Harden support logging and debug setup

tests/audit-log.test.ts

@@ -29,4 +29,20 @@ describe("audit-log", () => {
     expect(content).toContain("Settings changed");
     expect(content).toContain("changedKeys");
   });
+
+  it("rotates oversized audit logs on startup", () => {
+    const baseDir = fs.mkdtempSync(path.join(os.tmpdir(), "rd-alog-rotate-"));
+    tempDirs.push(baseDir);
+
+    const oversizedPath = path.join(baseDir, "audit.log");
+    fs.mkdirSync(baseDir, { recursive: true });
+    fs.writeFileSync(oversizedPath, "x".repeat(10 * 1024 * 1024 + 256), "utf8");
+
+    initAuditLog(baseDir);
+
+    expect(fs.existsSync(oversizedPath)).toBe(true);
+    expect(fs.existsSync(`${oversizedPath}.old`)).toBe(true);
+    const content = fs.readFileSync(oversizedPath, "utf8");
+    expect(content).toContain("Audit-Log Start");
+  });
 });

tests/debug-server.test.ts

@@ -341,6 +341,7 @@ describe("debug-server", () => {
     expect(manifest.debugServer?.port).toBeGreaterThan(0);
     expect(manifest.debugServer?.remoteBaseUrlTemplate).toContain("<SERVER_IP_OR_DNS>");
     expect(manifest.quickstart?.[1]).toContain("server IP");
+    expect(manifest.setupCheckEndpoint).toBe("/debug/setup");
     expect(manifest.runtimeFiles?.tokenFile).toContain("debug_token.txt");
     expect(manifest.endpoints?.some((entry: Record<string, any>) => entry.path === "/diagnostics")).toBe(true);
     expect(JSON.stringify(manifest)).not.toContain(fixture.token);
@@ -351,6 +352,24 @@ describe("debug-server", () => {
     expect(metaPayload.supportFiles?.aiManifest).toBe(manifestPath);
     expect(metaPayload.supportFiles?.traceConfig).toBe(getTraceConfigPath());
     expect(metaPayload.supportFiles?.traceLog).toBe(getTraceLogPath());
+    expect(metaPayload.supportChecks?.setup).toBe("/debug/setup");
+  });
+
+  it("serves a debug setup check with trace expiry details", async () => {
+    const fixture = await createFixture();
+    const response = await fetch(`${fixture.baseUrl}/debug/setup?token=${fixture.token}`);
+    expect(response.ok).toBe(true);
+    const payload = await response.json() as Record<string, any>;
+
+    expect(payload.enabled).toBe(true);
+    expect(payload.host).toBe("0.0.0.0");
+    expect(payload.localOnly).toBe(false);
+    expect(payload.tokenConfigured).toBe(true);
+    expect(payload.aiManifestPresent).toBe(true);
+    expect(payload.traceEnabled).toBe(true);
+    expect(payload.traceAutoDisableAt).toBeTruthy();
+    expect(payload.remoteUrlTemplates?.health).toContain("<SERVER_IP_OR_DNS>");
+    expect(Array.isArray(payload.notes)).toBe(true);
   });
 
   it("serves package details and package log by package query", async () => {
@@ -449,6 +468,7 @@ describe("debug-server", () => {
     const entries = zip.getEntries().map((entry) => entry.entryName);
     expect(entries).toContain("overview/settings.json");
     expect(entries).toContain("overview/accounts.json");
+    expect(entries).toContain("overview/debug-setup.json");
     expect(entries).toContain("overview/trace-config.json");
     expect(entries).toContain("logs/audit.log");
     expect(entries).toContain("logs/trace.log");

tests/trace-log.test.ts

@@ -48,6 +48,43 @@ describe("trace-log", () => {
 
     const traceConfig = getTraceConfig();
     expect(traceConfig.enabled).toBe(true);
+    expect(traceConfig.autoDisableAt).toBeTruthy();
     expect(JSON.parse(fs.readFileSync(traceConfigPath!, "utf8")).enabled).toBe(true);
   });
+
+  it("auto-disables support trace after the requested duration", async () => {
+    const baseDir = fs.mkdtempSync(path.join(os.tmpdir(), "rd-tlog-expire-"));
+    tempDirs.push(baseDir);
+
+    configureLogger(baseDir);
+    initTraceLog(baseDir);
+    setTraceEnabled(true, "expire-test", 50);
+
+    await new Promise((resolve) => setTimeout(resolve, 350));
+
+    const traceConfig = getTraceConfig();
+    expect(traceConfig.enabled).toBe(false);
+    expect(traceConfig.autoDisableAt).toBeNull();
+
+    const traceLogPath = getTraceLogPath();
+    expect(traceLogPath).not.toBeNull();
+    const traceContent = fs.readFileSync(traceLogPath!, "utf8");
+    expect(traceContent).toContain("Support-Trace automatisch deaktiviert");
+  });
+
+  it("rotates oversized trace logs on startup", () => {
+    const baseDir = fs.mkdtempSync(path.join(os.tmpdir(), "rd-tlog-rotate-"));
+    tempDirs.push(baseDir);
+
+    const oversizedPath = path.join(baseDir, "trace.log");
+    fs.mkdirSync(baseDir, { recursive: true });
+    fs.writeFileSync(oversizedPath, "x".repeat(10 * 1024 * 1024 + 256), "utf8");
+
+    initTraceLog(baseDir);
+
+    expect(fs.existsSync(oversizedPath)).toBe(true);
+    expect(fs.existsSync(`${oversizedPath}.old`)).toBe(true);
+    const currentContent = fs.readFileSync(oversizedPath, "utf8");
+    expect(currentContent).toContain("Trace-Log Start");
+  });
 });