Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
var Log zerolog.Logger
Log is the package-level structured logger. Call Init before using.
Functions ¶
func Init ¶
func Init(env string)
Init configures the global logger for the given environment. All output passes through RedactWriter to strip sensitive field values.
func RequestLogger ¶
func RequestLogger( record func(tenantID string, durationUs int64, fromCache bool), observe func(tenantID string, us float64), tap func(RequestTap), ) func(http.Handler) http.Handler
RequestLogger returns a chi-compatible middleware that logs each request with zerolog. The Authorization header is intentionally NOT logged — only method, path, status, duration, tenant_id, and request_id are recorded. record receives duration in microseconds and a fromCache flag (true = served from the response cache, detected via the X-Cache: HIT header set by the cache middleware). observe receives duration in microseconds as float64. tap receives a fully-populated RequestTap. All three callbacks are optional (nil-safe).
func SetDefaultWriter ¶ added in v0.1.4
SetDefaultWriter redirects where subsequent Init calls send log output. Call it before the engine boots (appximo.New re-runs Init).
Types ¶
type PGXQueryTracer ¶
type PGXQueryTracer struct{}
PGXQueryTracer implements pgx.QueryTracer and logs SQL statements at DEBUG level WITHOUT their bound parameter values ($1, $2, …) to prevent accidental exfiltration of PII or sensitive data into structured logs.
func (PGXQueryTracer) TraceQueryEnd ¶
func (PGXQueryTracer) TraceQueryEnd(_ context.Context, _ *pgx.Conn, data pgx.TraceQueryEndData)
TraceQueryEnd is called after a query completes or fails.
func (PGXQueryTracer) TraceQueryStart ¶
func (PGXQueryTracer) TraceQueryStart(ctx context.Context, _ *pgx.Conn, data pgx.TraceQueryStartData) context.Context
TraceQueryStart is called before a query executes. Only the SQL template is logged — args are intentionally omitted.
type RedactWriter ¶
type RedactWriter struct {
// contains filtered or unexported fields
}
RedactWriter wraps an io.Writer and scrubs sensitive JSON field values before they reach the underlying writer. Applied to every structured log line.
func NewRedactWriter ¶
func NewRedactWriter(w io.Writer) RedactWriter
NewRedactWriter wraps w with sensitive-field redaction.
type RequestTap ¶
type RequestTap struct {
TenantID string
Method string
Path string
Route string
Status int
StartUS int64 // request start, unix microseconds
DurationUS int64
FromCache bool
TraceID string // 16-hex request trace id (also in X-Trace-ID)
Spans []observability.Span // per-stage breakdown from the SpanTracker
ErrMsg string // error message for an errored request ("" otherwise)
Capture *observability.ErrorCapture // symbolized stack for a 500 (nil otherwise)
IP string // client IP (X-Real-IP / X-Forwarded-For / RemoteAddr)
UserAgent string // raw User-Agent header
Headers map[string]string // filtered request headers (persisted traces only)
FullURL string // scheme://host/path?query (persisted traces only)
}
RequestTap carries the per-request facts a downstream consumer (Prometheus metrics, the per-tenant ring buffer) needs, so RequestLogger stays the single measurement point. Route is the chi route pattern (e.g. "/api/{entity}"), preferred over the raw Path for bounded metric/label cardinality.
Source Files