w-web-perm 1.0.49 → 1.0.51

package/logs/2026-07-11T17.log

@@ -0,0 +1,19 @@
+{"level":30,"time":1783761673030,"pid":21968,"hostname":"semi-win-dev3","event":"api/getPerm-success","userId":"id-for-admin"}
+{"level":50,"time":1783761673423,"pid":21968,"hostname":"semi-win-dev3","event":"getTokenUser-error","msg":"cannotFindUserFromToken"}
+{"level":30,"time":1783761673428,"pid":21968,"hostname":"semi-win-dev3","event":"api/getPerm-success","userId":"id-for-admin"}
+{"level":30,"time":1783761673433,"pid":21968,"hostname":"semi-win-dev3","event":"api/getPerm-success","userId":"id-for-admin"}
+{"level":30,"time":1783761673440,"pid":21968,"hostname":"semi-win-dev3","event":"api/getPerm-success","userId":"id-for-admin"}
+{"level":30,"time":1783761673444,"pid":21968,"hostname":"semi-win-dev3","event":"api/getPerm-success","userId":"id-for-admin"}
+{"level":30,"time":1783761673450,"pid":21968,"hostname":"semi-win-dev3","event":"api/getPermUserInfor-success","userId":"id-for-peter"}
+{"level":50,"time":1783761673453,"pid":21968,"hostname":"semi-win-dev3","event":"api/getPermUserInfor-error","msg":"tokenNoPermission"}
+{"level":50,"time":1783761673455,"pid":21968,"hostname":"semi-win-dev3","event":"getAndVerifyAppUser-error","msg":"cannotFindUserFromToken"}
+{"level":30,"time":1783761673458,"pid":21968,"hostname":"semi-win-dev3","event":"api/getPermUserInfor-success","userId":"id-not-exist-xyz"}
+{"level":30,"time":1783761673461,"pid":21968,"hostname":"semi-win-dev3","event":"api/getPermUserInfor-success","userId":"id-for-peter"}
+{"level":30,"time":1783761673463,"pid":21968,"hostname":"semi-win-dev3","event":"api/getPermUserInfor-success","userId":"id-for-peter"}
+{"level":30,"time":1783761673466,"pid":21968,"hostname":"semi-win-dev3","event":"api/getPermUserInfor-success","userId":"id-for-peter"}
+{"level":30,"time":1783762697759,"pid":18212,"hostname":"semi-win-dev3","event":"api/getPerm-success","userId":"id-for-admin"}
+{"level":50,"time":1783762698186,"pid":18212,"hostname":"semi-win-dev3","event":"getTokenUser-error","msg":"cannotFindUserFromToken"}
+{"level":30,"time":1783762698190,"pid":18212,"hostname":"semi-win-dev3","event":"api/getPerm-success","userId":"id-for-admin"}
+{"level":30,"time":1783762698193,"pid":18212,"hostname":"semi-win-dev3","event":"api/getPerm-success","userId":"id-for-admin"}
+{"level":30,"time":1783762698196,"pid":18212,"hostname":"semi-win-dev3","event":"api/getPerm-success","userId":"id-for-admin"}
+{"level":30,"time":1783762698200,"pid":18212,"hostname":"semi-win-dev3","event":"api/getPerm-success","userId":"id-for-admin"}

package/package.json

@@ -1,21 +1,21 @@
 {
   "name": "w-web-perm",
-  "version": "1.0.49",
+  "version": "1.0.51",
   "main": "dist/w-web-perm.umd.js",
   "dependencies": {
     "@mdi/js": "^7.4.47",
-    "axios": "^1.18.0",
+    "axios": "^1.18.1",
     "json5": "^2.2.3",
     "lodash-es": "^4.18.1",
     "showdown": "^2.1.0",
-    "w-aggrid-vue": "^2.0.57",
-    "w-component-vue": "^2.4.66",
-    "w-data-collector": "^1.0.22",
-    "w-serv-hapi": "^1.0.72",
-    "w-serv-orm": "^1.0.38",
-    "w-ui-loginout": "^1.0.10",
-    "w-syslog": "^1.0.8",
-    "wsemi": "^1.8.61"
+    "w-aggrid-vue": "^2.0.58",
+    "w-component-vue": "^2.4.74",
+    "w-data-collector": "^1.0.23",
+    "w-serv-hapi": "^1.0.74",
+    "w-serv-orm": "^1.0.40",
+    "w-ui-loginout": "^1.0.11",
+    "w-syslog": "^1.0.10",
+    "wsemi": "^1.8.66"
   },
   "devDependencies": {
     "@vue/cli-plugin-babel": "^5.0.8",
@@ -29,18 +29,21 @@
     "eslint-plugin-promise": "^6.1.1",
     "eslint-plugin-vue": "^9.10.0",
     "pixelmatch": "^7.2.0",
-    "playwright": "^1.61.0",
+    "playwright": "^1.61.1",
     "pngjs": "^7.0.0",
     "vue": "^2.6.14",
     "vuex": "^3.6.2",
-    "w-orm-lmdb": "^1.0.6",
-    "w-screenctl": "^1.0.3",
-    "w-package-tools": "^1.1.9"
+    "w-orm-lmdb": "^1.0.8",
+    "w-screenctl": "^1.0.4",
+    "w-package-tools": "^1.1.11"
   },
   "scripts": {
     "serve": "vue-cli-service serve",
     "build": "vue-cli-service build",
-    "test": "mocha --timeout 300000",
+    "test:unit": "mocha test/unit-staEvent.test.mjs --timeout 300000",
+    "test:apiunit": "mocha test/unit-*.test.mjs test/api-*.test.mjs test/getUserRules.test.mjs --timeout 300000",
+    "test:e2e": "node test/run-e2e-isolated.mjs",
+    "test": "npm run test:apiunit && npm run test:e2e",
     "lint": "vue-cli-service lint",
     "deploy": "gh-pages -d docs"
   },

package/server/WWebPerm.mjs

@@ -1,10 +1,8 @@
 import path from 'path'
 import fs from 'fs'
 import get from 'lodash-es/get.js'
-import each from 'lodash-es/each.js'
 import map from 'lodash-es/map.js'
 import keys from 'lodash-es/keys.js'
-import size from 'lodash-es/size.js'
 import join from 'lodash-es/join.js'
 import iseobj from 'wsemi/src/iseobj.mjs'
 import isestr from 'wsemi/src/isestr.mjs'
@@ -42,7 +40,7 @@ import procStaInfor from './procStaInfor.mjs'
  * @param {Function} WOrm 輸入資料庫ORM函數
  * @param {String} url 輸入資料庫連線字串，例如w-orm-lmdb為'./db'，或w-orm-mongodb為'mongodb://username:password@$127.0.0.1:27017'
  * @param {String} db 輸入資料庫名稱字串
- * @param {Function} getUserByToken 輸入處理函數，函數會傳入使用者token，通過此函數處理後並回傳使用者資訊物件，並至少須提供'id'、'email'、'name'、'isAdmin'欄位，且'isAdmin'限輸入'y'或'n'，且輸入'y'時會複寫權限系統該使用者之'isAdmin'欄位值
+ * @param {Function} getUserByToken 輸入處理函數，函數會傳入使用者token，通過此函數處理後並回傳使用者資訊物件，並至少須提供'id'、'email'、'name'、'isAdmin'欄位，且'isAdmin'限輸入'y'或'n'。注意: token 回傳之'isAdmin'僅供識別，權限系統一律以自身users表該使用者之'isAdmin'欄位值為權威，不會被 token 宣稱之值複寫
  * @param {Function} verifyClientUser 輸入驗證瀏覽使用者身份之處理函數，函數會傳入使用者資訊物件，通過此函數識別後回傳布林值，允許使用者回傳true，反之回傳false
  * @param {Function} verifyAppUser 輸入驗證應用程序使用者身份之處理函數，函數會傳入使用者資訊物件，通過此函數識別後回傳布林值，允許使用者回傳true，反之回傳false
  * @param {Object} [opt={}] 輸入設定物件，預設{}
@@ -285,6 +283,8 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser
     }
     catch (err) {
         console.log(err)
+        srLog.error({ event: 'WServOrm-init-error', msg: (err && err.message) || 'WServOrmInitFailed' })
+        throw err //fail-fast: ORM 初始化失敗直接終止啟動, 不以 wp={} 繼續組裝出「port 起得來但 woItems/procOrm 為 undefined、CRUD 全 crash」的半死伺服器
     }
     let { woItems, procOrm } = wp
 
@@ -298,8 +298,12 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser
     let pc = procCore(woItems, procOrm, { srLog, kmx })
 
 
-    //procStaInfor: 統計資訊, fdLog 對齊 srLog 使用同一目錄; mock 由 settings.staEventMock 注入(e2e 統計圖穩定用)
-    let psi = procStaInfor({ fdLog: './_logs', mock: get(opt, 'staEventMock', false) })
+    //procStaInfor: 統計資訊, fdLog 對齊 srLog 使用同一目錄(讀 settings.logFd, fallback 邏輯同 srLog.mjs); mock 由 settings.staEventMock 注入(e2e 統計圖穩定用)
+    let logFd = get(opt, 'logFd', '')
+    if (!isestr(logFd)) {
+        logFd = './_logs'
+    }
+    let psi = procStaInfor({ fdLog: logFd, mock: get(opt, 'staEventMock', false) })
 
 
     //getWebInfor
@@ -450,13 +454,10 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser
             return Promise.reject(`cannotGetUserFromPerm`)
         }
 
-        //複寫isAdmin
-        let isAdminSrc = get(userSelf, 'isAdmin', '')
-        let isAdminSelf = get(userFind, 'isAdmin', '')
-        if (isAdminSrc !== isAdminSelf) {
-            userFind.isAdmin = isAdminSelf
-        }
-        // console.log('userFind(isAdmin)', userFind)
+        //isAdmin 權威為 perm users 表之欄位值, 不以 token(getUserByToken)宣稱之 isAdmin 複寫。
+        //(2026-07-11 稽核 A-C1 裁決(b): 原此處有一段恆為 no-op 之「複寫isAdmin」死碼
+        // (userFind.isAdmin = isAdminSelf, 把自己指派給自己), 與 JSDoc 舊文「輸入'y'時會複寫」互斥;
+        // 依業主裁決採保守解: 刪除死碼、文件對齊實際行為, 不啟用 token→admin 提權路徑。)
 
         return userFind
     }
@@ -1058,7 +1059,7 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser
 
     //WServHapiServer
     instWServHapiServer = new WServHapiServer({
-        port: opt.serverPort,
+        port: serverPort,
         pathStaticFiles,
         apiName: 'api',
         apis,
@@ -1133,15 +1134,27 @@ function WWebPerm(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser
             updateUsers: pc.updateUsers,
 
             getStaEvent: async (userId, timeLength, timeInterval) => {
-                let rs = await psi.getStaEvent(userId, timeLength, timeInterval)
-                srLog.info({ event: 'getStaEvent-success', userId })
-                return rs
+                try {
+                    let rs = await psi.getStaEvent(userId, timeLength, timeInterval)
+                    srLog.info({ event: 'getStaEvent-success', userId })
+                    return rs
+                }
+                catch (err) {
+                    srLog.error({ event: 'getStaEvent-error', userId, msg: (typeof err === 'string') ? err : ((err && err.message) || 'cannotGetStaEvent') })
+                    throw err
+                }
             },
 
             getStaEventTable: async (userId) => {
-                let rs = await psi.getStaEventTable(userId)
-                srLog.info({ event: 'getStaEventTable-success', userId })
-                return rs
+                try {
+                    let rs = await psi.getStaEventTable(userId)
+                    srLog.info({ event: 'getStaEventTable-success', userId })
+                    return rs
+                }
+                catch (err) {
+                    srLog.error({ event: 'getStaEventTable-error', userId, msg: (typeof err === 'string') ? err : ((err && err.message) || 'cannotGetStaEventTable') })
+                    throw err
+                }
             },
 
         },

package/server/procCore.mjs

@@ -122,9 +122,18 @@ function proc(woItems, procOrm, { srLog, kmx }) {
     }
 
 
+    //errLog: 失敗統一記 err key (updateTabItems reject 為 key 字串如 saveRowFieldInvalid; procOrm 失敗為 Error)
+    let errLog = (event, userId, err) => {
+        srLog.error({ event, userId, msg: (typeof err === 'string') ? err : ((err && err.message) || event) })
+    }
+
+
     //updateTargets
     let updateTargets = async (userId, rows) => {
-        await updateTabItems('targets', userId, rows, 'id')
+        try {
+            await updateTabItems('targets', userId, rows, 'id')
+        }
+        catch (err) { errLog('updateTargets-error', userId, err); throw err }
         srLog.info({ event: 'updateTargets-success', userId })
         return 'saveTabItemsSuccess' //成功 msg key
     }
@@ -132,7 +141,10 @@ function proc(woItems, procOrm, { srLog, kmx }) {
 
     //updatePemis
     let updatePemis = async (userId, rows) => {
-        await updateTabItems('pemis', userId, rows, 'name')
+        try {
+            await updateTabItems('pemis', userId, rows, 'name')
+        }
+        catch (err) { errLog('updatePemis-error', userId, err); throw err }
         srLog.info({ event: 'updatePemis-success', userId })
         return 'saveTabItemsSuccess' //成功 msg key
     }
@@ -140,7 +152,10 @@ function proc(woItems, procOrm, { srLog, kmx }) {
 
     //updateGrups
     let updateGrups = async (userId, rows) => {
-        await updateTabItems('grups', userId, rows, 'name')
+        try {
+            await updateTabItems('grups', userId, rows, 'name')
+        }
+        catch (err) { errLog('updateGrups-error', userId, err); throw err }
         srLog.info({ event: 'updateGrups-success', userId })
         return 'saveTabItemsSuccess' //成功 msg key
     }
@@ -148,7 +163,10 @@ function proc(woItems, procOrm, { srLog, kmx }) {
 
     //updateUsers
     let updateUsers = async (userId, rows) => {
-        await updateTabItems('users', userId, rows, 'id')
+        try {
+            await updateTabItems('users', userId, rows, 'id')
+        }
+        catch (err) { errLog('updateUsers-error', userId, err); throw err }
         srLog.info({ event: 'updateUsers-success', userId })
         return 'saveTabItemsSuccess' //成功 msg key
     }

package/server/procLang.mjs

@@ -57,10 +57,11 @@ let kpLang = {
         cht: '等待數據中...',
     },
 
-    isEditabled: {
-        eng: 'Editable',
-        cht: '是否編輯',
-    },
+    //目前無引用,保留供日後使用(見 spec/設計要點與取捨.md ADR-014)
+    // isEditabled: {
+    //     eng: 'Editable',
+    //     cht: '是否編輯',
+    // },
     saveChanges: {
         eng: `Save changes`,
         cht: `儲存變更`,
@@ -85,10 +86,11 @@ let kpLang = {
         eng: `Delete`,
         cht: `刪除`,
     },
-    cancel: {
-        eng: `Cancel`,
-        cht: `取消`,
-    },
+    //目前無引用,保留供日後使用(見 spec/設計要點與取捨.md ADR-014)
+    // cancel: {
+    //     eng: `Cancel`,
+    //     cht: `取消`,
+    // },
     screenFull: {
         eng: `Max size`,
         cht: `最大化尺寸`,
@@ -221,10 +223,11 @@ let kpLang = {
         cht: `無法找到使用者 Id`,
     },
 
-    unknow: {
-        eng: `Unknow`,
-        cht: `未知`,
-    },
+    //目前無引用,保留供日後使用(見 spec/設計要點與取捨.md ADR-014)
+    // unknow: {
+    //     eng: `Unknow`,
+    //     cht: `未知`,
+    // },
 
     username: {
         eng: `Username`,
@@ -263,10 +266,11 @@ let kpLang = {
         eng: `Use groups`,
         cht: `所屬權限群組`,
     },
-    belongPemis: {
-        eng: `Use permissions`,
-        cht: `所屬權限`,
-    },
+    //目前無引用,保留供日後使用(見 spec/設計要點與取捨.md ADR-014)
+    // belongPemis: {
+    //     eng: `Use permissions`,
+    //     cht: `所屬權限`,
+    // },
     belongGrupsNames: {
         eng: `Use permission groups`,
         cht: `所屬權限群組名稱`,
@@ -289,6 +293,10 @@ let kpLang = {
         eng: `Name errors`,
         cht: `名稱出現錯誤待修復`,
     },
+    errInIds: {
+        eng: `ID errors`,
+        cht: `ID 出現錯誤待修復`,
+    },
     errInEmails: {
         eng: `Email errors`,
         cht: `Email出現錯誤待修復`,
@@ -383,10 +391,11 @@ let kpLang = {
         eng: `Enable`,
         cht: `是否使用`,
     },
-    targetClearTargetsFail: {
-        eng: `Failed to clear existing targets`,
-        cht: `清除既有對象數據失敗`,
-    },
+    //目前無引用,保留供日後使用(見 spec/設計要點與取捨.md ADR-014)
+    // targetClearTargetsFail: {
+    //     eng: `Failed to clear existing targets`,
+    //     cht: `清除既有對象數據失敗`,
+    // },
     targetSaveTargetsFail: {
         eng: `Failed to save targets`,
         cht: `儲存對象數據失敗`,
@@ -476,10 +485,11 @@ let kpLang = {
         eng: `Has {n} rule(s){nms}`,
         cht: `使用共 {n} 項對象{nms}`,
     },
-    pemiClearPemisFail: {
-        eng: `Failed to clear existing permissions`,
-        cht: `清除既有權限數據失敗`,
-    },
+    //目前無引用,保留供日後使用(見 spec/設計要點與取捨.md ADR-014)
+    // pemiClearPemisFail: {
+    //     eng: `Failed to clear existing permissions`,
+    //     cht: `清除既有權限數據失敗`,
+    // },
     pemiSavePemisFail: {
         eng: `Failed to save permissions`,
         cht: `儲存權限數據失敗`,
@@ -603,10 +613,11 @@ let kpLang = {
         eng: `Has {n} permission(s){nms}`,
         cht: `使用 {n} 項權限{nms}`,
     },
-    grupClearGrupsFail: {
-        eng: `Failed to clear existing permission groups`,
-        cht: `清除既有權限群組數據失敗`,
-    },
+    //目前無引用,保留供日後使用(見 spec/設計要點與取捨.md ADR-014)
+    // grupClearGrupsFail: {
+    //     eng: `Failed to clear existing permission groups`,
+    //     cht: `清除既有權限群組數據失敗`,
+    // },
     grupSaveGrupsEmpty: {
         eng: `No user`,
         cht: `未有變更權限群組資料`,
@@ -727,7 +738,7 @@ let kpLang = {
         cht: `編輯使用權限群組`,
     },
     userEditCgrupsForDisplay: {
-        eng: `Edit list of user`,
+        eng: `Permission groups of user`, //展示版不帶 Edit 動詞(2026-07-10 訂正: 原誤與編輯版同值, 唯讀對話框標題顯示「Edit...」且 e2e 無法以標題區分模式)
         cht: `展示使用權限群組`,
     },
     userEditCgrupsNoUserId: {
@@ -784,10 +795,11 @@ let kpLang = {
         cht: `刪除勾選權限`,
     },
 
-    allDefaults: {
-        eng: `All defaults`,
-        cht: `全部項目預設值`,
-    },
+    //目前無引用,保留供日後使用(見 spec/設計要點與取捨.md ADR-014)
+    // allDefaults: {
+    //     eng: `All defaults`,
+    //     cht: `全部項目預設值`,
+    // },
     show: {
         eng: `Show`,
         cht: `顯示`,
@@ -796,34 +808,36 @@ let kpLang = {
         eng: `Active`,
         cht: `啟用`,
     },
-    showChildren: {
-        eng: `Show children`,
-        cht: `所屬顯示`,
-    },
-    hideChildren: {
-        eng: `Hide children`,
-        cht: `所屬不顯示`,
-    },
-    activateChildren: {
-        eng: `Activate children`,
-        cht: `所屬啟用`,
-    },
-    deactivateChildren: {
-        eng: `Deactivate children`,
-        cht: `所屬不啟用`,
-    },
-    isUsernameEmpty: {
-        eng: `Username is empty`,
-        cht: `使用者名稱不得為空`,
-    },
-    failedToSaveUser: {
-        eng: `Failed to save the user`,
-        cht: `變更使用者失敗`,
-    },
-    successfulToSaveUser: {
-        eng: `Save the user successfully`,
-        cht: `變更使用者成功`,
-    },
+    //目前無引用,保留供日後使用(見 spec/設計要點與取捨.md ADR-014)
+    // showChildren: {
+    //     eng: `Show children`,
+    //     cht: `所屬顯示`,
+    // },
+    // hideChildren: {
+    //     eng: `Hide children`,
+    //     cht: `所屬不顯示`,
+    // },
+    // activateChildren: {
+    //     eng: `Activate children`,
+    //     cht: `所屬啟用`,
+    // },
+    // deactivateChildren: {
+    //     eng: `Deactivate children`,
+    //     cht: `所屬不啟用`,
+    // },
+    //目前無引用,保留供日後使用(見 spec/設計要點與取捨.md ADR-014)
+    // isUsernameEmpty: {
+    //     eng: `Username is empty`,
+    //     cht: `使用者名稱不得為空`,
+    // },
+    // failedToSaveUser: {
+    //     eng: `Failed to save the user`,
+    //     cht: `變更使用者失敗`,
+    // },
+    // successfulToSaveUser: {
+    //     eng: `Save the user successfully`,
+    //     cht: `變更使用者成功`,
+    // },
 
     userId: {
         eng: `ID of the created user`,
@@ -891,10 +905,11 @@ let kpLang = {
         eng: `Event Frequency`,
         cht: `事件發生頻率`,
     },
-    staTimeGroup: {
-        eng: `Time grouping`,
-        cht: `時間分組`,
-    },
+    //目前無引用,保留供日後使用(見 spec/設計要點與取捨.md ADR-014)
+    // staTimeGroup: {
+    //     eng: `Time grouping`,
+    //     cht: `時間分組`,
+    // },
     staTimeHr: {
         eng: `Hourly`,
         cht: `每小時`,
@@ -923,6 +938,10 @@ let kpLang = {
         eng: `No event data`,
         cht: `尚無事件資料`,
     },
+    getDataError: {
+        eng: `Failed to load data`,
+        cht: `資料載入失敗`,
+    },
     staTableTitle: {
         eng: `Event Statistics`,
         cht: `事件統計表`,

package/server/procStaInfor.mjs

@@ -77,6 +77,11 @@ function proc(opt = {}) {
         let cacheKey = `${timeLength}:${timeInterval}`
 
         let r = await ocGetStaEvent.getProxy(cacheKey, { fun: _getStaEvent, inputs: [timeLength, timeInterval], timeExpired: 30 * 1000 }) //快取30秒
+        if (!Array.isArray(r)) {
+            //_getStaEvent(worker) 失敗時 cache 之 .catch 會回 undefined 並把 undefined 快取 30s; 清除該快取避免窗內重試仍拿 undefined, 並 reject 讓上層 (kpFunExt) 記 err key
+            ocGetStaEvent.clear(cacheKey)
+            return Promise.reject('cannotGetStaEvent')
+        }
         return r
     }
 
@@ -98,6 +103,11 @@ function proc(opt = {}) {
     let getStaEventTable = async (userId) => {
 
         let r = await ocGetStaEventTable.getProxy('staEventTable', { fun: _getStaEventTable, inputs: [], timeExpired: 30 * 1000 }) //快取30秒
+        if (!Array.isArray(r)) {
+            //同 getStaEvent: staEventTable 失敗時 cache 回 undefined 並快取 30s; 清除避免窗內重試仍拿 undefined, 並 reject 讓上層記 err key
+            ocGetStaEventTable.clear('staEventTable')
+            return Promise.reject('cannotGetStaEventTable')
+        }
         return r
     }
 

package/server/staLogs/filterVpfsByWindow.mjs

@@ -0,0 +1,27 @@
+import get from 'lodash-es/get.js'
+import filter from 'lodash-es/filter.js'
+
+
+//filterVpfsByWindow: 開檔前依「檔名時間窗」過濾 log 檔清單, 剔除窗外檔.
+//w-syslog 檔名為 ISO 前綴 (hr: `YYYY-MM-DDTHH.log` / day: `YYYY-MM-DD.log`), 字典序 ≡ 時間序,
+//故可用字串比較篩選 (w-syslog 自身 cleanLogs 亦依賴此性質, 見 node_modules/w-syslog/src/WSyslog.mjs:127-128).
+//邊界檔一律保留, 其內 per-line 之時間判斷仍為最終判準 → 輸出語意零改變.
+//fail-open: 檔名不符 ISO 前綴者一律保留 (寧可多讀, 不可漏讀).
+//vpfs 為 fsTreeFolder 回傳之物件陣列, 每筆含 { path, name, isFolder, level }.
+//【粒度自適應】比較時以「檔名長度」截取 keyStart: srLog 之 logInterval (決定檔名粒度) 與 staLogs 之
+//timeInterval (決定 fmt) 為兩個獨立設定, 兩者不一定相同. 若檔名為 day 粒度 (10 字元) 而 fmt 為 hr 粒度
+//(13 字元), 直接比較會把「當天檔」誤判為窗外 (`'2026-07-08' < '2026-07-08T21'`) → 漏讀整天資料.
+//截取後 day 檔以日期比日期、hr 檔以小時比小時, 兩種粒度皆正確且一律偏保留 (fail-safe).
+function filterVpfsByWindow(vpfs, tStart, fmt) {
+    let keyStart = tStart.format(fmt)
+    return filter(vpfs, (vpf) => {
+        let bn = get(vpf, 'name', '').replace(/\.log$/, '')
+        if (!/^\d{4}-\d{2}-\d{2}/.test(bn)) {
+            return true //fail-open: 非預期檔名一律保留
+        }
+        return bn >= keyStart.slice(0, bn.length)
+    })
+}
+
+
+export default filterVpfsByWindow

package/server/staLogs/staEvent.mjs

@@ -9,6 +9,7 @@ import genPm from 'wsemi/src/genPm.mjs'
 import isestr from 'wsemi/src/isestr.mjs'
 import fsTreeFolder from 'wsemi/src/fsTreeFolder.mjs'
 import fsBuildReadStreamText from 'wsemi/src/fsBuildReadStreamText.mjs'
+import filterVpfsByWindow from './filterVpfsByWindow.mjs'
 
 
 //統計各 event 事件於各時間桶之發生頻率（鏡像 SSO staLogs/staToken.mjs；差異：不限特定 event，改依 event 名分組）。
@@ -40,6 +41,7 @@ async function staEvent(timeLength = 7, timeInterval = 'hr', opt = {}) {
 
     //vpfs
     let vpfs = fsTreeFolder(fdLog)
+    vpfs = filterVpfsByWindow(vpfs, tStart, fmt) //開檔前剔除窗外檔, 見該模組註解
 
     //logs
     let logs = []

package/server/staLogs/staEventTable.mjs

@@ -5,6 +5,7 @@ import genPm from 'wsemi/src/genPm.mjs'
 import isestr from 'wsemi/src/isestr.mjs'
 import fsTreeFolder from 'wsemi/src/fsTreeFolder.mjs'
 import fsBuildReadStreamText from 'wsemi/src/fsBuildReadStreamText.mjs'
+import filterVpfsByWindow from './filterVpfsByWindow.mjs'
 
 
 //統計各 event 事件於近 1日/8hr/4hr/1hr 各窗內之發生數量（鏡像 staEvent.mjs 的 NDJSON 讀取方式）。
@@ -26,6 +27,7 @@ async function staEventTable(opt = {}) {
 
     //vpfs
     let vpfs = fsTreeFolder(fdLog)
+    vpfs = filterVpfsByWindow(vpfs, now.subtract(25, 'hour'), 'YYYY-MM-DDTHH') //開檔前剔除窗外檔; 用 25h(非 24h)是因 diff('hour') 取整, 最舊可能到 now-25h, 多留一小時確保不漏讀
 
     //逐檔逐行讀取
     for (let vpf of vpfs) {

package/settings.json

@@ -36,5 +36,8 @@
     //         cht: `現有功能泛指實體的頁面、數據等，亦可為的功能或服務。`,
     //     },
     // },
+    
+    logFd: './logs',
+    logInterval: 'hr',
 
 }

package/src/components/LayoutContent.vue

@@ -167,7 +167,6 @@ export default {
 
             menuKey: 'mmTargets',
 
-            panelWidth: 0,
             panelHeight: 0,
 
             drawer: true,
@@ -232,7 +231,6 @@ export default {
             let vo = this
 
             //save
-            vo.panelWidth = msg.snew.clientWidth
             vo.panelHeight = msg.snew.clientHeight
             // console.log('vo.panelHeight', vo.panelHeight)
 

package/src/components/LayoutContentGrups.vue

@@ -296,7 +296,6 @@ export default {
             mdiPencilOutline,
             mdiContentCopy,
 
-            panelWidth: 100,
             panelHeight: 100,
             headHeight: 100,
 
@@ -624,7 +623,6 @@ export default {
             let vo = this
 
             //panelWidth, panelHeight
-            vo.panelWidth = msg.snew.offsetWidth
             vo.panelHeight = msg.snew.offsetHeight
 
         },

package/src/components/LayoutContentPemis.vue

@@ -296,7 +296,6 @@ export default {
             mdiPencilOutline,
             mdiContentCopy,
 
-            panelWidth: 100,
             panelHeight: 100,
             headHeight: 100,
 
@@ -624,7 +623,6 @@ export default {
             let vo = this
 
             //panelWidth, panelHeight
-            vo.panelWidth = msg.snew.offsetWidth
             vo.panelHeight = msg.snew.offsetHeight
 
         },

package/src/components/LayoutContentStaInfor.vue

@@ -179,7 +179,6 @@ export default {
 
             dbc: debounce(300),
 
-            panelWidth: 100,
             panelHeight: 100,
 
             firstLoading: true,
@@ -259,7 +258,6 @@ export default {
             let vo = this
 
             //panelWidth, panelHeight
-            vo.panelWidth = msg.snew.offsetWidth
             vo.panelHeight = msg.snew.offsetHeight
 
         },