Server-side 404 detection/logging (request instrumentation)

Sub-tickets

Questions

Activity

• wi-cli-whey created · 2026-06-13
• wi-cli-whey spec · 2026-06-13
  Elazar ruled every 404 is a defect, but venus currently CANNOT capture server-side 404s — no /api middleware (WI#333) — so 404s never reach appEvents. Add request-level instrumentation to log server-side 404s at warn with route/path. Approach TBD by coder (middleware capture-only vs not-found instrumentation).
• wi-cli-whey completed · 2026-06-13
  Shipped b577fff/v0.59.19; audit PASS + PTD clean. New src/lib/server-http-errors.ts (notFoundJson→navigation/404; accessDeniedAs404→distinct authz event ≥1yr retention) wired at the 2 reportes/pdf API-404 sites; enumeration defense intact (identical 404 to client, server log splits dead-link vs authz-denial).