feat: 请求日志 + 前端埋点系统

后端：
- 新增 logger 中间件，记录所有请求到 logs/ 目录
- 新增 /api/track 接口接收前端埋点数据

前端：
- 新增 tracker 工具，支持页面访问/操作/错误埋点
- request.ts 添加 API 错误自动埋点
- App.vue 初始化全局错误追踪

文档：
- CLAUDE.md 更新项目结构
- DEV.md 添加埋点和日志说明

server/src/index.ts

@@ -5,6 +5,7 @@ import rateLimit from 'express-rate-limit'
 import path from 'path'
 import fs from 'fs'
 import { authMiddleware } from './middleware/auth'
+import { requestLogger } from './middleware/logger'
 import { initDatabase } from './db/init'
 import pool from './db/connection'
 import authRoutes from './routes/auth'
@@ -20,6 +21,7 @@ import filterRoutes from './routes/filter'
 import adminRoutes from './routes/admin'
 import feedbackRoutes from './routes/feedback'
 import configRoutes from './routes/config'
+import trackRoutes from './routes/track'
 import { backupDatabase } from './utils/backup'
 
 // Warn if token secret is using default fallback
@@ -48,6 +50,9 @@ app.use(cors({
 }))
 app.use(express.json({ limit: '10kb' }))
 
+// 请求日志
+app.use(requestLogger)
+
 // 限流：登录接口 — 每分钟最多 10 次
 const authLimiter = rateLimit({
   windowMs: 60 * 1000,
@@ -153,6 +158,7 @@ app.use('/api/filters', apiLimiter, filterRoutes)
 app.use('/api/admin', apiLimiter, adminRoutes)
 app.use('/api/feedback', apiLimiter, feedbackRoutes)
 app.use('/api/config', apiLimiter, configRoutes)
+app.use('/api/track', trackRoutes)
 
 app.get('/api/health', async (_req, res) => {
   try {

server/src/middleware/logger.ts

@@ -0,0 +1,84 @@
+import { Request, Response, NextFunction } from 'express'
+import fs from 'fs'
+import path from 'path'
+
+// 日志目录
+const LOG_DIR = path.resolve(process.env.LOG_DIR || './logs')
+if (!fs.existsSync(LOG_DIR)) {
+  fs.mkdirSync(LOG_DIR, { recursive: true })
+}
+
+/** 获取当前日期字符串 YYYY-MM-DD */
+function getDateStr(): string {
+  const d = new Date()
+  return `${d.getFullYear()}-${String(d.getMonth() + 1).padStart(2, '0')}-${String(d.getDate()).padStart(2, '0')}`
+}
+
+/** 格式化时间 HH:mm:ss.SSS */
+function formatTime(date: Date): string {
+  return `${String(date.getHours()).padStart(2, '0')}:${String(date.getMinutes()).padStart(2, '0')}:${String(date.getSeconds()).padStart(2, '0')}.${String(date.getMilliseconds()).padStart(3, '0')}`
+}
+
+/** 写入日志文件 */
+function writeLog(level: string, message: string, meta?: Record<string, any>) {
+  const dateStr = getDateStr()
+  const logFile = path.join(LOG_DIR, `${dateStr}.log`)
+  const time = formatTime(new Date())
+  const metaStr = meta ? ` ${JSON.stringify(meta)}` : ''
+  const line = `[${time}] ${level} ${message}${metaStr}\n`
+
+  fs.appendFile(logFile, line, (err) => {
+    if (err) console.error('[Logger] Write error:', err)
+  })
+}
+
+/** 请求日志中间件 */
+export function requestLogger(req: Request, res: Response, next: NextFunction) {
+  const startTime = Date.now()
+  const { method, url, ip } = req
+
+  // 提取用户 ID（如果有 auth 中间件设置）
+  const userId = (req as any).userId
+
+  // 响应结束时记录日志
+  res.on('finish', () => {
+    const duration = Date.now() - startTime
+    const { statusCode } = res
+
+    const meta = {
+      method,
+      url,
+      status: statusCode,
+      duration: `${duration}ms`,
+      ip: ip || req.headers['x-forwarded-for'] || 'unknown',
+      userId: userId || null,
+      userAgent: req.headers['user-agent']?.slice(0, 100) || ''
+    }
+
+    if (statusCode >= 400) {
+      writeLog('ERROR', `${method} ${url} ${statusCode} ${duration}ms`, meta)
+    } else if (duration > 1000) {
+      writeLog('WARN', `Slow request: ${method} ${url} ${duration}ms`, meta)
+    } else {
+      writeLog('INFO', `${method} ${url} ${statusCode} ${duration}ms`, meta)
+    }
+  })
+
+  next()
+}
+
+/** 错误日志 */
+export function logError(message: string, error: Error | any, meta?: Record<string, any>) {
+  writeLog('ERROR', message, {
+    ...meta,
+    error: error?.message || String(error),
+    stack: error?.stack?.slice(0, 500) || ''
+  })
+}
+
+/** 业务日志 */
+export function logInfo(message: string, meta?: Record<string, any>) {
+  writeLog('INFO', message, meta)
+}
+
+export default { requestLogger, logError, logInfo }

server/src/routes/track.ts

@@ -0,0 +1,30 @@
+import { Router } from 'express'
+import { logInfo } from '../middleware/logger'
+
+const router = Router()
+
+/** 接收前端埋点数据 */
+router.post('/', (req, res) => {
+  try {
+    const { events } = req.body
+
+    if (!Array.isArray(events)) {
+      return res.status(400).json({ code: 40001, message: '无效的埋点数据' })
+    }
+
+    // 记录埋点事件
+    for (const event of events) {
+      logInfo(`[Track] ${event.event}`, {
+        page: event.page,
+        data: event.data,
+        userId: (req as any).userId || null
+      })
+    }
+
+    res.json({ code: 0 })
+  } catch {
+    res.json({ code: 0 }) // 埋点失败不影响业务
+  }
+})
+
+export default router