Add support audit logging and AI debug manifest

src/main/audit-log.ts

@@ -0,0 +1,80 @@
+import fs from "node:fs";
+import path from "node:path";
+
+type AuditLevel = "INFO" | "WARN" | "ERROR";
+
+let auditLogPath: string | null = null;
+
+function sanitizeFieldValue(value: unknown): string {
+  if (value === undefined || value === null) {
+    return "";
+  }
+  if (typeof value === "string") {
+    return value.replace(/\r?\n/g, "\\n");
+  }
+  if (typeof value === "number" || typeof value === "boolean") {
+    return String(value);
+  }
+  try {
+    return JSON.stringify(value).replace(/\r?\n/g, "\\n");
+  } catch {
+    return String(value);
+  }
+}
+
+function formatFields(fields?: Record<string, unknown>): string {
+  if (!fields) {
+    return "";
+  }
+  const parts = Object.entries(fields)
+    .filter(([, value]) => value !== undefined && value !== null && sanitizeFieldValue(value) !== "")
+    .map(([key, value]) => `${key}=${sanitizeFieldValue(value)}`);
+  return parts.length > 0 ? ` | ${parts.join(" | ")}` : "";
+}
+
+export function initAuditLog(baseDir: string): void {
+  auditLogPath = path.join(baseDir, "audit.log");
+  try {
+    fs.mkdirSync(path.dirname(auditLogPath), { recursive: true });
+    if (!fs.existsSync(auditLogPath)) {
+      fs.writeFileSync(auditLogPath, "", "utf8");
+    }
+    fs.appendFileSync(auditLogPath, `=== Audit-Log Start: ${new Date().toISOString()} ===\n`, "utf8");
+  } catch {
+    auditLogPath = null;
+  }
+}
+
+export function logAuditEvent(level: AuditLevel, message: string, fields?: Record<string, unknown>): void {
+  if (!auditLogPath) {
+    return;
+  }
+  try {
+    fs.appendFileSync(
+      auditLogPath,
+      `${new Date().toISOString()} [${level}] ${message}${formatFields(fields)}\n`,
+      "utf8"
+    );
+  } catch {
+    // ignore write errors
+  }
+}
+
+export function getAuditLogPath(): string | null {
+  if (!auditLogPath) {
+    return null;
+  }
+  return fs.existsSync(auditLogPath) ? auditLogPath : null;
+}
+
+export function shutdownAuditLog(): void {
+  if (!auditLogPath) {
+    return;
+  }
+  try {
+    fs.appendFileSync(auditLogPath, `=== Audit-Log Ende: ${new Date().toISOString()} ===\n`, "utf8");
+  } catch {
+    // ignore
+  }
+  auditLogPath = null;
+}