Struct DebugConfig 

pub struct DebugConfig {
    pub enabled: bool,
    pub sandbox: bool,
    pub trigger_header: String,
    pub trace_all: bool,
    pub capture_bodies: bool,
    pub max_body_bytes: usize,
    pub max_traces: usize,
    pub max_steps: usize,
    pub sandbox_timeout_seconds: u64,
    pub redact_headers: Vec<String>,
    pub redact_query_params: Vec<String>,
    pub redact_message_keys: Vec<String>,
}

Debug mode: per-request policy-execution tracing plus the plugin sandbox.

Off by default. Because system.yaml is read once at startup and never hot-reloaded, toggling debug mode requires a restart — which is also the safety property that keeps a compromised Admin API credential from switching on request-context capture.

debug:
  enabled: ${FEATHERBIT_DEBUG:-false}
  capture_bodies: ${FEATHERBIT_DEBUG_BODIES:-false}

Always keep the :- default in interpolated values: ${FEATHERBIT_DEBUG} with the variable unset expands to empty text, which YAML parses as null and serde then rejects for a bool.

Fields

enabled: bool

Master switch. When false nothing is traced and every /api/debug/* route except GET /api/debug/config responds 404.

sandbox: bool

Allows POST /api/debug/sandbox (only meaningful while enabled), so a deployment can trace requests without exposing plugin execution.

trigger_header: String

Request header whose presence opts a single request into tracing. Lowercased when the settings are resolved.

trace_all: bool

Trace every request instead of waiting for trigger_header. A firehose: it snapshots the context once per node for all traffic.

capture_bodies: bool

Capture request/response bodies in snapshots. Off by default because it is the expensive part; bodies are also the one thing redaction cannot clean.

max_body_bytes: usize

Per-body truncation limit, in bytes, when capture_bodies is on.

max_traces: usize

Ring-buffer capacity. 0 disables storage.

max_steps: usize

Maximum steps recorded per trace, bounding a runaway policy’s trace.

sandbox_timeout_seconds: u64

Deadline for one sandbox run, in seconds.

redact_headers: Vec<String>

Header names to redact in addition to the built-in denylist.

redact_query_params: Vec<String>

Query parameter names to redact in addition to the built-in denylist.

redact_message_keys: Vec<String>

context.message keys to redact in addition to the built-in denylist.

Trait Implementations

impl Clone for DebugConfig

fn clone(&self) -> DebugConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DebugConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for DebugConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for DebugConfig

where DebugConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.