IDebug is experimental. Prefer enabling only in development.
Introduction

IDebug Documentation

IDebug

In-process debugging for Node and React

Trace HTTP requests, middleware, function I/O, and database queries into a bounded memory store. Inspect sessions in a Swagger-like UI at /__idebug, or open the React overlay in the browser — no self-hosted backend required.

IDebug is a dev-only toolkit. Enable it while you reproduce bugs; leave it off in production.

What you get

SurfacePackageWhat it does
Shared core@idebug/coreSessions, ALS context, ring buffer, redaction, HTTP API handler
Express@idebug/nodeMiddleware + UI mount + logFunction / logModule
NestJS@idebug/nestModule, @Loggable(), interceptor, UI at /__idebug
Database@idebug/dbPrisma / TypeORM / Drizzle / Knex / Mongoose / Sequelize queries
Server UI@idebug/uiAlignUI + Baselayer-themed SPA (light/dark)
React@idebug/reactFetch/XHR patches + floating overlay

Start here

Quickstart →

CLI init or manual wire — open the inspector in minutes.

Installation →

Monorepo, workspace packages, and idebug init.

Express guide →

Middleware order, UI mount, and function wrapping.

NestJS guide →

IDebugModule.forRoot, Loggable, and the performance interceptor.

React guide →

Browser SDK, overlay, and network event capture.

Database monitor →

Nest SQL under the service that issued it — sample on :3003.

Debug UI →

Request path, call tree, enter/exit timeline, app-only filter.

Security posture →

Host checks, loopback guard, tokens, DNS rebinding.

Samples →

Express :3001, Nest :3002, DB :3003, React :5173 demos.

Design principles

  1. In-process — no remote ingest; data never leaves your Node process unless you add that yourself.
  2. Concurrent-safe — request sessions use AsyncLocalStorage (not a global session id).
  3. Bounded memory — ring buffer with hard caps so a long-lived dev server does not leak forever.
  4. Redacted by default — secrets in headers/bodies become *** before storage.
  5. Double-point paths — function wrappers emit enter + exit so the UI shows request → outer → inner → outer → response.

Not in scope

Self-hosted multi-app platforms, AI root-cause analysis, production telemetry SaaS, and authenticated multi-tenant dashboards are intentionally out of scope for this track. See Architecture.