apidepth 0.2.0

data/lib/apidepth.rb

@@ -0,0 +1,68 @@
+# lib/apidepth.rb
+#
+# Main entry point. Require order matters:
+#   1. version       — no dependencies
+#   2. configuration — no dependencies
+#   3. vendor_registry — no dependencies, boots from BUNDLED_BASELINE immediately
+#   4. rate_limit_headers — no dependencies; used by net_http_instrumentation
+#   5. net_http_instrumentation — depends on vendor_registry + collector (via lazy reference)
+#   5. collector     — depends on configuration
+#   6. registry_loader — depends on collector + vendor_registry
+#   7. railtie       — depends on all of the above; only loaded in a Rails context
+
+require "logger"
+require "apidepth/version"
+require "apidepth/configuration"
+require "apidepth/event"
+require "apidepth/vendor_registry"
+require "apidepth/rate_limit_headers"
+require "apidepth/net_http_instrumentation"
+require "apidepth/collector"
+require "apidepth/registry_loader"
+require "apidepth/railtie" if defined?(Rails::Railtie)
+
+module Apidepth
+  class << self
+    attr_writer :logger
+
+    def logger
+      @logger ||= Logger.new($stdout)
+    end
+
+    def configure
+      yield(configuration)
+    end
+
+    def configuration
+      @configuration ||= Configuration.new
+    end
+
+    # Computed once and frozen. Included in every batch payload so the collector
+    # can correlate data quality issues with specific SDK versions, Ruby runtimes,
+    # and app servers without needing the customer to file a support ticket.
+    def sdk_metadata
+      @sdk_metadata ||= {
+        name: "apidepth-ruby",
+        version: VERSION,
+        ruby_version: RUBY_VERSION,
+        ruby_platform: RUBY_PLATFORM,
+        rails_version: (defined?(Rails) ? Rails.version : nil),
+        app_server: detect_app_server
+      }.compact.freeze
+    end
+
+    def detect_app_server
+      return "puma"      if defined?(Puma)
+      return "unicorn"   if defined?(Unicorn)
+      return "passenger" if defined?(PhusionPassenger)
+
+      "unknown"
+    end
+
+    # Strips line-break characters from untrusted strings before they reach
+    # log output. Prevents log injection (CVE-2025-27111 class of attack).
+    def sanitize_log(str)
+      str.to_s.gsub(/[\r\n\t]/, " ").slice(0, 200)
+    end
+  end
+end

metadata

@@ -0,0 +1,144 @@
+--- !ruby/object:Gem::Specification
+name: apidepth
+version: !ruby/object:Gem::Version
+  version: 0.2.0
+platform: ruby
+authors:
+- Apidepth
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: json
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.19.2
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.19.2
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.13'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.13'
+- !ruby/object:Gem::Dependency
+  name: webmock
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.23'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.23'
+- !ruby/object:Gem::Dependency
+  name: railties
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '6.1'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '6.1'
+- !ruby/object:Gem::Dependency
+  name: rack
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.2.12
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.2.12
+- !ruby/object:Gem::Dependency
+  name: rubocop
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.65'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.65'
+description: |
+  Apidepth instruments Net::HTTP to capture real production latency to
+  third-party APIs (Stripe, OpenAI, Twilio, etc.) and streams anonymized
+  timing data to the Apidepth collector for trend analysis and alerting.
+email:
+- hello@apidepth.io
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- LICENSE
+- README.md
+- lib/apidepth.rb
+- lib/apidepth/collector.rb
+- lib/apidepth/configuration.rb
+- lib/apidepth/event.rb
+- lib/apidepth/net_http_instrumentation.rb
+- lib/apidepth/railtie.rb
+- lib/apidepth/rate_limit_headers.rb
+- lib/apidepth/registry_loader.rb
+- lib/apidepth/vendor_registry.rb
+- lib/apidepth/version.rb
+homepage: https://apidepth.io
+licenses:
+- MIT
+metadata:
+  homepage_uri: https://apidepth.io
+  source_code_uri: https://github.com/apidepth/apidepth-ruby
+  changelog_uri: https://github.com/apidepth/apidepth-ruby/blob/main/CHANGELOG.md
+  bug_tracker_uri: https://github.com/apidepth/apidepth-ruby/issues
+  rubygems_mfa_required: 'true'
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 2.7.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 4.0.10
+specification_version: 4
+summary: Passive outbound API latency monitoring for Rails applications
+test_files: []