Logging

The minimum severity that will be emitted. The root mode option drives the defaults: with mode: 'development' the level defaults to debug and output is pretty-printed, colorized and carries caller file:line; otherwise it defaults to info with compact single-line JSON.

• debug— Everything, including verbose internal tracing. Ideal locally, far too noisy for production.
• info— Lifecycle and notable events. The default and a sensible production baseline.
• warn— Recoverable problems and suspicious conditions only.
• error— Failed operations only.
• fatal— Process-threatening failures only.

Allow-list of scopes to emit. Use "*" to enable everything (the default). Use a category wildcard like "authentication.*" to keep one subsystem. Provide exact scopes like "tenant.provision" for surgical focus. An empty array [] silences all scoped logs, leaving only unscoped framework messages.

Example: ["authentication.*", "tenant.provision", "entity.create"]

Multi-line, human-readable output. When false, each entry is a single JSON line — the right choice for log aggregators.

ANSI colors per level in console output.

Attach the real call site (file:line, skipping logger-internal frames) to every entry. Costs a stack capture per line — leave it off in production.

Extra context keys to mask as [REDACTED]. These EXTEND the built-in list (password, secret, token, apiKey, authorization, cookie, …) — the built-ins always apply. Matching is case-insensitive and recursive through nested context objects.

Example: ["customerTaxId", "iban"]

One completion line per request — ← METHOD /path STATUS (Nms) — with requestId, userId, authType, tenant, ip and durationMs, under scope middleware.request. Levels auto-select: 2xx/3xx → info, 4xx or slow → warn, 5xx → error.

Also emit a debug '→ METHOD /path' line when the request arrives — useful for spotting requests that never complete.

Include the query string in the logged path.

Requests slower than this log at warn with slow: true, regardless of status.

Paths to skip — exact matches or trailing-* prefixes like "/metrics*". Keeps probes and scrapers out of your logs.

How the scope tags above are produced: a subsystem calls logger.scoped('authentication.login') and every line it emits carries that scope. If the scope isn't in your allow-list the calls become genuine no-ops — filtering happens at the source, not just at output, so disabled scopes cost almost nothing.

Per-request child loggers carry a correlation id (shown as the first 8 chars in pretty output) and a merged context object, so every line from one request is traceable. Context is passed through redactSensitiveData first, so configured secret keys never reach a transport.

Console output follows prettyPrint/colorize/includeCallerInfo (defaulted from mode, overridable per key). BufferedTransport batches entries (flush at 100 or every 1s). Audit is part of the logger: a DatabaseAuditTransport persists audit entries to your audit table — addTransport/addAuditTransport let you attach more sinks.

Convenience emitters used across the framework: request() logs method/path/status and auto-selects level by status (5xx→error, 4xx→warn, else info); db() logs a query with table + duration + row count; time()/timeAsync() measure and log an operation's duration.

The same logger writes the immutable audit trail (see the Audit section). trace() can both log and conditionally write an audit entry in one call, gated by auditEnabled — which is why audit and logging share this one component.