[log] Add debug logger to cmd/proxy.go

[github-actions]

Adds a logProxyCmd = logger.New("cmd:proxy") debug logger to internal/cmd/proxy.go and 6 meaningful debug log calls.

Changes

File: internal/cmd/proxy.go

• Added var logProxyCmd = logger.New("cmd:proxy") — follows the pkg:filename convention and the logXxx naming pattern used across the codebase
• No new import needed — logger was already imported

Logging calls added

Location	Log message	Purpose
detectGuardWasm()	"Checking for baked-in guard at %s"	Visible before stat call
detectGuardWasm()	"Auto-detected baked-in guard: %s"	Confirms container image guard path
detectGuardWasm()	"Baked-in guard not found, --guard-wasm flag required"	Explains why flag is required
runProxy()	"Starting proxy: listen=%s, guard=%s, mode=%s, tls=%v"	Entry point summary
runProxy()	"Resolved GitHub API URL: %s, explicit flag=%v"	Shows resolved URL and whether it came from flag
runProxy()	"Generating TLS certificates in: %s"	Before potentially slow cert generation

Why this file?

cmd/proxy.go imports logger and uses logger.LogInfo (file logger) throughout but had no debug logger (logger.New()). The existing file-logger calls go to proxy.log always; the new debug calls only emit output when DEBUG=cmd:* or DEBUG=* is set, providing zero-overhead diagnostics for developers.

Testing

Enable with:

DEBUG=cmd:* ./awmg proxy --guard-wasm ... --listen 0.0.0.0:8443

Generated by Go Logger Enhancement · ◷

[Copilot]

Pull request overview

Adds a package-scoped debug logger for the proxy CLI subcommand and emits additional debug-level diagnostics to aid local troubleshooting without impacting normal log output.

Changes:

• Introduces logProxyCmd = logger.New("cmd:proxy") in internal/cmd/proxy.go.
• Adds debug log lines around baked-in guard detection, proxy startup configuration, GitHub API URL resolution, and TLS certificate generation.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The message "Baked-in guard not found" is logged for any os.Stat error. If the file exists but Stat fails (e.g., permission/IO error), this is misleading and hides the real cause. Consider branching on os.IsNotExist(err) for the 'not found' message, and otherwise log the error (or include it in the debug output) before returning.

Suggested change

	if _, err := os.Stat(containerGuardWasmPath); err == nil {
	logProxyCmd.Printf("Auto-detected baked-in guard: %s", containerGuardWasmPath)
	return containerGuardWasmPath
	}
	logProxyCmd.Print("Baked-in guard not found, --guard-wasm flag required")
	_, err := os.Stat(containerGuardWasmPath)
	if err == nil {
	logProxyCmd.Printf("Auto-detected baked-in guard: %s", containerGuardWasmPath)
	return containerGuardWasmPath
	}
	if os.IsNotExist(err) {
	logProxyCmd.Print("Baked-in guard not found, --guard-wasm flag required")
	} else {
	logProxyCmd.Printf("Error checking for baked-in guard at %s: %v", containerGuardWasmPath, err)
	}