAM,OAAO,GAAW,CAAC,GAAG,EAAE;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE,OAAO,CAAC,CACrE,CAAC;QACF,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AAEL,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;AAClF,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;AAC9E,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,MAAM,CAAC;AAE5D,0DAA0D;AAC1D,MAAM,WAAW,GAAa;IAC5B,UAAU;IACV,cAAc;IACd,OAAO;IACP,WAAW;IACX,gBAAgB;IAChB,eAAe;IACf,QAAQ;IACR,SAAS;IACT,UAAU;IACV,cAAc;IACd,YAAY;IACZ,aAAa;IACb,cAAc;IACd,YAAY;IACZ,SAAS;IACT,UAAU;IACV,2BAA2B;IAC3B,oBAAoB;CACrB,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,eAAe,GAA4B;IAC/C,CAAC,0BAA0B,EAAE,YAAY,CAAC;IAC1C,CAAC,uBAAuB,EAAE,SAAS,CAAC;IACpC,CAAC,8DAA8D,EAAE,QAAQ,CAAC;IAC1E,CAAC,qBAAqB,EAAE,SAAS,CAAC;CACnC,CAAC;AAEF,SAAS,YAAY,CAAC,CAAS;IAC7B,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,eAAe;QAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACpE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,aAAa,CAAC,GAAY,EAAE,KAAK,GAAG,CAAC;IAC5C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO;IACzD,MAAM,CAAC,GAAG,GAA8D,CAAC;IACzE,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAAE,CAAC,CAAC,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAAE,CAAC,CAAC,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACjE,IAAI,CAAC,CAAC,KAAK;QAAE,aAAa,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;AACjD,CAAC;AAaY,QAAA,GAAG,GAAG,IAAI,+BAAiB,EAAc,CAAC;AAEvD,SAAgB,cAAc,CAAI,GAAe,EAAE,EAAW;IAC5D,OAAO,WAAG,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,wDAAwD;AAExD,IAAI,MAAM,GAAuB,IAAI,CAAC;AACtC,gFAAgF;AAChF,IAAI,UAAU,GAAiE,IAAI,CAAC;AAEpF,SAAS,SAAS;IAChB,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,yDAAyD;QACzD,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,UAAU;IAC9B,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,SAAS,EAAE,CAAC;IAEZ,UAAU,GAAG,MAAM,IAAA,mBAAQ,EAAC;QAC1B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC;QAClC,UAAU,EAAE,YAAY;QACxB,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,OAAO;QAClB,IAAI,EAAE,GAAG,cAAc,GAAG;QAC1B,KAAK,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE;QAChC,KAAK,EAAE,IAAI;QACX,6DAA6D;QAC7D,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IAEH,MAAM,GAAG,IAAA,cAAI,EACX;QACE,KAAK,EAAE,aAAa;QACpB,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QACxC,SAAS,EAAE,cAAI,CAAC,gBAAgB,CAAC,OAAO;QACxC,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,KAAK;QACf,UAAU,EAAE;YACV,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;YAClC,GAAG,EAAE,CAAC,GAA4B,EAAE,EAAE;gBACpC,2DAA2D;gBAC3D,8DAA8D;gBAC9D,MAAM,GAAG,GAAG,WAAG,CAAC,QAAQ,EAAE,CAAC;gBAC3B,IAAI,GAAG,EAAE,CAAC;oBACR,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,KAAK;wBAAE,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;oBACnD,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI;wBAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;oBAC/C,IAAI,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,SAAS;wBAAE,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;oBACnE,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI;wBAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;oBAC/C,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,KAAK;wBAAE,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;gBACrD,CAAC;gBACD,0CAA0C;gBAC1C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;oBACjB,IAAI,OAAO,CAAC,KAAK,QAAQ;wBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;gBACtD,CAAC;gBACD,0DAA0D;gBAC1D,8DAA8D;gBAC9D,2DAA2D;gBAC3D,4DAA4D;gBAC5D,kDAAkD;gBAClD,8DAA8D;gBAC9D,gEAAgE;gBAChE,iEAAiE;gBACjE,IAAI,GAAG,CAAC,GAAG;oBAAE,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACpC,OAAO,GAAG,CAAC;YACb,CAAC;SACF;QACD,MAAM,EAAE;YACN,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,KAAK;SACd;KACF,EACD,UAAU,CACX,CAAC;IAEF,wCAAwC;IACxC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,mBAAmB,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2DAA2D;AAC3D,SAAgB,SAAS;IACvB,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACjF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAgB,SAAS,CAAC,GAAW;IACnC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAEzC,+DAA+D;IAC/D,uEAAuE;IACvE,MAAM,aAAa,GAAG;QACpB,KAAK,EAAE,CAAC,GAAY,EAAE,GAAY,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,SAAS,EAAE,GAAG,IAAI,EAAE,EAAE,GAAG,CAAC;QAC3F,KAAK,EAAE,CAAC,GAAY,EAAE,GAAY,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,KAAK,GAAG,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC;QACvF,IAAI,EAAG,CAAC,GAAY,EAAE,GAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAE,SAAS,GAAG,KAAK,GAAG,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC;QACvF,IAAI,EAAG,CAAC,GAAY,EAAE,GAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAG,SAAS,GAAG,KAAK,GAAG,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC;QACvF,KAAK,EAAE,GAAG,EAAE,GAAyC,CAAC;QACtD,KAAK,EAAE,GAAG,EAAE,GAA6B,CAAC;QAC1C,KAAK,EAAE,GAAG,EAAE,CAAC,aAAa;KACD,CAAC;IAE5B,IAAI,MAAM,GAAuB,IAAI,CAAC;IACtC,MAAM,OAAO,GAAG,GAAgB,EAAE;QAChC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM;YAAE,OAAO,aAAa,CAAC,CAAC,oCAAoC;QACvE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,0EAA0E;IAC1E,uDAAuD;IACvD,OAAO,IAAI,KAAK,CAAC,EAAiB,EAAE;QAClC,GAAG,CAAC,OAAO,EAAE,IAAqB;YAChC,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC;YACzB,MAAM,GAAG,GAAI,MAAsD,CAAC,IAAI,CAAC,CAAC;YAC1E,OAAO,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAE,GAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC1E,CAAC;QACD,GAAG,CAAC,OAAO,EAAE,IAAqB,EAAE,KAAc;YAChD,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC;YACxB,MAAsD,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;YACtE,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,uDAAuD;AAEvD;;;;;;;;;GASG;AACH,SAAgB,oBAAoB;IAClC,MAAM,IAAI,GAAG,MAAM,CAAC;IACpB,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAErD,MAAM,OAAO,GAAG,CAAC,GAAU,EAAE,MAAc,EAAQ,EAAE;QACnD,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,yBAAyB,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;QACD,IAAI,CAAC;YACH,IAAI,UAAU,IAAI,OAAO,UAAU,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;gBAC7D,UAAU,CAAC,SAAS,EAAE,CAAC;YACzB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC5E,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAe,EAAE,EAAE;QACnD,MAAM,GAAG,GAAG,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAgB,WAAW;IACzB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/backend/dist/memory-prompts.d.ts

@@ -1,3 +1,4 @@
+import type { CliTool } from './types';
 /**
  * Memory Prompts — filesystem-backed prompt snippets located at
  * `<project>/.ccweb/memory/*.md`, toggleable into CLAUDE.md with
@@ -26,7 +27,7 @@ export interface MemoryListResult {
     items: MemoryPromptItem[];
     claudeMdLineCount: number;
 }
-export declare function listMemoryPrompts(folderPath: string): MemoryListResult;
+export declare function listMemoryPrompts(folderPath: string, cliTool?: CliTool): MemoryListResult;
 export type ToggleAction = 'insert' | 'remove';
 export interface ToggleResult {
     ok: boolean;
@@ -35,5 +36,5 @@ export interface ToggleResult {
     reason?: string;
     claudeMdLineCount?: number;
 }
-export declare function toggleMemoryPrompt(folderPath: string, filename: string, action: ToggleAction): ToggleResult;
+export declare function toggleMemoryPrompt(folderPath: string, filename: string, action: ToggleAction, cliTool?: CliTool): ToggleResult;
 //# sourceMappingURL=memory-prompts.d.ts.map

package/backend/dist/memory-prompts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory-prompts.d.ts","sourceRoot":"","sources":["../src/memory-prompts.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AA+BD;6EAC6E;AAC7E,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGnD;AAID,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,gBAAgB,CA8BtE;AAID,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE/C,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,YAAY,GACnB,YAAY,CAiEd"}
+{"version":3,"file":"memory-prompts.d.ts","sourceRoot":"","sources":["../src/memory-prompts.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AA+BD;6EAC6E;AAC7E,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGnD;AAID,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,gBAAgB,CA8BzF;AAID,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE/C,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,YAAY,EACpB,OAAO,CAAC,EAAE,OAAO,GAChB,YAAY,CAiEd"}

package/backend/dist/memory-prompts.js

@@ -70,17 +70,17 @@ function lineCountOf(content) {
         return 0;
     return content.replace(/\n$/, '').split('\n').length;
 }
-function listMemoryPrompts(folderPath) {
+function listMemoryPrompts(folderPath, cliTool) {
     const dir = memoryDir(folderPath);
     let files = [];
     try {
         files = fs.readdirSync(dir).filter((f) => f.endsWith('.md'));
     }
     catch {
-        // dir missing is normal — still return CLAUDE.md line count
-        return { items: [], claudeMdLineCount: lineCountOf((0, agent_prompts_1.readClaudeMd)(folderPath)) };
+        // dir missing is normal — still return instructions file line count
+        return { items: [], claudeMdLineCount: lineCountOf((0, agent_prompts_1.readClaudeMd)(folderPath, cliTool)) };
     }
-    const claudeMd = (0, agent_prompts_1.readClaudeMd)(folderPath);
+    const claudeMd = (0, agent_prompts_1.readClaudeMd)(folderPath, cliTool);
     const out = [];
     for (const filename of files) {
         const name = filename.replace(/\.md$/, '');
@@ -109,7 +109,7 @@ function listMemoryPrompts(folderPath) {
     out.sort((a, b) => a.name.localeCompare(b.name));
     return { items: out, claudeMdLineCount: lineCountOf(claudeMd) };
 }
-function toggleMemoryPrompt(folderPath, filename, action) {
+function toggleMemoryPrompt(folderPath, filename, action, cliTool) {
     // Guard filename — reject anything that could escape memory/ via the name.
     if (!filename || filename.includes('/') || filename.includes('\\') || filename.includes('\0')) {
         return { ok: false, changed: false, inserted: false, reason: 'invalid-filename' };
@@ -119,7 +119,7 @@ function toggleMemoryPrompt(folderPath, filename, action) {
     }
     const name = filename.replace(/\.md$/, '');
     const filePath = path.join(memoryDir(folderPath), filename);
-    let claudeMd = (0, agent_prompts_1.readClaudeMd)(folderPath);
+    let claudeMd = (0, agent_prompts_1.readClaudeMd)(folderPath, cliTool);
     const re = blockRegex(name);
     const currentlyInserted = re.test(claudeMd);
     if (action === 'remove') {
@@ -129,7 +129,7 @@ function toggleMemoryPrompt(folderPath, filename, action) {
         claudeMd = claudeMd.replace(re, '\n\n');
         // Collapse any runs of 3+ blank lines left behind into 2
         claudeMd = claudeMd.replace(/\n{3,}/g, '\n\n');
-        (0, agent_prompts_1.writeClaudeMd)(folderPath, claudeMd);
+        (0, agent_prompts_1.writeClaudeMd)(folderPath, claudeMd, cliTool);
         return { ok: true, changed: true, inserted: false, claudeMdLineCount: lineCountOf(claudeMd) };
     }
     // Insert (or refresh in place).  Symlink guard mirrors `listMemoryPrompts`
@@ -165,13 +165,13 @@ function toggleMemoryPrompt(folderPath, filename, action) {
         // have been edited since last insert).
         claudeMd = claudeMd.replace(re, `\n\n${block}\n\n`);
         claudeMd = claudeMd.replace(/\n{3,}/g, '\n\n');
-        (0, agent_prompts_1.writeClaudeMd)(folderPath, claudeMd);
+        (0, agent_prompts_1.writeClaudeMd)(folderPath, claudeMd, cliTool);
         return { ok: true, changed: true, inserted: true, reason: 'refreshed', claudeMdLineCount: lineCountOf(claudeMd) };
     }
-    // Append with separating blank line if CLAUDE.md doesn't already end with one
+    // Append with separating blank line if instructions file doesn't already end with one
     const sep = claudeMd.length === 0 ? '' : claudeMd.endsWith('\n\n') ? '' : claudeMd.endsWith('\n') ? '\n' : '\n\n';
     claudeMd = claudeMd + sep + block + '\n';
-    (0, agent_prompts_1.writeClaudeMd)(folderPath, claudeMd);
+    (0, agent_prompts_1.writeClaudeMd)(folderPath, claudeMd, cliTool);
     return { ok: true, changed: true, inserted: true, claudeMdLineCount: lineCountOf(claudeMd) };
 }
 //# sourceMappingURL=memory-prompts.js.map

package/backend/dist/memory-prompts.js.map

@@ -1 +1 @@
-{"version":3,"file":"memory-prompts.js","sourceRoot":"","sources":["../src/memory-prompts.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0DA,kCAGC;AASD,8CA8BC;AAcD,gDAqEC;AAvLD,uCAAyB;AACzB,2CAA6B;AAC7B,mDAA8D;AAyB9D,SAAS,SAAS,CAAC,UAAkB;IACnC,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED;2EAC2E;AAC3E,SAAS,WAAW,CAAC,IAAY,IAAY,OAAO,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;AACtE,SAAS,SAAS,CAAC,IAAY,IAAY,OAAO,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;AAElE,gEAAgE;AAChE,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED;;yBAEyB;AACzB,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzB,wEAAwE;IACxE,gDAAgD;IAChD,OAAO,IAAI,MAAM,CAAC,cAAc,CAAC,mBAAmB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;IAC7D,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnC,CAAC;AAED;6EAC6E;AAC7E,SAAgB,WAAW,CAAC,OAAe;IACzC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;AACvD,CAAC;AASD,SAAgB,iBAAiB,CAAC,UAAkB;IAClD,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;QAC5D,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,iBAAiB,EAAE,WAAW,CAAC,IAAA,4BAAY,EAAC,UAAU,CAAC,CAAC,EAAE,CAAC;IACjF,CAAC;IACD,MAAM,QAAQ,GAAG,IAAA,4BAAY,EAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC1C,2EAA2E;QAC3E,IAAI,IAA0B,CAAC;QAC/B,IAAI,CAAC;YAAC,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,SAAS;QACtC,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnD,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YAC7B,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC,CAAC,mDAAmD,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,iBAAiB,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;AAClE,CAAC;AAcD,SAAgB,kBAAkB,CAChC,UAAkB,EAClB,QAAgB,EAChB,MAAoB;IAEpB,2EAA2E;IAC3E,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC1E,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;IAE5D,IAAI,QAAQ,GAAG,IAAA,4BAAY,EAAC,UAAU,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,iBAAiB,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAE5C,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxH,CAAC;QACD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACxC,yDAAyD;QACzD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAA,6BAAa,EAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACpC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;IAChG,CAAC;IAED,2EAA2E;IAC3E,yEAAyE;IACzE,4EAA4E;IAC5E,2EAA2E;IAC3E,IAAI,IAA0B,CAAC;IAC/B,IAAI,CAAC;QAAC,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAClF,CAAC;IACD,qEAAqE;IACrE,yEAAyE;IACzE,sEAAsE;IACtE,qEAAqE;IACrE,gDAAgD;IAChD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;IAEtE,IAAI,iBAAiB,EAAE,CAAC;QACtB,uEAAuE;QACvE,uCAAuC;QACvC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,KAAK,MAAM,CAAC,CAAC;QACpD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAA,6BAAa,EAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACpC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;IACpH,CAAC;IAED,8EAA8E;IAC9E,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IAClH,QAAQ,GAAG,QAAQ,GAAG,GAAG,GAAG,KAAK,GAAG,IAAI,CAAC;IACzC,IAAA,6BAAa,EAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACpC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC/F,CAAC"}
+{"version":3,"file":"memory-prompts.js","sourceRoot":"","sources":["../src/memory-prompts.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2DA,kCAGC;AASD,8CA8BC;AAcD,gDAsEC;AAzLD,uCAAyB;AACzB,2CAA6B;AAC7B,mDAA8D;AA0B9D,SAAS,SAAS,CAAC,UAAkB;IACnC,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED;2EAC2E;AAC3E,SAAS,WAAW,CAAC,IAAY,IAAY,OAAO,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;AACtE,SAAS,SAAS,CAAC,IAAY,IAAY,OAAO,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;AAElE,gEAAgE;AAChE,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED;;yBAEyB;AACzB,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzB,wEAAwE;IACxE,gDAAgD;IAChD,OAAO,IAAI,MAAM,CAAC,cAAc,CAAC,mBAAmB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;IAC7D,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnC,CAAC;AAED;6EAC6E;AAC7E,SAAgB,WAAW,CAAC,OAAe;IACzC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;AACvD,CAAC;AASD,SAAgB,iBAAiB,CAAC,UAAkB,EAAE,OAAiB;IACrE,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,iBAAiB,EAAE,WAAW,CAAC,IAAA,4BAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,QAAQ,GAAG,IAAA,4BAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC1C,2EAA2E;QAC3E,IAAI,IAA0B,CAAC;QAC/B,IAAI,CAAC;YAAC,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,SAAS;QACtC,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnD,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YAC7B,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC,CAAC,mDAAmD,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,iBAAiB,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;AAClE,CAAC;AAcD,SAAgB,kBAAkB,CAChC,UAAkB,EAClB,QAAgB,EAChB,MAAoB,EACpB,OAAiB;IAEjB,2EAA2E;IAC3E,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC1E,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;IAE5D,IAAI,QAAQ,GAAG,IAAA,4BAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,iBAAiB,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAE5C,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxH,CAAC;QACD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACxC,yDAAyD;QACzD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAA,6BAAa,EAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;IAChG,CAAC;IAED,2EAA2E;IAC3E,yEAAyE;IACzE,4EAA4E;IAC5E,2EAA2E;IAC3E,IAAI,IAA0B,CAAC;IAC/B,IAAI,CAAC;QAAC,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAClF,CAAC;IACD,qEAAqE;IACrE,yEAAyE;IACzE,sEAAsE;IACtE,qEAAqE;IACrE,gDAAgD;IAChD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;IAEtE,IAAI,iBAAiB,EAAE,CAAC;QACtB,uEAAuE;QACvE,uCAAuC;QACvC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,KAAK,MAAM,CAAC,CAAC;QACpD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAA,6BAAa,EAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;IACpH,CAAC;IAED,sFAAsF;IACtF,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IAClH,QAAQ,GAAG,QAAQ,GAAG,GAAG,GAAG,KAAK,GAAG,IAAI,CAAC;IACzC,IAAA,6BAAa,EAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC/F,CAAC"}

package/backend/dist/middleware/request-log.d.ts

@@ -0,0 +1,3 @@
+import type { Request, Response, NextFunction } from 'express';
+export declare function requestLog(req: Request, res: Response, next: NextFunction): void;
+//# sourceMappingURL=request-log.d.ts.map

package/backend/dist/middleware/request-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-log.d.ts","sourceRoot":"","sources":["../../src/middleware/request-log.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AA4B/D,wBAAgB,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAgChF"}

package/backend/dist/middleware/request-log.js

@@ -0,0 +1,97 @@
+"use strict";
+/*
+ * Express middleware：生成 reqId，放入 AsyncLocalStorage，log HTTP 请求摘要。
+ *
+ * 目的：让 HTTP → WS → PTY 的因果链可通过 reqId 串起来（reviewer Important #7）。
+ * 下游任何 logger 调用（包括 AsyncLocalStorage 跨越的 setImmediate / await）
+ * 自动带上 reqId，无需显式传参。
+ *
+ * 不打印 body / query / headers——只 method/path/status/duration/user。
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requestLog = requestLog;
+const crypto = __importStar(require("crypto"));
+const logger_1 = require("../logger");
+// modLogger returns a lazy Proxy when called before initLogger, so
+// module-top-level use is safe.
+const log = (0, logger_1.modLogger)('server');
+/**
+ * 噪声路径：不值得每次都记一条。使用 req.originalUrl 的完整路径匹配
+ * （在 path 被 Express sub-router mutate 前快照）。
+ */
+const SILENCED = new RegExp([
+    '^/health$',
+    '^/api/health$',
+    '^/api/auth/local-token$', // localhost 预认证，每次挂载
+    '^/api/tool/skills/check', // 前端高频轮询
+    '^/api/user-prefs/language', // 每个页面加载都拉一次
+    '^/api/claude/usage', // dashboard 轮询
+    '^/manifest\\.json$',
+    '^/favicon',
+    '^/assets/', // 前端静态资源
+    '^/plugin-sdk/',
+    '^/$', // SPA 路由回 index.html，刷新噪声大
+].join('|'));
+function requestLog(req, res, next) {
+    const reqId = crypto.randomUUID().slice(0, 8);
+    const start = Date.now();
+    // Snapshot originalUrl (immutable); req.path is mutated by Express sub-routers
+    // so by the time res.on('finish') fires it only holds the post-mount segment.
+    const fullPath = (req.originalUrl || req.url).split('?')[0];
+    // Reviewer I1: `requestLog` runs BEFORE `authMiddleware`, so `req.user` is
+    // always undefined at middleware entry. We pass a MUTABLE context object
+    // into ALS — `authMiddleware` (and anywhere else that identifies the user)
+    // can populate `ctx.user` later, and downstream log events see it via the
+    // same object reference. The http summary below reads user at finish time.
+    const ctx = { reqId };
+    logger_1.als.run(ctx, () => {
+        res.on('finish', () => {
+            if (SILENCED.test(fullPath))
+                return;
+            // Pull user as set by any downstream auth middleware.
+            const userAtEnd = req.user?.username;
+            if (userAtEnd && !ctx.user)
+                ctx.user = userAtEnd;
+            const ms = Date.now() - start;
+            const level = res.statusCode >= 500 ? 'error' :
+                res.statusCode >= 400 ? 'warn' :
+                    'info';
+            log[level]({ method: req.method, path: fullPath, status: res.statusCode, ms, user: userAtEnd }, 'http');
+        });
+        next();
+    });
+}
+//# sourceMappingURL=request-log.js.map

package/backend/dist/middleware/request-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-log.js","sourceRoot":"","sources":["../../src/middleware/request-log.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BH,gCAgCC;AA3DD,+CAAiC;AACjC,sCAA2C;AAE3C,mEAAmE;AACnE,gCAAgC;AAChC,MAAM,GAAG,GAAG,IAAA,kBAAS,EAAC,QAAQ,CAAC,CAAC;AAEhC;;;GAGG;AACH,MAAM,QAAQ,GAAG,IAAI,MAAM,CACzB;IACE,WAAW;IACX,eAAe;IACf,yBAAyB,EAAO,qBAAqB;IACrD,yBAAyB,EAAO,SAAS;IACzC,2BAA2B,EAAK,aAAa;IAC7C,oBAAoB,EAAY,eAAe;IAC/C,oBAAoB;IACpB,WAAW;IACX,WAAW,EAAqB,SAAS;IACzC,eAAe;IACf,KAAK,EAA2B,2BAA2B;CAC5D,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAC;AAEF,SAAgB,UAAU,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IACxE,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,+EAA+E;IAC/E,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5D,2EAA2E;IAC3E,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,2EAA2E;IAC3E,MAAM,GAAG,GAAqC,EAAE,KAAK,EAAE,CAAC;IAExD,YAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE;QAChB,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACpB,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,OAAO;YACpC,sDAAsD;YACtD,MAAM,SAAS,GAAI,GAAkD,CAAC,IAAI,EAAE,QAAQ,CAAC;YACrF,IAAI,SAAS,IAAI,CAAC,GAAG,CAAC,IAAI;gBAAE,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC;YACjD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YAC9B,MAAM,KAAK,GACT,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACjC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAE,CAAC;oBACjC,MAAM,CAAC;YACT,GAAG,CAAC,KAAK,CAAC,CACR,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EACnF,MAAM,CACP,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;AACL,CAAC"}

package/backend/dist/notify-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"notify-service.d.ts","sourceRoot":"","sources":["../src/notify-service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAEtC,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;CACzB;AAID,wBAAgB,eAAe,IAAI,YAAY,CAO9C;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAI3D;AAED,cAAM,aAAc,SAAQ,YAAY;IAChC,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAmC9E;AAED,eAAO,MAAM,aAAa,eAAsB,CAAC"}
+{"version":3,"file":"notify-service.d.ts","sourceRoot":"","sources":["../src/notify-service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAKtC,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;CACzB;AAID,wBAAgB,eAAe,IAAI,YAAY,CAO9C;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAI3D;AAED,cAAM,aAAc,SAAQ,YAAY;IAChC,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAmC9E;AAED,eAAO,MAAM,aAAa,eAAsB,CAAC"}

package/backend/dist/notify-service.js

@@ -40,6 +40,8 @@ const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const config_1 = require("./config");
 const events_1 = require("events");
+const logger_1 = require("./logger");
+const log = (0, logger_1.modLogger)('notify');
 const NOTIFY_CONFIG_FILE = path.join(config_1.DATA_DIR, 'notify-config.json');
 function getNotifyConfig() {
     try {
@@ -95,7 +97,7 @@ class NotifyService extends events_1.EventEmitter {
             });
         }
         catch (err) {
-            console.warn('[NotifyService] Webhook delivery failed:', err instanceof Error ? err.message : String(err));
+            log.warn({ err }, 'webhook delivery failed');
         }
     }
 }

package/backend/dist/notify-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"notify-service.js","sourceRoot":"","sources":["../src/notify-service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,0CAOC;AAED,4CAIC;AAzBD,uCAAyB;AACzB,2CAA6B;AAC7B,qCAAoC;AACpC,mCAAsC;AAOtC,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAQ,EAAE,oBAAoB,CAAC,CAAC;AAErE,SAAgB,eAAe;IAC7B,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC;YAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAiB,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IACnC,CAAC;AACH,CAAC;AAED,SAAgB,gBAAgB,CAAC,MAAoB;IACnD,MAAM,OAAO,GAAG,kBAAkB,GAAG,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IAC3D,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACpE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,aAAc,SAAQ,qBAAY;IACtC,KAAK,CAAC,gBAAgB,CAAC,SAAiB,EAAE,WAAmB;QAC3D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;QAEjD,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,UAAU;YAAE,OAAO;QACzD,4DAA4D;QAC5D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAAE,OAAO;YAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,sBAAsB;YAC5E,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,SAAS;gBAC1C,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK;gBACtC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;gBACrD,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC;gBACvC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;gBAC3B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBACzE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;gBAC/F,IAAI,KAAK,0BAA0B;gBAAE,OAAO;QAClD,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO;QAAC,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE;gBAC7B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK,EAAE,iBAAiB;oBACxB,SAAS;oBACT,WAAW;oBACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC;gBACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,0CAA0C,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC;CACF;AAEY,QAAA,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC"}
+{"version":3,"file":"notify-service.js","sourceRoot":"","sources":["../src/notify-service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAeA,0CAOC;AAED,4CAIC;AA5BD,uCAAyB;AACzB,2CAA6B;AAC7B,qCAAoC;AACpC,mCAAsC;AACtC,qCAAqC;AAErC,MAAM,GAAG,GAAG,IAAA,kBAAS,EAAC,QAAQ,CAAC,CAAC;AAOhC,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAQ,EAAE,oBAAoB,CAAC,CAAC;AAErE,SAAgB,eAAe;IAC7B,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC;YAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAiB,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IACnC,CAAC;AACH,CAAC;AAED,SAAgB,gBAAgB,CAAC,MAAoB;IACnD,MAAM,OAAO,GAAG,kBAAkB,GAAG,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IAC3D,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACpE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,aAAc,SAAQ,qBAAY;IACtC,KAAK,CAAC,gBAAgB,CAAC,SAAiB,EAAE,WAAmB;QAC3D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;QAEjD,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,UAAU;YAAE,OAAO;QACzD,4DAA4D;QAC5D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAAE,OAAO;YAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,sBAAsB;YAC5E,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,SAAS;gBAC1C,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK;gBACtC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;gBACrD,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC;gBACvC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;gBAC3B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBACzE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;gBAC/F,IAAI,KAAK,0BAA0B;gBAAE,OAAO;QAClD,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO;QAAC,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE;gBAC7B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK,EAAE,iBAAiB;oBACxB,SAAS;oBACT,WAAW;oBACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC;gBACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,yBAAyB,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;CACF;AAEY,QAAA,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC"}