merge: codex deploy fallback

# Conflicts:
#	AGENTS.md
#	TEST.md
#	config.json
#	deploy.json
#	docs/reference/cli.md
#	docs/reference/microservices.md
#	docs/reference/observability.md
#	scripts/cli.ts
#	scripts/src/microservices.ts
#	src/components/backend-core/src/microservice-proxy.ts
#	src/components/microservices/code-queue/src/index.ts
#	src/components/microservices/code-queue/src/queue-api.ts

scripts/src/docker.ts

@@ -1,8 +1,9 @@
-import { chmodSync, existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
+import { chmodSync, existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
 import { basename, dirname, join, resolve } from "node:path";
 import { commandOk, runCommand, tailFile } from "./command";
 import { type UniDeskConfig, repoRoot, rootPath } from "./config";
 import { startJob } from "./jobs";
+import { swapStatus } from "./swap";
 
 export interface ComposeRuntimeEnv {
   envFile: string;
@@ -436,6 +437,7 @@ export async function stackStatus(config: UniDeskConfig): Promise<unknown> {
   const overview = dockerExecJson("unidesk-backend-core", "fetch('http://127.0.0.1:8080/api/overview').then(r=>r.json()).then(j=>console.log(JSON.stringify({ok:true,status:200,body:j}))).catch(e=>{console.log(JSON.stringify({ok:false,error:String(e)}));process.exit(1)})");
   return {
     runtimeEnv,
+    swap: swapStatus(),
     publicPorts: fixedPorts(config),
     blockedPublicPorts: [
       { name: "backend-core-rest", port: config.network.core.port, listening: isPortListening(config.network.core.port), expected: "not-listening" },
@@ -500,11 +502,37 @@ export function stackLogs(config: UniDeskConfig, tailBytes: number): unknown {
   const allFiles = listLogFiles(logRoot);
   const currentFiles = allFiles.filter((path) => basename(path).startsWith(runtimeEnv.logPrefix));
   const selectedFiles = (currentFiles.length > 0 ? currentFiles : allFiles.slice(-12)).slice(-12);
-  const files = selectedFiles.map((path) => ({ path, name: basename(path), tail: tailFile(path, tailBytes) }));
+  const files = selectedFiles.map((path) => {
+    const sizeBytes = existsSync(path) ? statSync(path).size : 0;
+    const truncated = sizeBytes > tailBytes;
+    return { path, name: basename(path), sizeBytes, tailBytes, truncated, tail: tailFile(path, tailBytes) };
+  });
   const containerNames = ["unidesk-database", "unidesk-backend-core", "unidesk-frontend", "unidesk-provider-gateway-main", "todo-note-backend", "project-manager-backend", "baidu-netdisk-backend", "oa-event-flow-backend"];
   const docker = containerNames.map((name) => {
     const result = runCommand(["docker", "logs", "--tail", "40", name], repoRoot);
-    return { name, exitCode: result.exitCode, stdoutTail: result.stdout.slice(-tailBytes), stderrTail: result.stderr.slice(-tailBytes) };
+    return {
+      name,
+      exitCode: result.exitCode,
+      tailBytes,
+      stdoutBytes: Buffer.byteLength(result.stdout, "utf8"),
+      stderrBytes: Buffer.byteLength(result.stderr, "utf8"),
+      stdoutTruncated: Buffer.byteLength(result.stdout, "utf8") > tailBytes,
+      stderrTruncated: Buffer.byteLength(result.stderr, "utf8") > tailBytes,
+      stdoutTail: result.stdout.slice(-tailBytes),
+      stderrTail: result.stderr.slice(-tailBytes),
+    };
   });
-  return { logRoot, runtimeEnv, files, docker };
+  return {
+    logRoot,
+    runtimeEnv,
+    policy: {
+      defaultTailBytes: 3000,
+      requestedTailBytes: tailBytes,
+      selectedFileLimit: 12,
+      dockerTailLines: 40,
+      disclosure: "server logs returns tails only; increase with --tail-bytes for a larger bounded tail, and inspect listed paths directly for full logs.",
+    },
+    files,
+    docker,
+  };
 }