@wirecat/cli-core 0.527.0 → 0.528.0

package/CHANGELOG.md

@@ -7,6 +7,18 @@ shape of this file.
 
 ## Unreleased
 
+## 0.528.0 — 01.11.2026
+
+### Added
+
+- **Every profile keeps its messenger library's warnings, and `doctor` counts the last day's.** A message the
+  library could not decrypt used to leave no trace unless the CLI's own log variable was set. `providerLogPathFor(app,
+  profile, env)` names `<state>/provider-log/<profile>.jsonl`; `openProviderLog(path)` makes it private (mode 600)
+  and keeps it under 1 MB with one older file, so an engine in another process can append to the path it is given;
+  `writeProviderWarning(path, kind, message)` appends from Node. A line is `{"time","level","kind"?,"message"}`, the
+  shape zerolog writes; `kind` is the adapter's tag. The adapter masks phone numbers, ids of people and text before
+  writing. `doctor` answers `provider_log: { path, last_day: { total, kinds } }` and checks the file is private.
+
 ## 0.527.0 — 01.11.2026
 
 ### Added

package/dist/cli/index.d.ts

@@ -23,6 +23,7 @@ export { NO_RULES, NO_TASKS, NOT_ALLOWED, ONLY_TASK, type Replied, type Replier,
 export { repliesStatePathFor } from "../replies/state.js";
 export { type CacheEvent, type DiagnosticEvent, type EventSink, providerErrorKey, type RequestEvent, renderEvent, type WarningEvent, } from "../runs/events.js";
 export { CORE_LOG_EVENTS } from "../runs/log-events.js";
+export { openProviderLog, PROVIDER_LOG_BYTES, type ProviderWarnings, providerLogPathFor, providerWarnings, writeProviderWarning, } from "../runs/provider-log.js";
 export { crashOf, type Recording, type RecordingOptions, recorded, startRecording, wasSettled, } from "../runs/recording.js";
 export { findRun, KEEP_RUNS_FOR_DAYS, listRuns, pruneRuns, type RunContext, type RunMetadata, readEvents, runsDirFor, runtime, startRun, } from "../runs/run.js";
 export { runContextOf, secretInput } from "../runs/run-context.js";

package/dist/cli/index.js

@@ -19,6 +19,7 @@ export { NO_RULES, NO_TASKS, NOT_ALLOWED, ONLY_TASK, replyTo } from "../replies/
 export { repliesStatePathFor } from "../replies/state.js";
 export { providerErrorKey, renderEvent, } from "../runs/events.js";
 export { CORE_LOG_EVENTS } from "../runs/log-events.js";
+export { openProviderLog, PROVIDER_LOG_BYTES, providerLogPathFor, providerWarnings, writeProviderWarning, } from "../runs/provider-log.js";
 export { crashOf, recorded, startRecording, wasSettled, } from "../runs/recording.js";
 export { findRun, KEEP_RUNS_FOR_DAYS, listRuns, pruneRuns, readEvents, runsDirFor, runtime, startRun, } from "../runs/run.js";
 export { runContextOf, secretInput } from "../runs/run-context.js";

package/dist/cli/messenger/doctor-command.js

@@ -5,6 +5,7 @@ import { annotate } from "@wirecat/cli-base/commands";
 import { Command } from "commander";
 import { engineStates } from "../../attachments/extract.js";
 import { providerErrorKey } from "../../runs/events.js";
+import { providerLogPathFor, providerWarnings } from "../../runs/provider-log.js";
 import { listRuns, runsDirFor, runtime } from "../../runs/run.js";
 import { FloodMemory, floodPathFor } from "../../sends/flood.js";
 import { SendJournal, sendsPathFor } from "../../sends/journal.js";
@@ -20,6 +21,7 @@ import { recalledAccount } from "./accounts.js";
 import { messengerContext } from "./context.js";
 import { privateFiles, withSqliteSidecars } from "./private-files.js";
 import { buildReport, reportFileName } from "./report.js";
+import { DAY_MS } from "./serve-members.js";
 import { storeSummary } from "./store-maintenance-command.js";
 /**
  * The state this installation is in, read from disk and **never from the messenger unless
@@ -121,6 +123,7 @@ const rememberedOf = (report) => report.account?.remembered ?? undefined;
  * What `doctor` answers, as data. A configuration that will not load is a field, not an exception:
  * then there is no renderer from the settings, and the caller renders with the defaults.
  */
+const providerLogState = ({ path, total, kinds }) => ({ path, last_day: { total, kinds } });
 const diagnose = async (command, messenger) => {
     const { app, provider } = messenger;
     const env = environmentOf(command).env ?? process.env;
@@ -183,8 +186,9 @@ const diagnose = async (command, messenger) => {
     const store = storePath(env);
     const sends = sendsPathFor(app, profile, env);
     const flood = floodPathFor(app, profile, env);
+    const providerLog = providerLogPathFor(app, profile, env);
     const files = privateFiles({
-        files: [...own.files, ...withSqliteSidecars(store), sends, flood],
+        files: [...own.files, ...withSqliteSidecars(store), sends, flood, providerLog],
         // A folder the owner chose with MESSAGING_STORE may rightly be shared, like the home folder itself.
         dirs: [
             ...own.dirs,
@@ -192,6 +196,7 @@ const diagnose = async (command, messenger) => {
             dirname(sends),
             dirname(flood),
             runsDirFor(app, env),
+            dirname(providerLog),
         ],
     });
     return {
@@ -209,6 +214,7 @@ const diagnose = async (command, messenger) => {
             readers: engineStates(),
             sends: sendsState(new SendJournal(sendsPathFor(app, profile, env))),
             flood: floodState(new FloodMemory(flood)),
+            provider_log: providerLogState(providerWarnings(providerLog, new Date(Date.now() - DAY_MS))),
             runs: { directory: runsDirFor(app, env), kept: listRuns(runsDirFor(app, env)).length },
             // The messenger's own block keeps the keys it gives: some of them are file paths.
             files: filesReport(files),

package/dist/runs/provider-log.d.ts

@@ -0,0 +1,22 @@
+import type { AppIdentity } from "../ports/app.js";
+/**
+ * The messenger library's warnings for one profile, always kept: a message it failed to decrypt is lost without a
+ * trace otherwise. One JSON object per line, `{"time","level","kind"?,"message"}` — the shape zerolog writes, so an
+ * engine in another process appends to the file directly. **No phone number, id of a person or message text**: the
+ * adapter or its engine masks before writing. `kind` is the adapter's tag (`decrypt`), counted by `doctor`.
+ */
+export declare const providerLogPathFor: (app: AppIdentity, profile: string, env?: NodeJS.ProcessEnv) => string;
+export declare const PROVIDER_LOG_BYTES: number;
+/**
+ * The file, private and under its cap, ready for an engine to append to. The cap is kept here rather than by the
+ * writer, because an engine in another language appends without knowing it: one older file is kept.
+ */
+export declare const openProviderLog: (path: string, maxBytes?: number) => string;
+export declare const writeProviderWarning: (path: string, kind: string, message: string, now?: Date) => void;
+export interface ProviderWarnings {
+    path: string;
+    total: number;
+    kinds: Record<string, number>;
+}
+/** Warnings since `since`, by kind; a line without one counts as `other`, a line that is not JSON is skipped. */
+export declare const providerWarnings: (path: string, since: Date) => ProviderWarnings;

package/dist/runs/provider-log.js

@@ -0,0 +1,55 @@
+import { appendFileSync, chmodSync, closeSync, existsSync, mkdirSync, openSync, readFileSync, renameSync, statSync, } from "node:fs";
+import { dirname, join } from "node:path";
+import { resolvePaths } from "@wirecat/cli-base";
+/**
+ * The messenger library's warnings for one profile, always kept: a message it failed to decrypt is lost without a
+ * trace otherwise. One JSON object per line, `{"time","level","kind"?,"message"}` — the shape zerolog writes, so an
+ * engine in another process appends to the file directly. **No phone number, id of a person or message text**: the
+ * adapter or its engine masks before writing. `kind` is the adapter's tag (`decrypt`), counted by `doctor`.
+ */
+export const providerLogPathFor = (app, profile, env = process.env) => join(resolvePaths({ appName: app.appName, prefix: app.envPrefix, env }).state, "provider-log", `${profile}.jsonl`);
+export const PROVIDER_LOG_BYTES = 1024 * 1024;
+const previousOf = (path) => path.replace(/\.jsonl$/, ".1.jsonl");
+/**
+ * The file, private and under its cap, ready for an engine to append to. The cap is kept here rather than by the
+ * writer, because an engine in another language appends without knowing it: one older file is kept.
+ */
+export const openProviderLog = (path, maxBytes = PROVIDER_LOG_BYTES) => {
+    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    if (existsSync(path) && statSync(path).size >= maxBytes)
+        renameSync(path, previousOf(path));
+    closeSync(openSync(path, "a", 0o600));
+    chmodSync(path, 0o600);
+    return path;
+};
+export const writeProviderWarning = (path, kind, message, now = new Date()) => {
+    openProviderLog(path);
+    appendFileSync(path, `${JSON.stringify({ time: now.toISOString(), level: "warn", kind, message })}\n`);
+};
+/** Warnings since `since`, by kind; a line without one counts as `other`, a line that is not JSON is skipped. */
+export const providerWarnings = (path, since) => {
+    const kinds = {};
+    let total = 0;
+    for (const file of [previousOf(path), path]) {
+        if (!existsSync(file))
+            continue;
+        for (const line of readFileSync(file, "utf8").split("\n")) {
+            if (!line)
+                continue;
+            let entry;
+            try {
+                entry = JSON.parse(line);
+            }
+            catch {
+                continue;
+            }
+            const at = typeof entry.time === "string" ? Date.parse(entry.time) : Number.NaN;
+            if (!(at >= since.getTime()))
+                continue;
+            const kind = typeof entry.kind === "string" && entry.kind ? entry.kind : "other";
+            kinds[kind] = (kinds[kind] ?? 0) + 1;
+            total++;
+        }
+    }
+    return { path, total, kinds };
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wirecat/cli-core",
-  "version": "0.527.0",
+  "version": "0.528.0",
   "description": "The messenger-neutral half of a messaging CLI: domain model, message locators, rendering, name resolution, the SQLite seam, the command skeleton and shared read commands, the send guard, run records and the message store",
   "license": "Apache-2.0",
   "author": "Viacheslav Ptsarev",