[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_212":213,"_214":215},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_17":18,"_40":-7,"_137":-5,"_19":138,"_139":140,"_141":142,"_143":144,"_145":146,"_21":147,"_148":-5,"_149":-5,"_150":24,"_151":152,"_153":100,"_154":-5,"_155":-5,"_156":157},"routes/_app.x.$handle.$name.branch.$branch.history_.$",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_25":26,"_27":28,"_29":24,"_30":-5},"handle","nbbaier","name","request-capture","branchName","main","path","main.ts","project",{"_34":88,"_13":14,"_38":89,"_90":-5,"_91":24,"_92":93,"_94":93,"_95":96,"_97":-5,"_30":67,"_98":63,"_99":100,"_101":-5,"_102":-5,"_103":26,"_42":43,"_104":-5,"_105":-5,"_106":-5,"_107":-5,"_108":109,"_110":109,"_111":112,"_113":112,"_114":112,"_115":109,"_116":109,"_52":117,"_118":119,"_120":121,"_122":24},"file",{"_62":63,"_13":18,"_64":86,"_66":24,"_87":-5},"isDirectory",false,"page",0,"history",[31,32,33],"hasNext","userId",{"_34":79,"_36":37,"_38":80,"_40":81,"_42":43,"_44":70,"_45":-5,"_46":74,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":82,"_21":83,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":84},{"_34":70,"_36":37,"_38":71,"_40":72,"_42":43,"_44":73,"_45":-5,"_46":74,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":75,"_21":76,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":77},{"_34":35,"_36":37,"_38":39,"_40":41,"_42":43,"_44":-5,"_45":-5,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":53,"_21":54,"_55":-5,"_56":-5,"_57":-5,"_58":-5,"_59":60},"id","1a3cedac-4f97-4a12-9dfa-d83d60a5090f","branchId","3183b296-5847-427a-9a53-e0c005bb1bde","createdAt",["D",1787033924524],"version",1,"orgId","5f80108f-7ca4-4327-b77b-089dbe4b5a82","parentId","incomingCommitId","aiChatMessageId","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle","source","clientLabel","user",{"_34":67,"_42":43,"_11":12,"_68":69},{"_62":63,"_13":18,"_64":65,"_66":24},"pull","merge","revert","multiple","commits",[61],{"_34":35,"_36":37,"_38":39,"_40":41,"_42":43,"_44":-5,"_45":-5,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":53,"_21":54,"_55":-5,"_56":-5,"_57":-5},"fileId","aa3d4398-9acc-11f1-9e1b-1607ee4eb77e","fileType","script","deleted","5d1042a9-7b0b-499d-8a72-3a8ac7a4e185","avatar","https://secure.gravatar.com/avatar/0129a541b7b3574e92c4afd06c5e32da&d=identicon","f4aa82c8-bc57-4c7b-a654-eda4ec5976e5",["D",1787033941866],4,"f64b9453-3a8e-450a-94a1-b6c8c51b2838","c0e1597a-a515-4884-b104-2f56cc6e5d72",{"_34":67,"_42":43,"_11":12,"_68":69},{"_62":63,"_13":18,"_64":65,"_66":24},[78],{"_34":70,"_36":37,"_38":71,"_40":72,"_42":43,"_44":73,"_45":-5,"_46":74,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":75,"_21":76,"_55":-5,"_56":-5,"_57":-5},"5afa543b-73e2-4fba-b202-72d39daa795c",["D",1787033943812],5,{"_34":67,"_42":43,"_11":12,"_68":69},{"_62":63,"_13":18,"_64":86,"_66":24},[85],{"_34":79,"_36":37,"_38":80,"_40":81,"_42":43,"_44":70,"_45":-5,"_46":74,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":82,"_21":83,"_55":-5,"_56":-5,"_57":-5},"http","deletedAtVersion","e41edbfa-0909-43a5-bb51-c38cadbbeed2",["D",1787033924484],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","HTTP middleware that snapshots requests to blob storage","imageUrl","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_11":12,"_136":69},"org",{"_11":12,"_132":-5,"_68":69,"_30":67,"_133":134,"_135":24},"branch",{"_40":123,"_13":16,"_34":37,"_124":88,"_125":-5,"_126":-5,"_127":-5,"_128":-5,"_129":-5,"_130":14,"_131":12},"isOwned",9,"projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","tier","pro","canRestrictVals","profileImageUrl","adoptOrgId",{"_34":88,"_13":14,"_38":208,"_90":-5,"_91":24,"_92":93,"_94":93,"_95":96,"_97":-5,"_30":67,"_98":63,"_99":100,"_101":-5,"_102":-5,"_103":26,"_42":43,"_104":-5,"_105":-5,"_106":-5,"_107":-5,"_108":109,"_110":109,"_111":112,"_113":112,"_114":112,"_115":109,"_116":109,"_52":209,"_118":210,"_120":211,"_122":24},"tree",[176,177,178,179],"files",[176,177,178,179],"counts",{"_166":26,"_167":41,"_168":26,"_169":170,"_171":172},"contents",[],{"_34":158,"_36":37,"_62":63,"_13":18,"_159":160,"_64":86,"_40":161,"_44":-5,"_38":162,"_163":81,"_164":14,"_17":165},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},"bd4a3c67-220f-4c4a-8734-c7e09e81e5d2","content","/**\n * Demo HTTP endpoint wired up with withRequestLogging from ./lib.ts.\n *\n * Every request to this endpoint is snapshotted into val blob storage.\n * Visit /log (below) to read back what was captured.\n */\nimport {\n listCaptures,\n pruneCaptures,\n withRequestLogging,\n} from \"./lib.ts\";\n\nexport default withRequestLogging(async (req: Request) => {\n const url = new URL(req.url);\n\n if (url.pathname === \"/log\") {\n const cap = await listCaptures();\n return Response.json(cap);\n }\n\n if (url.pathname === \"/_prune\") {\n const removed = await pruneCaptures(30 * 24 * 60 * 60 * 1000); // >30 days old\n return Response.json({ removed });\n }\n\n return Response.json({\n ok: true,\n path: url.pathname,\n note: \"Request captured to blob storage. See /log to inspect.\",\n });\n}, {\n captureBody: true, // also snapshot request bodies (via clone) in this demo\n});\n",2,["D",1787033943812],"branchVersion","label",[18],"pulls","branches","forks","envVars",{"_173":26,"_175":26},"connections",{"_173":26,"_174":26},"count","unfilledCount","emptyCount",{"_34":200,"_13":201,"_62":202,"_44":-5,"_36":37,"_163":203,"_183":100,"_38":204,"_40":26,"_64":21,"_159":205,"_66":24,"_164":-5,"_186":206,"_17":207},{"_34":192,"_13":193,"_62":194,"_44":-5,"_36":37,"_163":195,"_183":100,"_38":196,"_40":41,"_64":65,"_159":197,"_66":24,"_164":-5,"_186":198,"_17":199},{"_34":158,"_13":18,"_62":63,"_44":-5,"_36":37,"_163":81,"_183":100,"_38":189,"_40":161,"_64":86,"_159":160,"_66":24,"_164":14,"_186":190,"_17":191},{"_34":180,"_13":181,"_62":182,"_44":-5,"_36":37,"_163":123,"_183":100,"_38":184,"_40":161,"_64":21,"_159":185,"_66":24,"_164":-5,"_186":187,"_17":188},"e91f8654-0306-486f-8f8e-f41cc2bde141","vcr-plan.md","73b1e19a-a11f-11f1-9183-1607ee4eb77e","latest",["D",1787730639836],"# Turning request-capture into a VCR-style record/replay tool\n\n## The one thing that has to change\n\n`request-capture` today is **inbound** middleware. `withRequestLogging(handler)`\nsits at the server edge and snapshots requests *coming into* the val. There is no\nresponse in the blob because, at capture time, the handler hasn't run yet — so\nthere is nothing to \"replay\" in the VCR sense.\n\nVCR is **outbound**. A cassette records the requests *your code sends to an\nupstream service* **paired with the responses that service sends back**, then\nshort-circuits future outbound calls to return the stored response without\ntouching the network.\n\nSo this is not a feature to bolt on — it's a mirror-image tool. Different capture\nsite (outbound `fetch`, not the inbound handler), different payload (request +\nresponse, not request only), different injection point (the `fetch` your val\ncalls out with, not the handler it exports).\n\nRecommendation: build it as a **separate module** (`vcr.ts`) alongside the\nexisting inbound capture. Keep `request-capture` as-is — it's still the right tool\nfor reproducing production traffic against a dev deploy. Don't conflate the two.\n\n## 0. How a cassette is used in a test\n\nCassettes are a **test-only** tool. Production code calls the real `fetch`; tests\ninject the cassette `fetch`. The code under test is byte-identical in both worlds —\nthat's the point, and it's what makes the test trustworthy.\n\n**The seam.** Production code takes a `fetch`, defaulting to the real one. That\ndefault parameter is the only concession production makes:\n\n```ts\n// user-service.ts — production code, knows nothing about cassettes\nexport function makeGetUser(fetchImpl = fetch) {\n return async (id: number) => {\n const res = await fetchImpl(`https://api.example.com/users/${id}`);\n if (!res.ok) throw new Error(`upstream ${res.status}`);\n return res.json() as Promise<{ id: number; name: string }>;\n };\n}\n```\n\nIn production nobody passes anything, so it's the real `fetch`. The test injects\nthe cassette version instead:\n\n```ts\n// user-service.test.ts\nimport { makeGetUser } from \"./user-service.ts\";\nimport { makeCassetteFetch } from \"./vcr.ts\";\n\nDeno.test(\"getUser loads a user\", async () => {\n const fetch = makeCassetteFetch(\"users/get-one\"); // ← the only VCR-specific line\n const getUser = makeGetUser(fetch);\n\n const user = await getUser(1);\n\n assertEquals(user.id, 1);\n assertEquals(user.name, \"Leanne Graham\");\n});\n```\n\n**The two-phase lifecycle.** The same test, unchanged, runs two ways depending on\nwhether the cassette exists:\n\n- *First run (record).* No `cassettes:users/get-one` blob → the wrapped `fetch`\n calls the real API, records the request/response pair, and the assertions run\n against the live response. You review the cassette diff (nothing sensitive\n leaked) and commit it next to the test.\n- *Every run after (replay).* The blob exists → the wrapped `fetch` matches the\n outgoing request to a recorded interaction and returns the stored response with\n no network call. Fast, offline, deterministic, no rate limits, no flake. The\n assertions and the code under test never changed — the test can't tell.\n\nTwo things this depends on, both detailed later: CI must **fail** on a missing\ncassette rather than silently record (§3c), and refreshing means **delete the\ncassette and re-record** so the change shows up as a reviewable diff (§6).\n\n## 1. Move the capture point: wrap `fetch`, not the handler\n\nInstead of wrapping the exported handler, produce a `fetch`-compatible function\nthat the val injects wherever it calls out:\n\n```ts\nconst fetch = makeCassetteFetch(\"anthropic/messages\");\n// pass `fetch` into your SDK/client, or use it directly\nconst res = await fetch(\"https://api.anthropic.com/v1/messages\", { ... });\n```\n\nThe whole record/replay decision lives inside that wrapped `fetch`.\n\n## 2. Storage model: a cassette is a named collection of interactions\n\nToday: one blob per request, key `captures:`, shape\n`{ id, method, url, timestamp, headers, body? }`.\n\nVCR: one blob per **cassette**, key `cassettes:`, holding an ordered array\nof **interactions**, where an interaction is a matched request/response pair:\n\n```ts\ntype Interaction = {\n request: { method: string; url: string; headers: Record; body?: string };\n response: { status: number; headers: Record; body?: string };\n};\ntype Cassette = { name: string; version: 1; interactions: Interaction[] };\n```\n\nThat \"response paired to request\" is the piece the current capture is missing and\nthe reason replay isn't possible yet.\n\n## 3. The three pieces to build\n\n**a. Recording fetch (cassette absent).** Do the real `fetch`, read the response\nvia `res.clone()` so the caller still gets a live body, append the interaction to\nthe cassette, write the blob, return the real response.\n\n**b. Matcher (cassette present).** Given an outgoing request, find the first\n*unclaimed* interaction whose recorded request matches it. Define request identity\nexplicitly — start with `method + url`; add a canonicalized (key-sorted) JSON body\ncompare when the body is JSON. Mark each interaction claimed once consumed, so\nrepeated identical requests replay their responses **in recorded order** — that's\nwhat makes retries and polling deterministic. Make the matcher pluggable\n(`match?: (incoming, recorded) => boolean`) for volatile fields like timestamps or\nidempotency keys.\n\n**c. Replay / reconstruct (the actual \"replay\" you're missing).** On a match,\nbuild a real `Response` from the stored interaction and return it *without hitting\nthe network*:\n\n```ts\nreturn new Response(interaction.response.body, {\n status: interaction.response.status,\n headers: interaction.response.headers,\n});\n```\n\nThe calling code can't tell it wasn't live. That's the whole trick.\n\nMode is implied by cassette presence: no cassette → record; cassette → replay.\nAdd a CI guard: when `Deno.env.get(\"CI\")`, a missing cassette should **throw**\nrather than silently record (prevents CI making live calls).\n\n## 4. Redaction has to move to both sides — and not break matching\n\nCurrent redaction covers request headers only. Now:\n\n- Redact **response** bodies/headers too — upstream responses routinely contain\n tokens, signed URLs, PII.\n- Redaction runs on **record**. If you redact a field that's also used for\n matching, the matcher has to compare the *redacted* form on both sides, or\n exclude that field from identity. Easiest rule: never match on a redacted field.\n- Keep the existing \"scan before write, fail on unsafe cassette\" instinct — a\n committed cassette with a live key is worse than a broken test.\n\n## 5. What to keep unchanged\n\n- Blob storage as the backing store — fine. Cassettes are just bigger, fewer blobs.\n- `req.clone()` / `res.clone()` body discipline — same principle, now on both ends.\n- The redaction option surface — extend it, don't replace it.\n- `listCaptures` / `pruneCaptures` style helpers — mirror as\n `listCassettes` / `removeCassette`.\n\n## 6. Decisions you need to make\n\n- **Cassette granularity.** One cassette per test (VCR default, most reviewable\n diffs) vs one per upstream. Per-test is the better default.\n- **Refresh semantics.** effect-http-recorder deliberately has *no overwrite mode*\n — you delete the cassette and re-record, so the refresh is visible in the diff.\n Worth copying; it's a good constraint.\n- **Where `fetch` gets injected.** If your outbound calls go through an SDK that\n doesn't accept a custom `fetch`, you may need to monkeypatch `globalThis.fetch`\n for the duration of the test scope instead. Uglier, but sometimes the only hook.\n\n- **Where cassettes live (open question).** Three options, and this is a\n correctness/artifact-model choice, not a performance one — at cassette scale\n (a few interactions, a few KB) replay is \"one round trip, then match in memory\"\n for all of them, and matching *can't* be pushed into a query anyway.\n - *Blob storage (current backing store).* Simplest record path (`blob.set`).\n But recording is read-modify-write of the whole cassette per interaction, so\n concurrent requests into one cassette are a lost-update race — a real problem\n given this plan allows concurrent recording. Mitigate by serializing writes,\n or keep one-blob-per-interaction and assemble the cassette at teardown.\n - *SQLite (one row per interaction).* Kills the concurrency race — a single\n `INSERT` in a transaction has no read-modify-write. Cheaper appends too. But\n the query engine goes unused (matching stays in memory), and you lose the\n diffable artifact: a val-scoped DB isn't reviewable in a PR.\n - *Files in the val (most VCR-faithful).* Preserves the property that makes\n cassettes worth it — a committed, diffable artifact, \"delete to refresh, diff\n shows what changed.\" The catch on Val Town: runtime-writing a val file goes\n through the API, not the blob SDK, so the record path is clunkier.\n\n Rough guidance: decide by whether the **diffable artifact** matters (it's most\n of why cassettes beat hand-written mocks — lean files) or whether **concurrent\n recording** is real for your tests (lean SQLite, or serialize blob writes).\n Don't switch off blob for performance alone; you won't observe it.\n\n## 7. Limitations to accept up front\n\n- Bodies are **buffered** on record and replay, so this won't test streaming\n timing, cancellation, or backpressure. (Same limitation effect-http-recorder\n documents. Fine for provider integration tests.)\n- Binary response bodies need base64 encoding in the cassette; text stays readable.\n- This is a test-time tool. Nothing here belongs in a production request path.\n\n## Reference\n\nPrior art with the same model, worth reading before building: Ruby `vcr`,\nJS `nock` / `polly-js` / `msw`, and `anomalyco/effect-http-recorder` (Effect 4,\ngood cassette-format and matcher design — note it explicitly does **not** run on\nWorkers/Deno, so it's reference only, not a dependency).\n","children",[],[181],["D",1787033943812],[],[18],"3167caee-add3-4b20-9e16-e7e9b94ac7c2","lib.ts","b0a8fe84-9acc-11f1-9ce8-1607ee4eb77e",3,["D",1787033937487],"/**\n * request-capture — HTTP request logging middleware for Val Town.\n *\n * Wrap any HTTP handler and every request it receives is snapshotted\n * into val-scoped blob storage as a serializable object:\n *\n * import { withRequestLogging } from \"https://esm.town/v/nbbaier/request-capture/lib.ts\";\n *\n * export default withRequestLogging(async (req: Request) => {\n * return Response.json({ ok: true, path: new URL(req.url).pathname });\n * });\n *\n * The captured record includes method, url, timestamp, an id, and headers\n * (sensitive ones redacted). The request body is NOT consumed by default so\n * the wrapped handler still gets to read it. Retrieval helpers below.\n */\n\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\n\n/** The serializable record persisted per captured request. */\nexport interface CapturedRequest {\n /** Unique id for this capture, in `captures:` blob key form later. */\n id: string;\n method: string;\n url: string;\n /** Unix timestamp in milliseconds. */\n timestamp: number;\n /** ISO datetime string. */\n time: string;\n headers: Record;\n /**\n * The request body, captured iff `options.captureBody` is true.\n * Returns undefined when body wasn't captured (the default).\n */\n body?: string;\n}\n\n/** Headers that commonly hold secrets and are redacted by default. */\nconst SENSITIVE_HEADERS = new Set([\n \"authorization\",\n \"proxy-authorization\",\n \"cookie\",\n \"set-cookie\",\n \"x-api-key\",\n \"api-key\",\n \"x-val-town-user\",\n]);\n\nexport interface RequestLoggingOptions {\n /** Capture the request body? Requires cloning the request; default false. */\n captureBody?: boolean;\n /**\n * Callback invoked with the capture after it's persisted. Use for\n * additional fan-out (log lines, other stores). Errors here don't\n * break the wrapped handler.\n */\n onCaptured?: (capture: CapturedRequest) => Promise | void;\n /** Max body bytes to capture when captureBody is true (default 64 KB). */\n maxBodyBytes?: number;\n /** Key prefix for stored captures (default \"captures\"). */\n keyPrefix?: string;\n}\n\n/** Builds the blob key for a capture id. */\nfunction captureKey(prefix: string, id: string): string {\n return `${prefix}:${id}`;\n}\n\n/** Hash a raw header name to a stable, mostly-readable pseudo-name. */\nfunction redactHeader(name: string): string {\n return `${name}:redacted`;\n}\n\nexport function withRequestLogging(\n handler: (req: Request) => Response | Promise,\n options: RequestLoggingOptions = {},\n): (req: Request) => Promise {\n const {\n captureBody = false,\n maxBodyBytes = 64 * 1024,\n keyPrefix = \"captures\",\n } = options;\n\n return async (req: Request): Promise => {\n const id = crypto.randomUUID();\n const timestamp = Date.now();\n const now = new Date(timestamp);\n\n // Build the serializable snapshot.\n const headers: Record = {};\n req.headers.forEach((value, key) => {\n headers[SENSITIVE_HEADERS.has(key) ? redactHeader(key) : key] = value;\n });\n\n const capture: CapturedRequest = {\n id,\n method: req.method,\n url: req.url,\n timestamp,\n time: now.toISOString(),\n headers,\n };\n\n // Optionally consume the body from a clone, leaving the original intact\n // for the wrapped handler.\n if (captureBody) {\n try {\n const cloned = req.clone();\n const text = await cloned.text();\n capture.body = text.length > maxBodyBytes\n ? text.slice(0, maxBodyBytes)\n : text;\n } catch {\n // Body unreadable (e.g. a streaming body) — skip it, not fatal.\n }\n }\n\n // Serialize once and persist. Punting on the id for anything else to attach.\n await blob.setJSON(captureKey(keyPrefix, id), capture);\n\n if (options.onCaptured) {\n // Fan out without letting a failure affect the handler.\n Promise.resolve(options.onCaptured(capture)).catch((err) => {\n console.error(\"request-capture: onCaptured hook failed\", err);\n });\n }\n\n return handler(req);\n };\n}\n\n/** Read back a single captured request. */\nexport async function readRequest(id: string, prefix = \"captures\"): Promise {\n return await blob.getJSON(captureKey(prefix, id));\n}\n\n/** List all captured request blobs (optionally filtered), newest first. */\nexport async function listCaptures(prefix = \"captures\", limit = 100): Promise {\n const entries = (await blob.list(prefix + \":\")).sort((a, b) =>\n b.key.localeCompare(a.key)\n );\n const out: CapturedRequest[] = [];\n for (const { key } of entries.slice(0, limit)) {\n const cap = await blob.getJSON(key);\n if (cap) out.push(cap);\n }\n return out;\n}\n\n/** Remove captures older than the given age in milliseconds. Returns count removed. */\nexport async function pruneCaptures(olderThanMs: number, prefix = \"captures\"): Promise {\n const nowMs = Date.now();\n const cutoff = nowMs - olderThanMs;\n const entries = await blob.list(prefix + \":\");\n let removed = 0;\n for (const { key, lastModified } of entries) {\n if (new Date(lastModified).getTime() < cutoff) {\n await blob.delete(key);\n removed++;\n }\n }\n return removed;\n}\n",[],[193],"309161e6-4445-4ef4-8756-5b5733d43d57","README.md","bd30efb8-9acc-11f1-9134-1607ee4eb77e",6,["D",1787033956323],"# request-capture\n\nA drop-in HTTP middleware for Val Town that snapshots every incoming request into\nval-scoped **blob storage** as a serializable object, without disturbing the handler\nyou wrap.\n\n## Usage in your own HTTP val\n\nImport and wrap your handler:\n\n```ts\nimport { withRequestLogging } from \"https://esm.town/v/nbbaier/request-capture/lib.ts\";\n\nexport default withRequestLogging(async (req: Request) => {\n return Response.json({ ok: true });\n});\n```\n\nBy default each request is stored as a blob under `captures:` containing:\n\n```ts\n{\n id: string; // uuid\n method: string;\n url: string;\n timestamp: number; // ms\n time: string; // ISO\n headers: Record;\n body?: string; // only when captureBody is enabled\n}\n```\n\nSensitive headers (`authorization`, `cookie`, `set-cookie`, `x-api-key`, …) are\nredacted to `name:redacted` so secrets never land in storage.\n\n### Options\n\n```ts\nwithRequestLogging(handler, {\n captureBody: true, // snapshot the body via req.clone()\n maxBodyBytes: 64 * 1024, // cap body capture size\n keyPrefix: \"captures\", // blob key prefix\n onCaptured: (cap) => console.log(cap.url), // fan out (fire-and-forget)\n});\n```\n\nThe body is **not consumed** unless `captureBody` is set, so the wrapped handler can\nstill read it. Even with body capture, it reads a clone — the original stays intact.\n\n## Reading captures\n\n```ts\nimport { listCaptures, readRequest, pruneCaptures } from \"https://esm.town/v/nbbaier/request-capture/lib.ts\";\n\nconst all = await listCaptures(); // newest first, capped at `limit`\nconst one = await readRequest(id);\nconst removed = await pruneCaptures(7 * 24 * 60 * 60 * 1000); // delete old ones\n```\n\n## Demo\n\nThe live endpoint wraps its own handler and exposes two inspection routes:\n\n- `GET /log` — list every captured request\n- `GET /_prune` — delete captures older than 30 days\n",[],[201],["D",1787033924484],{"_11":12,"_136":69},{"_11":12,"_132":-5,"_68":69,"_30":67,"_133":134,"_135":24},{"_40":123,"_13":16,"_34":37,"_124":88,"_125":-5,"_126":-5,"_127":-5,"_128":-5,"_129":-5,"_130":14,"_131":12},"ctx",{"_52":-5,"_155":245,"_246":247,"_248":249,"_250":24,"_251":24,"_252":24,"_253":100,"_254":-5,"_255":-7,"_256":-7,"_257":26,"_258":24,"_259":24,"_260":-5,"_261":24,"_262":24,"_263":24,"_264":-5},"ENV",{"_216":217,"_218":219,"_220":16,"_221":222,"_223":224,"_225":226,"_227":228,"_229":230,"_231":232,"_233":234,"_235":236,"_237":238,"_239":240,"_241":242,"_243":244},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · main.ts