feat(scripts): Log global on the compile surface and both Test Run sandboxes; trust-gate pin (D4)

src/ZB.MOM.WW.ScadaBridge.CentralUI/ScriptAnalysis/SandboxScriptHost.cs

@@ -87,6 +87,56 @@ public class SandboxScriptHost
     /// would show a spurious CS1061 on a script that deploys and runs perfectly.
     /// </summary>
     public SandboxAlarmsAccessor Alarms { get; } = new();
+
+    /// <summary>
+    /// Sandbox mirror of the site runtime's <c>Log</c> global (step logs design 2026-09-09 D4).
+    /// Present so a script that logs BINDS in the Test Run editor; lines go to the Test Run
+    /// console pane and are never audited.
+    /// </summary>
+    public SandboxLog Log { get; } = new();
+}
+
+/// <summary>
+/// Sandbox mirror of <c>ZB.MOM.WW.ScadaBridge.SiteRuntime.Scripts.ScriptLogger</c> (step logs
+/// design 2026-09-09 D4). Signature-faithful so the same script body compiles here and at a site,
+/// but a Test Run has no execution to trace and no audit trail: every line is written to
+/// <see cref="Console.Out"/>, which the sandbox captures into
+/// <c>SandboxRunResult.ConsoleOutput</c> (see <see cref="SandboxConsoleCapture"/>) and shows in
+/// the editor's console pane. Nothing here reaches the node log or the audit log.
+/// </summary>
+public class SandboxLog
+{
+    /// <summary>Writes a debug-level line to the Test Run console pane.</summary>
+    /// <param name="message">The message text.</param>
+    /// <param name="exception">An optional exception, rendered on a following line.</param>
+    public void Debug(string message, Exception? exception = null) => Write("debug", message, exception);
+
+    /// <summary>Writes an information-level line to the Test Run console pane.</summary>
+    /// <param name="message">The message text.</param>
+    /// <param name="exception">An optional exception, rendered on a following line.</param>
+    public void Info(string message, Exception? exception = null) => Write("info", message, exception);
+
+    /// <summary>Writes a warning-level line to the Test Run console pane.</summary>
+    /// <param name="message">The message text.</param>
+    /// <param name="exception">An optional exception, rendered on a following line.</param>
+    public void Warn(string message, Exception? exception = null) => Write("warn", message, exception);
+
+    /// <summary>
+    /// Writes an error-level line to the Test Run console pane. Like the runtime logger, this
+    /// does NOT fail the run — it is a message, not a throw.
+    /// </summary>
+    /// <param name="message">The message text.</param>
+    /// <param name="exception">An optional exception, rendered on a following line.</param>
+    public void Error(string message, Exception? exception = null) => Write("error", message, exception);
+
+    private static void Write(string level, string message, Exception? exception)
+    {
+        Console.Out.WriteLine($"[{level}] {message}");
+        if (exception != null)
+        {
+            Console.Out.WriteLine(exception.ToString());
+        }
+    }
 }
 
 /// <summary>
@@ -193,6 +243,12 @@ public class SandboxInstanceContext
     /// </summary>
     public SandboxScriptCallHelper Scripts { get; }
 
+    /// <summary>
+    /// Sandbox mirror of <c>ScriptRuntimeContext.Log</c> (step logs design 2026-09-09 D4), so
+    /// <c>Instance.Log.Info("…")</c> binds and prints in the Test Run console pane.
+    /// </summary>
+    public SandboxLog Log { get; } = new();
+
     /// <summary>
     /// Initializes a new instance of the SandboxInstanceContext.
     /// </summary>