From ead48077972b175a4aaa759d6649eb98639641a1 Mon Sep 17 00:00:00 2001
From: Lauren ten Hoor <laurentenhoor@gmail.com>
Date: Wed, 11 Feb 2026 03:21:29 +0800
Subject: [PATCH] feat: implement automatic log truncation to maintain last 250
 entries

---
 lib/audit.ts | 20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

diff --git a/lib/audit.ts b/lib/audit.ts
index 4aaea20..4a2e3b2 100644
--- a/lib/audit.ts
+++ b/lib/audit.ts
@@ -1,10 +1,13 @@
 /**
  * Append-only NDJSON audit logging.
  * Every tool call automatically logs — no manual action needed from agents.
+ * Automatically truncates log to keep only last 250 lines.
  */
-import { appendFile, mkdir } from "node:fs/promises";
+import { appendFile, mkdir, readFile, writeFile } from "node:fs/promises";
 import { join, dirname } from "node:path";
 
+const MAX_LOG_LINES = 250;
+
 export async function log(
   workspaceDir: string,
   event: string,
@@ -18,6 +21,7 @@ export async function log(
   });
   try {
     await appendFile(filePath, entry + "\n");
+    await truncateIfNeeded(filePath);
   } catch (err: unknown) {
     // If directory doesn't exist, create it and retry
     if ((err as NodeJS.ErrnoException).code === "ENOENT") {
@@ -27,3 +31,17 @@ export async function log(
     // Audit logging should never break the tool — silently ignore other errors
   }
 }
+
+async function truncateIfNeeded(filePath: string): Promise<void> {
+  try {
+    const content = await readFile(filePath, "utf-8");
+    const lines = content.split("\n").filter(line => line.length > 0);
+
+    if (lines.length > MAX_LOG_LINES) {
+      const keptLines = lines.slice(-MAX_LOG_LINES);
+      await writeFile(filePath, keptLines.join("\n") + "\n", "utf-8");
+    }
+  } catch {
+    // Silently ignore truncation errors — log remains intact
+  }
+}