matter-server 0.5.4 → 0.5.5

package/dist/esm/MatterServer.js

@@ -13,31 +13,15 @@ import {
   MatterController,
   WebSocketControllerHandler
 } from "@matter-server/ws-controller";
-import { open } from "node:fs/promises";
 import { getCliOptions } from "./cli.js";
 import { LegacyDataWriter, loadLegacyData } from "./converter/index.js";
+import { createFileLogger } from "./file-logger.js";
 import { initializeOta } from "./ota.js";
 import { HealthHandler } from "./server/HealthHandler.js";
 import { StaticFileHandler } from "./server/StaticFileHandler.js";
 import { WebServer } from "./server/WebServer.js";
 import { MATTER_SERVER_VERSION } from "./version.js";
 import "@matter-server/custom-clusters";
-async function createFileLogger(path) {
-  const fileHandle = await open(path, "a");
-  const writer = fileHandle.createWriteStream();
-  process.on(
-    "beforeExit",
-    () => void fileHandle.close().catch((err) => err && console.error(`Failed to close log file: ${err}`))
-  );
-  return (formattedLog) => {
-    try {
-      writer.write(`${formattedLog}
-`);
-    } catch (error) {
-      console.error(`Failed to write to log file: ${error}`);
-    }
-  };
-}
 const cliOptions = getCliOptions();
 function mapLogLevel(level) {
   switch (level) {
@@ -74,12 +58,14 @@ let server;
 let config;
 let legacyData;
 let legacyDataWriter;
+let fileLoggerClose;
 async function start() {
   if (cliOptions.logFile) {
     try {
-      const fileWriter = await createFileLogger(cliOptions.logFile);
+      const fileLogger = await createFileLogger(cliOptions.logFile);
+      fileLoggerClose = fileLogger.close;
       Logger.destinations.file = LogDestination({
-        write: fileWriter,
+        write: fileLogger.write,
         level: mapLogLevel(cliOptions.logLevel),
         format: LogFormat("plain")
       });
@@ -135,7 +121,7 @@ async function start() {
     legacyServerData
   );
   if (!cliOptions.disableOta) {
-    await initializeOta(controller, cliOptions);
+    controller.commandHandler?.events.started.once(async () => await initializeOta(controller, cliOptions));
   }
   if (legacyData.serverFile && legacyData.fabricConfig) {
     legacyDataWriter = new LegacyDataWriter(env, cliOptions.storagePath, legacyData.fabricConfig);
@@ -155,6 +141,11 @@ async function start() {
     logger.info("Dashboard disabled via CLI flag");
   }
   server = new WebServer({ listenAddresses: cliOptions.listenAddress, port: cliOptions.port }, handlers);
+  if (!cliOptions.listenAddress) {
+    logger.warn(
+      `WebSocket server is listening on all network interfaces. Use --listen-address to restrict access. Ensure your environment (firewall, network) prevents unauthorized access.`
+    );
+  }
   await server.start();
 }
 async function stop() {
@@ -165,6 +156,11 @@ async function stop() {
     await legacyDataWriter.flush();
   }
   await config?.close();
+  try {
+    await fileLoggerClose?.();
+  } catch (err) {
+    console.error(`Failed to flush log file on shutdown: ${err}`);
+  }
   process.exit(0);
 }
 start().catch((err) => console.error(err));

package/dist/esm/MatterServer.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
   "sources": ["../../src/MatterServer.ts"],
-  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA;AAAA,EACI;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,OACG;AACP,SAAS,YAAY;AACrB,SAAS,qBAAmD;AAC5D,SAAS,kBAAkB,sBAAuC;AAClE,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,iBAAiB;AAC1B,SAAS,6BAA6B;AAEtC,OAAO;AAMP,eAAe,iBAAiB,MAAc;AAC1C,QAAM,aAAa,MAAM,KAAK,MAAM,GAAG;AACvC,QAAM,SAAS,WAAW,kBAAkB;AAC5C,UAAQ;AAAA,IACJ;AAAA,IACA,MAAM,KAAK,WAAW,MAAM,EAAE,MAAM,SAAO,OAAO,QAAQ,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAAA,EACvG;AAEA,SAAO,CAAC,iBAAyB;AAC7B,QAAI;AACA,aAAO,MAAM,GAAG,YAAY;AAAA,CAAI;AAAA,IACpC,SAAS,OAAO;AACZ,cAAQ,MAAM,gCAAgC,KAAK,EAAE;AAAA,IACzD;AAAA,EACJ;AACJ;AAGA,MAAM,aAAa,cAAc;AAKjC,SAAS,YAAY,OAA8B;AAC/C,UAAQ,OAAO;AAAA,IACX,KAAK;AACD,aAAO,SAAS;AAAA,IACpB,KAAK;AACD,aAAO,SAAS;AAAA,IACpB,KAAK;AACD,aAAO,SAAS;AAAA,IACpB,KAAK;AACD,aAAO,SAAS;AAAA,IACpB,KAAK;AAAA,IACL,KAAK;AACD,aAAO,SAAS;AAAA,IACpB;AACI,aAAO,SAAS;AAAA,EACxB;AACJ;AAGA,OAAO,QAAQ,YAAY,WAAW,QAAQ;AAE9C,MAAM,SAAS,OAAO,IAAI,cAAc;AAGxC,OAAO,KAAK,iBAAiB,QAAQ,KAAK,MAAM,CAAC,EAAE,KAAK,GAAG,KAAK,gBAAgB,EAAE;AAElF,MAAM,MAAM,YAAY;AAGxB,IAAI,KAAK,IAAI,gBAAgB,WAAW,WAAW;AACnD,IAAI,WAAW,qBAAqB,MAAM;AACtC,MAAI,KAAK,IAAI,cAAc,IAAI;AAC/B,MAAI,KAAK,IAAI,cAAc,WAAW,gBAAgB;AACtD,SAAO,KAAK,6BAA6B,WAAW,gBAAgB,GAAG;AAC3E;AACA,IAAI,WAAW,kBAAkB;AAC7B,MAAI,KAAK,IAAI,yBAAyB,WAAW,gBAAgB;AACrE;AAEA,IAAI;AACJ,IAAI;AACJ,IAAI;AACJ,IAAI;AACJ,IAAI;AAEJ,eAAe,QAAQ;AAEnB,MAAI,WAAW,SAAS;AACpB,QAAI;AACA,YAAM,aAAa,MAAM,iBAAiB,WAAW,OAAO;AAC5D,aAAO,aAAa,OAAO,eAAe;AAAA,QACtC,OAAO;AAAA,QACP,OAAO,YAAY,WAAW,QAAQ;AAAA,QACtC,QAAQ,UAAU,OAAO;AAAA,MAC7B,CAAC;AACD,aAAO,KAAK,yBAAyB,WAAW,OAAO,EAAE;AAAA,IAC7D,SAAS,OAAO;AACZ,aAAO,MAAM,kCAAkC,KAAK,EAAE;AAAA,IAC1D;AAAA,EACJ;AAEA,QAAM,mBAAqC;AAAA,IACvC,UAAU,WAAW;AAAA,IACrB,UAAU,WAAW;AAAA,EACzB;AAGA,eAAa,MAAM,eAAe,KAAK,WAAW,aAAa;AAAA,IAC3D,UAAU,WAAW;AAAA,IACrB,UAAU,WAAW;AAAA,EACzB,CAAC;AACD,MAAI,WAAW,OAAO;AAClB,WAAO,KAAK,sBAAsB,WAAW,KAAK,EAAE;AAAA,EACxD;AACA,MAAI,WAAW,SAAS;AACpB,UAAM,QAAkB,CAAC;AACzB,QAAI,WAAW,cAAc;AACzB,YAAM,KAAK,UAAU;AACrB,uBAAiB,SAAS,WAAW;AACrC,aAAO,MAAM,UAAU,iBAAiB,MAAM;AAAA,IAClD;AACA,QAAI,WAAW,YAAY;AACvB,YAAM,YAAY,OAAO,KAAK,WAAW,WAAW,KAAK,EAAE;AAC3D,uBAAiB,WAAW,WAAW;AACvC,YAAM,KAAK,GAAG,SAAS,UAAU;AAAA,IACrC;AACA,QAAI,WAAW,4BAA4B;AACvC,YAAM,KAAK,gBAAgB;AAC3B,uBAAiB,cAAc,WAAW;AAC1C,aAAO,MAAM,eAAe,iBAAiB,WAAW;AAAA,IAC5D;AACA,WAAO,KAAK,sBAAsB,MAAM,KAAK,IAAI,CAAC,EAAE;AAAA,EACxD;AAEA,WAAS,MAAM,cAAc,OAAO,GAAG;AAIvC,MACI,WAAW,uBAAuB,UAClC,WAAW,0BAA0B,mBACrC,OAAO,gBAAgB,iBACzB;AACE,WAAO,KAAK,2CAA2C,WAAW,qBAAqB,GAAG;AAC1F,UAAM,OAAO,IAAI,EAAE,aAAa,WAAW,sBAAsB,CAAC;AAAA,EACtE;AACA,eAAa,MAAM,iBAAiB;AAAA,IAChC;AAAA,IACA;AAAA,IACA;AAAA,MACI,kBAAkB,WAAW;AAAA,MAC7B,oBAAoB,WAAW;AAAA,MAC/B,UAAU,WAAW;AAAA,MACrB,eAAe;AAAA,IACnB;AAAA,IACA;AAAA,EACJ;AAEA,MAAI,CAAC,WAAW,YAAY;AACxB,UAAM,cAAc,YAAY,UAAU;AAAA,EAC9C;AAGA,MAAI,WAAW,cAAc,WAAW,cAAc;AAClD,uBAAmB,IAAI,iBAAiB,KAAK,WAAW,aAAa,WAAW,YAAY;AAE5F,eAAW,eAAe,OAAO,UAAU,GAAG,YAAU;AACpD,YAAM,oBAAmB,oBAAI,KAAK,GAAE,YAAY;AAChD,uBAAkB,cAAc,QAAQ,gBAAgB;AAAA,IAC5D,CAAC;AAED,eAAW,eAAe,OAAO,mBAAmB,GAAG,YAAU;AAC7D,uBAAkB,aAAa,MAAM;AAAA,IACzC,CAAC;AAAA,EACL;AAEA,QAAM,YAAY,IAAI,2BAA2B,YAAY,QAAQ,qBAAqB;AAC1F,QAAM,WAA+B,CAAC,IAAI,cAAc,SAAS,GAAG,SAAS;AAC7E,MAAI,CAAC,WAAW,kBAAkB;AAC9B,aAAS,KAAK,IAAI,kBAAkB,WAAW,cAAc,CAAC;AAAA,EAClE,OAAO;AACH,WAAO,KAAK,iCAAiC;AAAA,EACjD;AACA,WAAS,IAAI,UAAU,EAAE,iBAAiB,WAAW,eAAe,MAAM,WAAW,KAAK,GAAG,QAAQ;AAErG,QAAM,OAAO,MAAM;AACvB;AAEA,eAAe,OAAO;AAClB,QAAM,QAAQ,KAAK;AACnB,QAAM,YAAY,KAAK;AAEvB,MAAI,kBAAkB,eAAe,GAAG;AACpC,WAAO,KAAK,wCAAwC;AACpD,UAAM,iBAAiB,MAAM;AAAA,EACjC;AACA,QAAM,QAAQ,MAAM;AACpB,UAAQ,KAAK,CAAC;AAClB;AAEA,MAAM,EAAE,MAAM,SAAO,QAAQ,MAAM,GAAG,CAAC;AAEvC,QAAQ,GAAG,UAAU,MAAM,KAAK,KAAK,EAAE,MAAM,SAAO,QAAQ,MAAM,GAAG,CAAC,CAAC;AACvE,QAAQ,GAAG,WAAW,MAAM,KAAK,KAAK,EAAE,MAAM,SAAO,QAAQ,MAAM,GAAG,CAAC,CAAC;",
+  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA;AAAA,EACI;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,OACG;AACP,SAAS,qBAAmD;AAC5D,SAAS,kBAAkB,sBAAuC;AAClE,SAAS,wBAAwB;AACjC,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAC9B,SAAS,yBAAyB;AAClC,SAAS,iBAAiB;AAC1B,SAAS,6BAA6B;AAEtC,OAAO;AAGP,MAAM,aAAa,cAAc;AAKjC,SAAS,YAAY,OAA8B;AAC/C,UAAQ,OAAO;AAAA,IACX,KAAK;AACD,aAAO,SAAS;AAAA,IACpB,KAAK;AACD,aAAO,SAAS;AAAA,IACpB,KAAK;AACD,aAAO,SAAS;AAAA,IACpB,KAAK;AACD,aAAO,SAAS;AAAA,IACpB,KAAK;AAAA,IACL,KAAK;AACD,aAAO,SAAS;AAAA,IACpB;AACI,aAAO,SAAS;AAAA,EACxB;AACJ;AAGA,OAAO,QAAQ,YAAY,WAAW,QAAQ;AAE9C,MAAM,SAAS,OAAO,IAAI,cAAc;AAGxC,OAAO,KAAK,iBAAiB,QAAQ,KAAK,MAAM,CAAC,EAAE,KAAK,GAAG,KAAK,gBAAgB,EAAE;AAElF,MAAM,MAAM,YAAY;AAGxB,IAAI,KAAK,IAAI,gBAAgB,WAAW,WAAW;AACnD,IAAI,WAAW,qBAAqB,MAAM;AACtC,MAAI,KAAK,IAAI,cAAc,IAAI;AAC/B,MAAI,KAAK,IAAI,cAAc,WAAW,gBAAgB;AACtD,SAAO,KAAK,6BAA6B,WAAW,gBAAgB,GAAG;AAC3E;AACA,IAAI,WAAW,kBAAkB;AAC7B,MAAI,KAAK,IAAI,yBAAyB,WAAW,gBAAgB;AACrE;AAEA,IAAI;AACJ,IAAI;AACJ,IAAI;AACJ,IAAI;AACJ,IAAI;AACJ,IAAI;AAEJ,eAAe,QAAQ;AAEnB,MAAI,WAAW,SAAS;AACpB,QAAI;AACA,YAAM,aAAa,MAAM,iBAAiB,WAAW,OAAO;AAC5D,wBAAkB,WAAW;AAC7B,aAAO,aAAa,OAAO,eAAe;AAAA,QACtC,OAAO,WAAW;AAAA,QAClB,OAAO,YAAY,WAAW,QAAQ;AAAA,QACtC,QAAQ,UAAU,OAAO;AAAA,MAC7B,CAAC;AACD,aAAO,KAAK,yBAAyB,WAAW,OAAO,EAAE;AAAA,IAC7D,SAAS,OAAO;AACZ,aAAO,MAAM,kCAAkC,KAAK,EAAE;AAAA,IAC1D;AAAA,EACJ;AAEA,QAAM,mBAAqC;AAAA,IACvC,UAAU,WAAW;AAAA,IACrB,UAAU,WAAW;AAAA,EACzB;AAGA,eAAa,MAAM,eAAe,KAAK,WAAW,aAAa;AAAA,IAC3D,UAAU,WAAW;AAAA,IACrB,UAAU,WAAW;AAAA,EACzB,CAAC;AACD,MAAI,WAAW,OAAO;AAClB,WAAO,KAAK,sBAAsB,WAAW,KAAK,EAAE;AAAA,EACxD;AACA,MAAI,WAAW,SAAS;AACpB,UAAM,QAAkB,CAAC;AACzB,QAAI,WAAW,cAAc;AACzB,YAAM,KAAK,UAAU;AACrB,uBAAiB,SAAS,WAAW;AACrC,aAAO,MAAM,UAAU,iBAAiB,MAAM;AAAA,IAClD;AACA,QAAI,WAAW,YAAY;AACvB,YAAM,YAAY,OAAO,KAAK,WAAW,WAAW,KAAK,EAAE;AAC3D,uBAAiB,WAAW,WAAW;AACvC,YAAM,KAAK,GAAG,SAAS,UAAU;AAAA,IACrC;AACA,QAAI,WAAW,4BAA4B;AACvC,YAAM,KAAK,gBAAgB;AAC3B,uBAAiB,cAAc,WAAW;AAC1C,aAAO,MAAM,eAAe,iBAAiB,WAAW;AAAA,IAC5D;AACA,WAAO,KAAK,sBAAsB,MAAM,KAAK,IAAI,CAAC,EAAE;AAAA,EACxD;AAEA,WAAS,MAAM,cAAc,OAAO,GAAG;AAIvC,MACI,WAAW,uBAAuB,UAClC,WAAW,0BAA0B,mBACrC,OAAO,gBAAgB,iBACzB;AACE,WAAO,KAAK,2CAA2C,WAAW,qBAAqB,GAAG;AAC1F,UAAM,OAAO,IAAI,EAAE,aAAa,WAAW,sBAAsB,CAAC;AAAA,EACtE;AACA,eAAa,MAAM,iBAAiB;AAAA,IAChC;AAAA,IACA;AAAA,IACA;AAAA,MACI,kBAAkB,WAAW;AAAA,MAC7B,oBAAoB,WAAW;AAAA,MAC/B,UAAU,WAAW;AAAA,MACrB,eAAe;AAAA,IACnB;AAAA,IACA;AAAA,EACJ;AAEA,MAAI,CAAC,WAAW,YAAY;AACxB,eAAW,gBAAgB,OAAO,QAAQ,KAAK,YAAY,MAAM,cAAc,YAAY,UAAU,CAAC;AAAA,EAC1G;AAGA,MAAI,WAAW,cAAc,WAAW,cAAc;AAClD,uBAAmB,IAAI,iBAAiB,KAAK,WAAW,aAAa,WAAW,YAAY;AAE5F,eAAW,eAAe,OAAO,UAAU,GAAG,YAAU;AACpD,YAAM,oBAAmB,oBAAI,KAAK,GAAE,YAAY;AAChD,uBAAkB,cAAc,QAAQ,gBAAgB;AAAA,IAC5D,CAAC;AAED,eAAW,eAAe,OAAO,mBAAmB,GAAG,YAAU;AAC7D,uBAAkB,aAAa,MAAM;AAAA,IACzC,CAAC;AAAA,EACL;AAEA,QAAM,YAAY,IAAI,2BAA2B,YAAY,QAAQ,qBAAqB;AAC1F,QAAM,WAA+B,CAAC,IAAI,cAAc,SAAS,GAAG,SAAS;AAC7E,MAAI,CAAC,WAAW,kBAAkB;AAC9B,aAAS,KAAK,IAAI,kBAAkB,WAAW,cAAc,CAAC;AAAA,EAClE,OAAO;AACH,WAAO,KAAK,iCAAiC;AAAA,EACjD;AACA,WAAS,IAAI,UAAU,EAAE,iBAAiB,WAAW,eAAe,MAAM,WAAW,KAAK,GAAG,QAAQ;AAErG,MAAI,CAAC,WAAW,eAAe;AAC3B,WAAO;AAAA,MACH;AAAA,IACJ;AAAA,EACJ;AAEA,QAAM,OAAO,MAAM;AACvB;AAEA,eAAe,OAAO;AAClB,QAAM,QAAQ,KAAK;AACnB,QAAM,YAAY,KAAK;AAEvB,MAAI,kBAAkB,eAAe,GAAG;AACpC,WAAO,KAAK,wCAAwC;AACpD,UAAM,iBAAiB,MAAM;AAAA,EACjC;AACA,QAAM,QAAQ,MAAM;AACpB,MAAI;AACA,UAAM,kBAAkB;AAAA,EAC5B,SAAS,KAAK;AACV,YAAQ,MAAM,yCAAyC,GAAG,EAAE;AAAA,EAChE;AACA,UAAQ,KAAK,CAAC;AAClB;AAEA,MAAM,EAAE,MAAM,SAAO,QAAQ,MAAM,GAAG,CAAC;AAEvC,QAAQ,GAAG,UAAU,MAAM,KAAK,KAAK,EAAE,MAAM,SAAO,QAAQ,MAAM,GAAG,CAAC,CAAC;AACvE,QAAQ,GAAG,WAAW,MAAM,KAAK,KAAK,EAAE,MAAM,SAAO,QAAQ,MAAM,GAAG,CAAC,CAAC;",
   "names": []
 }

package/dist/esm/file-logger.d.ts

@@ -0,0 +1,19 @@
+/**
+ * @license
+ * Copyright 2025-2026 Open Home Foundation
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Creates a file-based logger that writes to the given path.
+ * On startup and every 24 hours the existing backups are shifted
+ * (.6→.7, .5→.6, …, .1→.2, current→.1) and a fresh file is opened,
+ * keeping up to LOG_BACKUP_COUNT daily backups (≈7 days of logs).
+ *
+ * Returns `{ write, close }`. Call `close()` before `process.exit()` to flush
+ * any buffered data and release the file handle.
+ */
+export declare function createFileLogger(logPath: string): Promise<{
+    write: (formattedLog: string) => void;
+    close: () => Promise<void>;
+}>;
+//# sourceMappingURL=file-logger.d.ts.map

package/dist/esm/file-logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-logger.d.ts","sourceRoot":"","sources":["../../src/file-logger.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAcH;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,MAAM;0BAgMxB,MAAM;;GAWnC"}

package/dist/esm/file-logger.js

@@ -0,0 +1,156 @@
+/**
+ * @license
+ * Copyright 2025-2026 Open Home Foundation
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { closeSync, createWriteStream, renameSync, unlinkSync } from "node:fs";
+import { mkdir } from "node:fs/promises";
+import { basename, dirname, posix, sep } from "node:path";
+const LOG_ROTATION_INTERVAL_MS = 24 * 60 * 60 * 1e3;
+const LOG_BACKUP_COUNT = 7;
+const LOG_TEMP_SUFFIX = ".new";
+function isEnoent(err) {
+  return err instanceof Error && err.code === "ENOENT";
+}
+async function createFileLogger(logPath) {
+  if (logPath.endsWith(sep) || logPath.endsWith(posix.sep) || !basename(logPath)) {
+    throw new Error(`Log file path must include a filename, not just a directory: "${logPath}"`);
+  }
+  await mkdir(dirname(logPath), { recursive: true });
+  function shiftBackupsSync() {
+    try {
+      unlinkSync(`${logPath}.${LOG_BACKUP_COUNT}`);
+    } catch (err) {
+      if (!isEnoent(err)) throw err;
+    }
+    for (let i = LOG_BACKUP_COUNT - 1; i >= 1; i--) {
+      try {
+        renameSync(`${logPath}.${i}`, `${logPath}.${i + 1}`);
+      } catch (err) {
+        if (!isEnoent(err)) throw err;
+      }
+    }
+    try {
+      renameSync(logPath, `${logPath}.1`);
+    } catch (err) {
+      if (!isEnoent(err)) throw err;
+    }
+  }
+  function openLogStream(filePath, flags = "a", autoClose = true) {
+    return new Promise((resolve, reject) => {
+      const stream = createWriteStream(filePath, { flags, autoClose });
+      stream.once("open", (fd) => resolve({ stream, fd }));
+      stream.once("error", reject);
+    });
+  }
+  function drainStream(stream) {
+    return new Promise((resolve, reject) => {
+      const onError = (err) => reject(err);
+      stream.once("error", onError);
+      stream.end((err) => {
+        stream.removeListener("error", onError);
+        if (err) reject(err);
+        else resolve();
+      });
+    });
+  }
+  try {
+    unlinkSync(`${logPath}${LOG_TEMP_SUFFIX}`);
+  } catch (err) {
+    if (!isEnoent(err)) console.error(`Failed to clean up stale log temp file: ${err}`);
+  }
+  try {
+    shiftBackupsSync();
+  } catch (err) {
+    console.error(`Initial log file backup shifting failed: ${err}`);
+  }
+  let { stream: writer } = await openLogStream(logPath);
+  writer.on("error", (err) => console.error(`Log file write error: ${err}`));
+  let pendingLines = null;
+  let rotationPromise = null;
+  async function doRotate() {
+    const tempPath = `${logPath}${LOG_TEMP_SUFFIX}`;
+    let tempStream;
+    let tempFd;
+    try {
+      ({ stream: tempStream, fd: tempFd } = await openLogStream(tempPath, "w", false));
+      tempStream.on("error", (err) => console.error(`Log file write error: ${err}`));
+    } catch (err) {
+      console.error(`Failed to open temp log file for rotation: ${err}`);
+      return;
+    }
+    const oldStream = writer;
+    writer = tempStream;
+    try {
+      await drainStream(oldStream);
+    } catch (err) {
+      console.error(`Failed to flush old log file during rotation: ${err}`);
+    }
+    try {
+      shiftBackupsSync();
+    } catch (err) {
+      console.error(`Log file backup shifting failed: ${err}`);
+    }
+    pendingLines = [];
+    try {
+      await drainStream(tempStream);
+    } catch (err) {
+      console.error(`Failed to flush temp log file during rotation: ${err}`);
+    }
+    try {
+      closeSync(tempFd);
+      renameSync(tempPath, logPath);
+    } catch (err) {
+      console.error(`Failed to finalize log file rotation: ${err}`);
+    }
+    let finalStream;
+    try {
+      ({ stream: finalStream } = await openLogStream(logPath, "a"));
+      finalStream.on("error", (err) => console.error(`Log file write error: ${err}`));
+    } catch (err) {
+      console.error(`Failed to open final log file after rotation: ${err}`);
+    }
+    const buffered = pendingLines ?? [];
+    pendingLines = null;
+    if (finalStream !== void 0) {
+      writer = finalStream;
+      for (const line of buffered) {
+        finalStream.write(`${line}
+`);
+      }
+    }
+  }
+  function rotateLog() {
+    if (rotationPromise !== null) {
+      return;
+    }
+    rotationPromise = doRotate().catch((err) => console.error(`Log file rotation failed: ${err}`)).finally(() => {
+      rotationPromise = null;
+    });
+  }
+  const rotationTimer = setInterval(() => rotateLog(), LOG_ROTATION_INTERVAL_MS);
+  rotationTimer.unref();
+  async function close() {
+    clearInterval(rotationTimer);
+    if (rotationPromise !== null) {
+      await rotationPromise.catch(() => {
+      });
+    }
+    await drainStream(writer).catch((err) => console.error(`Failed to flush log file on close: ${err}`));
+  }
+  return {
+    write: (formattedLog) => {
+      if (pendingLines !== null) {
+        pendingLines.push(formattedLog);
+      } else if (!writer.writableEnded && !writer.destroyed) {
+        writer.write(`${formattedLog}
+`);
+      }
+    },
+    close
+  };
+}
+export {
+  createFileLogger
+};
+//# sourceMappingURL=file-logger.js.map

package/dist/esm/file-logger.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../src/file-logger.ts"],
+  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,SAAS,WAAW,mBAAmB,YAAY,kBAAoC;AACvF,SAAS,aAAa;AACtB,SAAS,UAAU,SAAS,OAAO,WAAW;AAE9C,MAAM,2BAA2B,KAAK,KAAK,KAAK;AAChD,MAAM,mBAAmB;AACzB,MAAM,kBAAkB;AAExB,SAAS,SAAS,KAAuB;AACrC,SAAO,eAAe,SAAU,IAA8B,SAAS;AAC3E;AAWA,eAAsB,iBAAiB,SAAiB;AAEpD,MAAI,QAAQ,SAAS,GAAG,KAAK,QAAQ,SAAS,MAAM,GAAG,KAAK,CAAC,SAAS,OAAO,GAAG;AAC5E,UAAM,IAAI,MAAM,iEAAiE,OAAO,GAAG;AAAA,EAC/F;AACA,QAAM,MAAM,QAAQ,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;AAGjD,WAAS,mBAAmB;AACxB,QAAI;AACA,iBAAW,GAAG,OAAO,IAAI,gBAAgB,EAAE;AAAA,IAC/C,SAAS,KAAK;AACV,UAAI,CAAC,SAAS,GAAG,EAAG,OAAM;AAAA,IAC9B;AACA,aAAS,IAAI,mBAAmB,GAAG,KAAK,GAAG,KAAK;AAC5C,UAAI;AACA,mBAAW,GAAG,OAAO,IAAI,CAAC,IAAI,GAAG,OAAO,IAAI,IAAI,CAAC,EAAE;AAAA,MACvD,SAAS,KAAK;AACV,YAAI,CAAC,SAAS,GAAG,EAAG,OAAM;AAAA,MAC9B;AAAA,IACJ;AACA,QAAI;AACA,iBAAW,SAAS,GAAG,OAAO,IAAI;AAAA,IACtC,SAAS,KAAK;AACV,UAAI,CAAC,SAAS,GAAG,EAAG,OAAM;AAAA,IAC9B;AAAA,EACJ;AAKA,WAAS,cACL,UACA,QAAQ,KACR,YAAY,MACgC;AAC5C,WAAO,IAAI,QAA6C,CAAC,SAAS,WAAW;AACzE,YAAM,SAAS,kBAAkB,UAAU,EAAE,OAAO,UAAU,CAAC;AAC/D,aAAO,KAAK,QAAQ,CAAC,OAAe,QAAQ,EAAE,QAAQ,GAAG,CAAC,CAAC;AAC3D,aAAO,KAAK,SAAS,MAAM;AAAA,IAC/B,CAAC;AAAA,EACL;AAKA,WAAS,YAAY,QAAoC;AACrD,WAAO,IAAI,QAAc,CAAC,SAAS,WAAW;AAC1C,YAAM,UAAU,CAAC,QAAe,OAAO,GAAG;AAC1C,aAAO,KAAK,SAAS,OAAO;AAC5B,aAAO,IAAI,CAAC,QAAuB;AAC/B,eAAO,eAAe,SAAS,OAAO;AACtC,YAAI,IAAK,QAAO,GAAG;AAAA,YACd,SAAQ;AAAA,MACjB,CAAC;AAAA,IACL,CAAC;AAAA,EACL;AAIA,MAAI;AACA,eAAW,GAAG,OAAO,GAAG,eAAe,EAAE;AAAA,EAC7C,SAAS,KAAK;AACV,QAAI,CAAC,SAAS,GAAG,EAAG,SAAQ,MAAM,2CAA2C,GAAG,EAAE;AAAA,EACtF;AACA,MAAI;AACA,qBAAiB;AAAA,EACrB,SAAS,KAAK;AACV,YAAQ,MAAM,4CAA4C,GAAG,EAAE;AAAA,EACnE;AACA,MAAI,EAAE,QAAQ,OAAO,IAAI,MAAM,cAAc,OAAO;AACpD,SAAO,GAAG,SAAS,SAAO,QAAQ,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAKvE,MAAI,eAAgC;AAGpC,MAAI,kBAAwC;AAE5C,iBAAe,WAAW;AACtB,UAAM,WAAW,GAAG,OAAO,GAAG,eAAe;AAI7C,QAAI;AACJ,QAAI;AACJ,QAAI;AAEA,OAAC,EAAE,QAAQ,YAAY,IAAI,OAAO,IAAI,MAAM,cAAc,UAAU,KAAK,KAAK;AAC9E,iBAAW,GAAG,SAAS,SAAO,QAAQ,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAAA,IAC/E,SAAS,KAAK;AACV,cAAQ,MAAM,8CAA8C,GAAG,EAAE;AACjE;AAAA,IACJ;AAIA,UAAM,YAAY;AAClB,aAAS;AAGT,QAAI;AACA,YAAM,YAAY,SAAS;AAAA,IAC/B,SAAS,KAAK;AACV,cAAQ,MAAM,iDAAiD,GAAG,EAAE;AAAA,IACxE;AAGA,QAAI;AACA,uBAAiB;AAAA,IACrB,SAAS,KAAK;AAGV,cAAQ,MAAM,oCAAoC,GAAG,EAAE;AAAA,IAC3D;AAKA,mBAAe,CAAC;AAKhB,QAAI;AACA,YAAM,YAAY,UAAU;AAAA,IAChC,SAAS,KAAK;AACV,cAAQ,MAAM,kDAAkD,GAAG,EAAE;AAAA,IACzE;AAIA,QAAI;AACA,gBAAU,MAAM;AAChB,iBAAW,UAAU,OAAO;AAAA,IAChC,SAAS,KAAK;AACV,cAAQ,MAAM,yCAAyC,GAAG,EAAE;AAAA,IAGhE;AAIA,QAAI;AACJ,QAAI;AACA,OAAC,EAAE,QAAQ,YAAY,IAAI,MAAM,cAAc,SAAS,GAAG;AAC3D,kBAAY,GAAG,SAAS,SAAO,QAAQ,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAAA,IAChF,SAAS,KAAK;AACV,cAAQ,MAAM,iDAAiD,GAAG,EAAE;AAAA,IAGxE;AAKA,UAAM,WAAW,gBAAgB,CAAC;AAClC,mBAAe;AACf,QAAI,gBAAgB,QAAW;AAC3B,eAAS;AACT,iBAAW,QAAQ,UAAU;AACzB,oBAAY,MAAM,GAAG,IAAI;AAAA,CAAI;AAAA,MACjC;AAAA,IACJ;AAAA,EACJ;AAEA,WAAS,YAAY;AACjB,QAAI,oBAAoB,MAAM;AAC1B;AAAA,IACJ;AACA,sBAAkB,SAAS,EACtB,MAAM,SAAO,QAAQ,MAAM,6BAA6B,GAAG,EAAE,CAAC,EAC9D,QAAQ,MAAM;AACX,wBAAkB;AAAA,IACtB,CAAC;AAAA,EACT;AAEA,QAAM,gBAAgB,YAAY,MAAM,UAAU,GAAG,wBAAwB;AAC7E,gBAAc,MAAM;AAEpB,iBAAe,QAAQ;AACnB,kBAAc,aAAa;AAE3B,QAAI,oBAAoB,MAAM;AAC1B,YAAM,gBAAgB,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA,IACxC;AACA,UAAM,YAAY,MAAM,EAAE,MAAM,SAAO,QAAQ,MAAM,sCAAsC,GAAG,EAAE,CAAC;AAAA,EACrG;AAEA,SAAO;AAAA,IACH,OAAO,CAAC,iBAAyB;AAC7B,UAAI,iBAAiB,MAAM;AAGvB,qBAAa,KAAK,YAAY;AAAA,MAClC,WAAW,CAAC,OAAO,iBAAiB,CAAC,OAAO,WAAW;AACnD,eAAO,MAAM,GAAG,YAAY;AAAA,CAAI;AAAA,MACpC;AAAA,IACJ;AAAA,IACA;AAAA,EACJ;AACJ;",
+  "names": []
+}

package/dist/esm/version.js

@@ -9,7 +9,7 @@ import { fileURLToPath } from "node:url";
 function getMatterServerVersion() {
   const thisFile = fileURLToPath(import.meta.url);
   let dir = dirname(thisFile);
-  while (dir !== "/") {
+  while (dirname(dir) !== dir) {
     try {
       const packageJsonPath = join(dir, "package.json");
       const content = readFileSync(packageJsonPath, "utf-8");

package/dist/esm/version.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
   "sources": ["../../src/version.ts"],
-  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAUA,SAAS,oBAAoB;AAC7B,SAAS,SAAS,YAAY;AAC9B,SAAS,qBAAqB;AAU9B,SAAS,yBAAiC;AAEtC,QAAM,WAAW,cAAc,YAAY,GAAG;AAC9C,MAAI,MAAM,QAAQ,QAAQ;AAG1B,SAAO,QAAQ,KAAK;AAChB,QAAI;AACA,YAAM,kBAAkB,KAAK,KAAK,cAAc;AAChD,YAAM,UAAU,aAAa,iBAAiB,OAAO;AACrD,YAAM,MAAM,KAAK,MAAM,OAAO;AAC9B,UAAI,IAAI,SAAS,iBAAiB;AAC9B,eAAO,IAAI;AAAA,MACf;AAAA,IACJ,QAAQ;AAAA,IAER;AACA,UAAM,QAAQ,GAAG;AAAA,EACrB;AACA,QAAM,IAAI,MAAM,2CAA2C;AAC/D;AAGO,MAAM,wBAAwB,uBAAuB;",
+  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAUA,SAAS,oBAAoB;AAC7B,SAAS,SAAS,YAAY;AAC9B,SAAS,qBAAqB;AAU9B,SAAS,yBAAiC;AAEtC,QAAM,WAAW,cAAc,YAAY,GAAG;AAC9C,MAAI,MAAM,QAAQ,QAAQ;AAG1B,SAAO,QAAQ,GAAG,MAAM,KAAK;AACzB,QAAI;AACA,YAAM,kBAAkB,KAAK,KAAK,cAAc;AAChD,YAAM,UAAU,aAAa,iBAAiB,OAAO;AACrD,YAAM,MAAM,KAAK,MAAM,OAAO;AAC9B,UAAI,IAAI,SAAS,iBAAiB;AAC9B,eAAO,IAAI;AAAA,MACf;AAAA,IACJ,QAAQ;AAAA,IAER;AACA,UAAM,QAAQ,GAAG;AAAA,EACrB;AACA,QAAM,IAAI,MAAM,2CAA2C;AAC/D;AAGO,MAAM,wBAAwB,uBAAuB;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "matter-server",
-    "version": "0.5.4",
+    "version": "0.5.5",
     "type": "module",
     "description": "WebSocket Matter server based on matter.js",
     "bugs": {
@@ -23,19 +23,19 @@
         "node": ">=20.19.0 <22.0.0 || >=22.13.0"
     },
     "dependencies": {
-        "@matter/main": "0.17.0-alpha.0-20260308-2d3759f3b",
-        "@matter-server/ws-controller": "0.5.4",
-        "@matter-server/dashboard": "0.5.4",
-        "@matter-server/custom-clusters": "0.5.4",
+        "@matter/main": "0.17.0-alpha.0-20260311-5fb2f183e",
+        "@matter-server/ws-controller": "0.5.5",
+        "@matter-server/dashboard": "0.5.5",
+        "@matter-server/custom-clusters": "0.5.5",
         "commander": "^14.0.3",
         "express": "^5.2.1"
     },
     "devDependencies": {
         "@types/express": "^5.0.6",
-        "@types/node": "^25.3.3",
-        "@matter/nodejs": "0.17.0-alpha.0-20260308-2d3759f3b",
-        "@matter/testing": "0.17.0-alpha.0-20260308-2d3759f3b",
-        "@matter-server/ws-client": "0.5.4"
+        "@types/node": "^25.4.0",
+        "@matter/nodejs": "0.17.0-alpha.0-20260311-5fb2f183e",
+        "@matter/testing": "0.17.0-alpha.0-20260311-5fb2f183e",
+        "@matter-server/ws-client": "0.5.5"
     },
     "files": [
         "dist/**/*",

package/src/MatterServer.ts

@@ -16,9 +16,9 @@ import {
     WebServerHandler,
     WebSocketControllerHandler,
 } from "@matter-server/ws-controller";
-import { open } from "node:fs/promises";
 import { getCliOptions, type LogLevel as CliLogLevel } from "./cli.js";
 import { LegacyDataWriter, loadLegacyData, type LegacyData } from "./converter/index.js";
+import { createFileLogger } from "./file-logger.js";
 import { initializeOta } from "./ota.js";
 import { HealthHandler } from "./server/HealthHandler.js";
 import { StaticFileHandler } from "./server/StaticFileHandler.js";
@@ -27,27 +27,6 @@ import { MATTER_SERVER_VERSION } from "./version.js";
 // Register the custom clusters
 import "@matter-server/custom-clusters";
 
-/**
- * Creates a file-based logger that appends to the given path.
- * The file is opened on start and closed when the process shuts down.
- */
-async function createFileLogger(path: string) {
-    const fileHandle = await open(path, "a");
-    const writer = fileHandle.createWriteStream();
-    process.on(
-        "beforeExit",
-        () => void fileHandle.close().catch(err => err && console.error(`Failed to close log file: ${err}`)),
-    );
-
-    return (formattedLog: string) => {
-        try {
-            writer.write(`${formattedLog}\n`);
-        } catch (error) {
-            console.error(`Failed to write to log file: ${error}`);
-        }
-    };
-}
-
 // Parse CLI options early for logging setup
 const cliOptions = getCliOptions();
 
@@ -98,14 +77,16 @@ let server: WebServer;
 let config: ConfigStorage;
 let legacyData: LegacyData;
 let legacyDataWriter: LegacyDataWriter | undefined;
+let fileLoggerClose: (() => Promise<void>) | undefined;
 
 async function start() {
     // Set up file logging additionally to the console if configured
     if (cliOptions.logFile) {
         try {
-            const fileWriter = await createFileLogger(cliOptions.logFile);
+            const fileLogger = await createFileLogger(cliOptions.logFile);
+            fileLoggerClose = fileLogger.close;
             Logger.destinations.file = LogDestination({
-                write: fileWriter,
+                write: fileLogger.write,
                 level: mapLogLevel(cliOptions.logLevel),
                 format: LogFormat("plain"),
             });
@@ -173,7 +154,7 @@ async function start() {
     );
 
     if (!cliOptions.disableOta) {
-        await initializeOta(controller, cliOptions);
+        controller.commandHandler?.events.started.once(async () => await initializeOta(controller, cliOptions));
     }
 
     // Subscribe to node events for legacy data file updates
@@ -199,6 +180,12 @@ async function start() {
     }
     server = new WebServer({ listenAddresses: cliOptions.listenAddress, port: cliOptions.port }, handlers);
 
+    if (!cliOptions.listenAddress) {
+        logger.warn(
+            `WebSocket server is listening on all network interfaces. Use --listen-address to restrict access. Ensure your environment (firewall, network) prevents unauthorized access.`,
+        );
+    }
+
     await server.start();
 }
 
@@ -211,6 +198,11 @@ async function stop() {
         await legacyDataWriter.flush();
     }
     await config?.close();
+    try {
+        await fileLoggerClose?.();
+    } catch (err) {
+        console.error(`Failed to flush log file on shutdown: ${err}`);
+    }
     process.exit(0);
 }
 

package/src/file-logger.ts

@@ -0,0 +1,231 @@
+/**
+ * @license
+ * Copyright 2025-2026 Open Home Foundation
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+import { closeSync, createWriteStream, renameSync, unlinkSync, type WriteStream } from "node:fs";
+import { mkdir } from "node:fs/promises";
+import { basename, dirname, posix, sep } from "node:path";
+
+const LOG_ROTATION_INTERVAL_MS = 24 * 60 * 60 * 1000; // 24 hours
+const LOG_BACKUP_COUNT = 7; // keep up to 7 daily backup files
+const LOG_TEMP_SUFFIX = ".new"; // temp file written to during rotation
+
+function isEnoent(err: unknown): boolean {
+    return err instanceof Error && (err as NodeJS.ErrnoException).code === "ENOENT";
+}
+
+/**
+ * Creates a file-based logger that writes to the given path.
+ * On startup and every 24 hours the existing backups are shifted
+ * (.6→.7, .5→.6, …, .1→.2, current→.1) and a fresh file is opened,
+ * keeping up to LOG_BACKUP_COUNT daily backups (≈7 days of logs).
+ *
+ * Returns `{ write, close }`. Call `close()` before `process.exit()` to flush
+ * any buffered data and release the file handle.
+ */
+export async function createFileLogger(logPath: string) {
+    // sep is "\\" on Windows, "/" on POSIX; posix.sep is always "/"
+    if (logPath.endsWith(sep) || logPath.endsWith(posix.sep) || !basename(logPath)) {
+        throw new Error(`Log file path must include a filename, not just a directory: "${logPath}"`);
+    }
+    await mkdir(dirname(logPath), { recursive: true });
+
+    /** Shift backups synchronously: .6→.7, …, .1→.2, logPath→.1 */
+    function shiftBackupsSync() {
+        try {
+            unlinkSync(`${logPath}.${LOG_BACKUP_COUNT}`);
+        } catch (err) {
+            if (!isEnoent(err)) throw err;
+        }
+        for (let i = LOG_BACKUP_COUNT - 1; i >= 1; i--) {
+            try {
+                renameSync(`${logPath}.${i}`, `${logPath}.${i + 1}`);
+            } catch (err) {
+                if (!isEnoent(err)) throw err;
+            }
+        }
+        try {
+            renameSync(logPath, `${logPath}.1`);
+        } catch (err) {
+            if (!isEnoent(err)) throw err;
+        }
+    }
+
+    /** Open a write stream at filePath and wait until it is ready.
+     *  Pass autoClose:false for streams whose fd lifetime is managed explicitly
+     *  (e.g. the rotation temp stream, where we call closeSync before renaming). */
+    function openLogStream(
+        filePath: string,
+        flags = "a",
+        autoClose = true,
+    ): Promise<{ stream: WriteStream; fd: number }> {
+        return new Promise<{ stream: WriteStream; fd: number }>((resolve, reject) => {
+            const stream = createWriteStream(filePath, { flags, autoClose });
+            stream.once("open", (fd: number) => resolve({ stream, fd }));
+            stream.once("error", reject);
+        });
+    }
+
+    /** End a stream and resolve when all data is flushed ('finish').
+     *  Rejects if the stream emits an error before finishing, preventing an
+     *  unresolvable hang when e.g. the disk is full during a rotation flush. */
+    function drainStream(stream: WriteStream): Promise<void> {
+        return new Promise<void>((resolve, reject) => {
+            const onError = (err: Error) => reject(err);
+            stream.once("error", onError);
+            stream.end((err?: Error | null) => {
+                stream.removeListener("error", onError);
+                if (err) reject(err);
+                else resolve();
+            });
+        });
+    }
+
+    // Startup: clean up any stale temp file from a previously crashed rotation,
+    // shift existing backups, then open the log file.
+    try {
+        unlinkSync(`${logPath}${LOG_TEMP_SUFFIX}`);
+    } catch (err) {
+        if (!isEnoent(err)) console.error(`Failed to clean up stale log temp file: ${err}`);
+    }
+    try {
+        shiftBackupsSync();
+    } catch (err) {
+        console.error(`Initial log file backup shifting failed: ${err}`);
+    }
+    let { stream: writer } = await openLogStream(logPath);
+    writer.on("error", err => console.error(`Log file write error: ${err}`));
+
+    // When non-null, write() buffers lines here instead of writing to the stream.
+    // Used during the drain+rename phase of rotation to capture writes that arrive
+    // while tempStream is being flushed, with no fd open for them yet.
+    let pendingLines: string[] | null = null;
+
+    // Track in-progress rotation so close() can wait for it to finish.
+    let rotationPromise: Promise<void> | null = null;
+
+    async function doRotate() {
+        const tempPath = `${logPath}${LOG_TEMP_SUFFIX}`;
+
+        // 1. Open the temp file with "w" (truncate) — ensures any stale .new file from
+        //    a previously crashed rotation is discarded rather than appended to.
+        let tempStream: WriteStream;
+        let tempFd: number;
+        try {
+            // autoClose:false — we own tempFd and must closeSync it before renameSync (required on Windows)
+            ({ stream: tempStream, fd: tempFd } = await openLogStream(tempPath, "w", false));
+            tempStream.on("error", err => console.error(`Log file write error: ${err}`));
+        } catch (err) {
+            console.error(`Failed to open temp log file for rotation: ${err}`);
+            return;
+        }
+
+        // 2. Atomic swap — single-threaded JS, so no write() can execute between
+        //    this assignment and any following synchronous statement.
+        const oldStream = writer;
+        writer = tempStream;
+
+        // 3. Drain the old stream. New writes are already going to tempStream.
+        try {
+            await drainStream(oldStream);
+        } catch (err) {
+            console.error(`Failed to flush old log file during rotation: ${err}`);
+        }
+
+        // 4. Shift the backups now that the old file handle is drained and closed.
+        try {
+            shiftBackupsSync();
+        } catch (err) {
+            // Backups could not be shifted; log continues at tempPath with the wrong
+            // name. Still attempt the rename so the active file is at logPath.
+            console.error(`Log file backup shifting failed: ${err}`);
+        }
+
+        // 5. Enable in-memory buffering so writes that arrive during the next two
+        //    async steps are captured rather than going to the soon-to-be-closed
+        //    tempStream or a not-yet-open finalStream.
+        pendingLines = [];
+
+        // 6. Drain tempStream fully before closing its fd. This guarantees no
+        //    in-flight libuv fs.write() calls remain when closeSync runs below,
+        //    eliminating the risk of EBADF errors from a closed fd.
+        try {
+            await drainStream(tempStream);
+        } catch (err) {
+            console.error(`Failed to flush temp log file during rotation: ${err}`);
+        }
+
+        // 7. Close tempFd (required on Windows before rename) and rename .new → logPath.
+        //    pendingLines buffers any writes that arrive while this is in progress.
+        try {
+            closeSync(tempFd);
+            renameSync(tempPath, logPath);
+        } catch (err) {
+            console.error(`Failed to finalize log file rotation: ${err}`);
+            // Rotation failed: reopen logPath in append mode so logging can continue.
+            // pendingLines is flushed into the reopened stream below.
+        }
+
+        // 8. Open the final stream. pendingLines remains active so that writes
+        //    arriving while the file is opening are buffered, not dropped.
+        let finalStream: WriteStream | undefined;
+        try {
+            ({ stream: finalStream } = await openLogStream(logPath, "a"));
+            finalStream.on("error", err => console.error(`Log file write error: ${err}`));
+        } catch (err) {
+            console.error(`Failed to open final log file after rotation: ${err}`);
+            // writer still points to the ended tempStream; the guards in write()
+            // (writableEnded / destroyed) will silently drop further writes.
+        }
+
+        // Disable buffering and flush everything captured since step 5. Done
+        // synchronously so write() cannot observe a window where pendingLines is
+        // null but writer still points to the ended tempStream.
+        const buffered = pendingLines ?? [];
+        pendingLines = null;
+        if (finalStream !== undefined) {
+            writer = finalStream;
+            for (const line of buffered) {
+                finalStream.write(`${line}\n`);
+            }
+        }
+    }
+
+    function rotateLog() {
+        if (rotationPromise !== null) {
+            return;
+        }
+        rotationPromise = doRotate()
+            .catch(err => console.error(`Log file rotation failed: ${err}`))
+            .finally(() => {
+                rotationPromise = null;
+            });
+    }
+
+    const rotationTimer = setInterval(() => rotateLog(), LOG_ROTATION_INTERVAL_MS);
+    rotationTimer.unref();
+
+    async function close() {
+        clearInterval(rotationTimer);
+        // If a rotation is in progress, let it finish before we close.
+        if (rotationPromise !== null) {
+            await rotationPromise.catch(() => {});
+        }
+        await drainStream(writer).catch(err => console.error(`Failed to flush log file on close: ${err}`));
+    }
+
+    return {
+        write: (formattedLog: string) => {
+            if (pendingLines !== null) {
+                // Rotation in progress: buffer the line; it will be flushed to the
+                // final stream once the new file is open (step 8 in doRotate).
+                pendingLines.push(formattedLog);
+            } else if (!writer.writableEnded && !writer.destroyed) {
+                writer.write(`${formattedLog}\n`);
+            }
+        },
+        close,
+    };
+}

package/src/version.ts

@@ -25,8 +25,8 @@ function getMatterServerVersion(): string {
     const thisFile = fileURLToPath(import.meta.url);
     let dir = dirname(thisFile);
 
-    // Navigate up to find package.json
-    while (dir !== "/") {
+    // Navigate up to find package.json; stop at filesystem root (portable across OS)
+    while (dirname(dir) !== dir) {
         try {
             const packageJsonPath = join(dir, "package.json");
             const content = readFileSync(packageJsonPath, "utf-8");