Function logAttempt

browse/src/security.ts:512–527

(record: AttemptRecord)

 * Returns true if the local write succeeded.
 */
export function logAttempt(record: AttemptRecord): boolean {
  // Fire telemetry first, async — even if local write fails, we still want
  // the event reported (it goes to a different directory anyway).
  reportAttemptTelemetry(record);
  try {
    mkdirSecure(SECURITY_DIR);
    rotateIfNeeded();
    const line = JSON.stringify(record) + '\n';
    appendSecureFile(ATTEMPTS_LOG, line);
    return true;
  } catch (err) {
    // Non-fatal. Log to stderr for debugging but don't block.
    console.error('[security] logAttempt write failed:', (err as Error).message);
    return false;
  }
}

// ─── Cross-process session state ─────────────────────────────