apidepth 0.2.2 → 0.2.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d1863cc44a0aa90d68dbae4bba31293e4d8154a3a92c1fa0030c3a0002cf5237
-  data.tar.gz: 881062b88799903817b01067cfad0227499402073cd8e58702de8eb5cbf00f3e
+  metadata.gz: f499652eea585017c268ea82a997a9e11af46e36c912b6f672fa91fd7d354eb4
+  data.tar.gz: aa70866eaf7876101236b986472ad14b24ea68bcaa9a38a68ed901d88e1f06b5
 SHA512:
-  metadata.gz: a3f798621d4d00f8c158ec0ed50b1c00fb8e215da5efaec04fe04a996c29eec97dcf746c355eb16336b98ac46655133f7a16f0c4325cbec7b20e3bff72b37fa3
-  data.tar.gz: 88da8b454854604520dd0d025eb08ece7da634adb8951f59bc9c6b1421d6440b6ce7a0d9d82413f740025d9df361a80f530c18c8359a7484ca5ce4bf3d24d43e
+  metadata.gz: 22a04205584e05a111b2422209733b4c06b0008dada3840caa340915d2d9ffb7195dec530c4791b692990812f357b4148a714da904ada5fba15e5b20f854460e
+  data.tar.gz: 607dca2a4455e60fcf21bd3502382107a3840b02ca23102a0dac4fc4c903c62101bf46b099210591182aa6350f229ffc0209f650a71076060c1e482b83340cee

data/lib/apidepth/collector.rb

@@ -92,16 +92,21 @@ module Apidepth
       end
     end
 
+    # Canonical test cases live in apidepth-collector/tests/fixtures/private_host_cases.json.
+    # All SDK implementations load that fixture and must pass every case. Any change here
+    # must be accompanied by a fixture update and a matching change in every other SDK.
     PRIVATE_HOST_PATTERN = /
       \Alocalhost\z          |
       \A127\.                |
       \A0\.0\.0\.0\z         |
+      \A0\z                  |
+
       \A169\.254\.           |
       \A10\.                 |
       \A172\.(1[6-9]|2\d|3[01])\. |
       \A192\.168\.           |
       \A\[?::1\]?\z          |
-      \A\[?fc                |
+      \A\[?f[cd]             |
       \A\[?fe80:
     /xi.freeze
 
@@ -287,7 +292,7 @@ module Apidepth
 
       if host.match?(/\A\d+\z/)
         int = host.to_i
-        if int.positive? && int <= 0xFFFFFFFF
+        if int >= 0 && int <= 0xFFFFFFFF
           host = [int >> 24, (int >> 16) & 0xFF, (int >> 8) & 0xFF,
                   int & 0xFF].join(".")
         end

data/lib/apidepth/registry_loader.rb

@@ -57,6 +57,11 @@ module Apidepth
 
       registry = JSON.parse(res.body)
 
+      # Apply registry-managed customer vendors and emit developer warnings.
+      # Must run before replace() so the vendor list is complete when it lands.
+      apply_customer_vendors(registry)
+      emit_warnings(registry)
+
       # Warm the disk cache so the next cold-start skips the network fetch.
       begin
         validate_cache_path!(Apidepth.configuration.registry_cache_path)
@@ -79,6 +84,103 @@ module Apidepth
       Thread.current[:apidepth_skip] = false
     end
 
+    # Apply the collector-managed customer_vendors from the registry response.
+    #
+    # The collector is the source of truth after first declaration. Registry
+    # vendors are loaded on top of locally-declared extra_vendors; registry wins
+    # on any host conflict. Conflict warnings are emitted once per vendor per
+    # process lifetime (see emit_warnings).
+    def self.apply_customer_vendors(registry)
+      remote = registry["customer_vendors"]
+      return unless remote.is_a?(Hash) && !remote.empty?
+
+      local = Apidepth.configuration.extra_vendors || {}
+
+      # Filter to string key-value pairs before passing to load_extra_vendors.
+      # The server response is trusted but load_extra_vendors calls .to_s on
+      # everything — a non-string key like 42 would silently register as "42".
+      clean = {}
+      remote.each do |name, remote_host|
+        next unless name.is_a?(String) && remote_host.is_a?(String)
+
+        clean[name] = remote_host
+        local_host = local[name]
+        # Track conflicts before overwriting — emit_warnings reads this later.
+        @mutex.synchronize do
+          if local_host && local_host != remote_host
+            @conflict_vendors ||= {}
+            @conflict_vendors[name] = { local: local_host, remote: remote_host }
+          end
+        end
+      end
+
+      VendorRegistry.load_extra_vendors(clean)
+    end
+
+    # Emit developer-facing warnings from the registry response.
+    #
+    # Stale vendor warning: vendor exists in registry but no events in 7+ days.
+    # Conflict warning:     local extra_vendors host differs from registry host.
+    #
+    # Both follow the warn-once pattern — an instance flag per vendor prevents
+    # log spam in long-running processes. Warnings fire on registry fetch, not
+    # on every event.
+    def self.emit_warnings(registry)
+      # Stale vendor warnings — sourced from the registry warnings block.
+      # Only present in responses from collector v0.3+; older cached responses skip.
+      warnings = registry["warnings"]
+      emit_stale_warnings(warnings["stale_vendors"]) if warnings.is_a?(Hash)
+
+      # Conflict warnings — collected by apply_customer_vendors, emitted here.
+      # Fires regardless of whether the registry has a warnings block, so that
+      # conflicts detected against a cached/older registry are still surfaced.
+      emit_conflict_warnings
+    end
+
+    def self.emit_stale_warnings(stale)
+      return unless stale.is_a?(Array)
+
+      to_warn = []
+      @mutex.synchronize do
+        @warned_stale ||= {}
+        stale.each do |name|
+          next unless name.is_a?(String)
+          next if @warned_stale[name]
+
+          @warned_stale[name] = true
+          to_warn << name
+        end
+      end
+
+      to_warn.each do |name|
+        Apidepth.logger&.warn(
+          "[Apidepth] No events received from '#{name}' in 7+ days — " \
+          "is it still declared in extra_vendors? If intentional, remove " \
+          "it at www.apidepth.io."
+        )
+      end
+    end
+
+    def self.emit_conflict_warnings
+      conflicts, = @mutex.synchronize do
+        c = @conflict_vendors || {}
+        @conflict_vendors = {}
+        @warned_conflict ||= {}
+        to_warn = c.reject { |name, _| @warned_conflict[name] }
+        to_warn.each_key { |name| @warned_conflict[name] = true }
+        [to_warn]
+      end
+
+      conflicts.each do |name, hosts|
+        Apidepth.logger&.warn(
+          "[Apidepth] extra_vendors conflict: '#{name}' is configured as " \
+          "'#{hosts[:local]}' locally but the registry has '#{hosts[:remote]}' " \
+          "— registry takes precedence. Update your initializer or remove " \
+          "the entry from your dashboard at www.apidepth.io."
+        )
+      end
+    end
+
     def self.load_from_disk
       path = Apidepth.configuration.registry_cache_path
 
@@ -115,6 +217,12 @@ module Apidepth
     # public class methods regardless of placement inside a private block.
     # private_class_method is the correct idiom.
     private_class_method :start_refresh_thread, :fetch_remote,
-                         :load_from_disk, :validate_cache_path!
+                         :load_from_disk, :validate_cache_path!,
+                         :apply_customer_vendors, :emit_warnings,
+                         :emit_stale_warnings, :emit_conflict_warnings
+
+    # Mutex protecting @conflict_vendors, @warned_stale, and @warned_conflict.
+    # Initialized at require time like VendorRegistry's own @mutex.
+    @mutex = Mutex.new
   end
 end

data/lib/apidepth/version.rb

@@ -1,5 +1,5 @@
 # lib/apidepth/version.rb
 
 module Apidepth
-  VERSION = "0.2.2".freeze
+  VERSION = "0.2.3".freeze
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: apidepth
 version: !ruby/object:Gem::Version
-  version: 0.2.2
+  version: 0.2.3
 platform: ruby
 authors:
 - Apidepth
@@ -93,8 +93,7 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.65'
-description: |
-  Know if your API slowness is your code or the vendor's. Apidepth instruments
+description: Know if your API slowness is your code or the vendor's. Apidepth instruments
   Net::HTTP to track real production latency to Stripe, OpenAI, Twilio and others
   — then benchmarks your p95 against anonymized fleet data so you can see if it's
   you, or everyone.
@@ -121,9 +120,9 @@ licenses:
 - MIT
 metadata:
   homepage_uri: https://apidepth.io
-  source_code_uri: https://github.com/apidepth/apidepth-ruby
-  changelog_uri: https://github.com/apidepth/apidepth-ruby/blob/main/CHANGELOG.md
-  bug_tracker_uri: https://github.com/apidepth/apidepth-ruby/issues
+  source_code_uri: https://github.com/cmwright33/apidepth-ruby
+  changelog_uri: https://github.com/cmwright33/apidepth-ruby/blob/main/CHANGELOG.md
+  bug_tracker_uri: https://github.com/cmwright33/apidepth-ruby/issues
   rubygems_mfa_required: 'true'
 rdoc_options: []
 require_paths: