feat(http,logging,har): add configurable request/response body limits and enhanced access logging

Add support for form parameter tracing, configurable body size limits via properties, and improved access logging with error-only mode.

Key changes:
- HAR middleware now respects http.har.maxBodySize property for per-body capture limits
- HTTP logger supports form parameter tracing independently of raw body capture
- New AccessLog and AccessLogErrorsOnly config options for single-line access logs
- Error responses (>= 400) and transport errors always log with body at INFO level
- Successful requests silent at INFO, visible at DEBUG and above
- Query parameters and form data displayed separately in pretty logging
- Enhanced header redaction with wildcard pattern support
- Improved verbosity level calculation for trace configuration

BREAKING CHANGE: NewLogger no longer accepts AccessLog config as a shortcut; use TraceConfig.AccessLog instead. The access log behavior has changed: error-only mode (AccessLogErrorsOnly) now surfaces failures at -v=0 without per-request spam.

Author: moshloop

har/har.go

@@ -2,8 +2,16 @@
 // capturing outbound request/response pairs for troubleshooting.
 package har
 
+import "github.com/flanksource/commons/properties"
+
 const defaultMaxBodySize = 64 * 1024 // 64 KB
 
+// MaxBodySizeProperty is the -P/properties key that overrides the default
+// per-body capture cap (in bytes). Set e.g. -P http.har.maxBodySize=1048576
+// to capture request/response bodies larger than the 64 KB default, or
+// -P http.har.maxBodySize=0 to capture full bodies with no cap.
+const MaxBodySizeProperty = "http.har.maxBodySize"
+
 // HARConfig controls what the HAR middleware captures and how it redacts.
 type HARConfig struct {
 	// MaxBodySize is the maximum number of bytes captured per body.
@@ -20,10 +28,13 @@ type HARConfig struct {
 	RedactedHeaders []string
 }
 
-// DefaultConfig returns a HARConfig with sensible defaults.
+// DefaultConfig returns a HARConfig with sensible defaults. The per-body
+// capture cap honours the MaxBodySizeProperty (-P http.har.maxBodySize=…)
+// override; an unset or unparseable value keeps the 64 KB default, and a
+// value <= 0 disables truncation (full bodies captured).
 func DefaultConfig() HARConfig {
 	return HARConfig{
-		MaxBodySize:         defaultMaxBodySize,
+		MaxBodySize:         int64(properties.Int(defaultMaxBodySize, MaxBodySizeProperty)),
 		CaptureContentTypes: []string{"application/json", "application/x-www-form-urlencoded"},
 	}
 }

har/har_test.go

@@ -0,0 +1,36 @@
+package har
+
+import (
+	"testing"
+
+	"github.com/flanksource/commons/properties"
+)
+
+func TestDefaultConfig_MaxBodySizeProperty(t *testing.T) {
+	cases := []struct {
+		name  string
+		value string
+		set   bool
+		want  int64
+	}{
+		{name: "unset keeps default", set: false, want: defaultMaxBodySize},
+		{name: "override raises cap", value: "1048576", set: true, want: 1048576},
+		{name: "zero disables truncation", value: "0", set: true, want: 0},
+		{name: "unparseable keeps default", value: "huge", set: true, want: defaultMaxBodySize},
+	}
+
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			value := ""
+			if tc.set {
+				value = tc.value
+			}
+			properties.Set(MaxBodySizeProperty, value)
+			defer properties.Set(MaxBodySizeProperty, "")
+
+			if got := DefaultConfig().MaxBodySize; got != tc.want {
+				t.Errorf("MaxBodySize = %d, want %d", got, tc.want)
+			}
+		})
+	}
+}