Implement structured logging for API routes (P3.7)

Replace console.error with pino structured logger across API routes
and add key event logging per observability spec:
- Auth failure (warn): reason
- Period logged (info): userId, date
- Override toggled (info): userId, override, enabled
- Decision calculated (info): userId, decision, reason
- Error events (error): err object with stack trace

Files updated:
- auth-middleware.ts: Added structured logging for auth failures
- cycle/period/route.ts: Added Period logged event + error logging
- calendar/[userId]/[token].ics/route.ts: Replaced console.error
- overrides/route.ts: Added Override toggled events
- today/route.ts: Added Decision calculated event

Tests: 720 passing (added 3 new structured logging tests)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

src/app/api/calendar/[userId]/[token].ics/route.ts

@@ -3,6 +3,7 @@
 import { type NextRequest, NextResponse } from "next/server";
 
 import { generateIcsFeed } from "@/lib/ics";
+import { logger } from "@/lib/logger";
 import { createPocketBaseClient } from "@/lib/pocketbase";
 
 interface RouteParams {
@@ -61,8 +62,7 @@ export async function GET(_request: NextRequest, { params }: RouteParams) {
       return NextResponse.json({ error: "User not found" }, { status: 404 });
     }
 
-    // Re-throw unexpected errors
-    console.error("Calendar feed error:", error);
+    logger.error({ err: error, userId }, "Calendar feed error");
     return NextResponse.json(
       { error: "Internal server error" },
       { status: 500 },

src/app/api/cycle/period/route.ts

@@ -5,6 +5,7 @@ import { NextResponse } from "next/server";
 
 import { withAuth } from "@/lib/auth-middleware";
 import { getCycleDay, getPhase } from "@/lib/cycle";
+import { logger } from "@/lib/logger";
 import { createPocketBaseClient } from "@/lib/pocketbase";
 
 interface PeriodLogRequest {
@@ -80,6 +81,9 @@ export const POST = withAuth(async (request: NextRequest, user) => {
     const cycleDay = getCycleDay(lastPeriodDate, user.cycleLength, new Date());
     const phase = getPhase(cycleDay);
 
+    // Log successful period logging per observability spec
+    logger.info({ userId: user.id, date: body.startDate }, "Period logged");
+
     return NextResponse.json({
       message: "Period start date logged successfully",
       lastPeriodDate: body.startDate,
@@ -87,7 +91,7 @@ export const POST = withAuth(async (request: NextRequest, user) => {
       phase,
     });
   } catch (error) {
-    console.error("Period logging error:", error);
+    logger.error({ err: error, userId: user.id }, "Period logging error");
     return NextResponse.json(
       { error: "Failed to update period date" },
       { status: 500 },

src/app/api/overrides/route.ts

@@ -4,6 +4,7 @@ import type { NextRequest } from "next/server";
 import { NextResponse } from "next/server";
 
 import { withAuth } from "@/lib/auth-middleware";
+import { logger } from "@/lib/logger";
 import { createPocketBaseClient } from "@/lib/pocketbase";
 import type { OverrideType } from "@/types";
 
@@ -59,6 +60,12 @@ export const POST = withAuth(async (request: NextRequest, user) => {
     .collection("users")
     .update(user.id, { activeOverrides: newOverrides });
 
+  // Log override toggle per observability spec
+  logger.info(
+    { userId: user.id, override: overrideToAdd, enabled: true },
+    "Override toggled",
+  );
+
   return NextResponse.json({ activeOverrides: newOverrides });
 });
 
@@ -98,5 +105,11 @@ export const DELETE = withAuth(async (request: NextRequest, user) => {
     .collection("users")
     .update(user.id, { activeOverrides: newOverrides });
 
+  // Log override toggle per observability spec
+  logger.info(
+    { userId: user.id, override: overrideToRemove, enabled: false },
+    "Override toggled",
+  );
+
   return NextResponse.json({ activeOverrides: newOverrides });
 });

src/app/api/today/route.ts

@@ -11,6 +11,7 @@ import {
   PHASE_CONFIGS,
 } from "@/lib/cycle";
 import { getDecisionWithOverrides } from "@/lib/decision-engine";
+import { logger } from "@/lib/logger";
 import { getNutritionGuidance } from "@/lib/nutrition";
 import { createPocketBaseClient } from "@/lib/pocketbase";
 import type { DailyData, DailyLog, HrvStatus } from "@/types";
@@ -99,6 +100,12 @@ export const GET = withAuth(async (_request, user) => {
   // Get training decision with override handling
   const decision = getDecisionWithOverrides(dailyData, user.activeOverrides);
 
+  // Log decision calculation per observability spec
+  logger.info(
+    { userId: user.id, decision: decision.status, reason: decision.reason },
+    "Decision calculated",
+  );
+
   // Get nutrition guidance
   const nutrition = getNutritionGuidance(cycleDay);