debugbundle 1.5.0 → 2.0.0

data/lib/debugbundle/suppression.rb

@@ -11,6 +11,7 @@ module DebugBundle
     LOOP_RESET_AFTER_SECONDS = 60.0
     LOOP_CHECKPOINT_SECONDS = 30.0
     MAX_NORMAL_EVENTS_PER_WINDOW = 3
+    MAX_TRACKED_FINGERPRINTS = 2_048
 
     State = Struct.new(
       :window_started_at,
@@ -29,14 +30,28 @@ module DebugBundle
     class Tracker
       def initialize
         @states = {}
+        @mutex = Mutex.new
+        @overflow_count = 0
+        @overflow_first_seen_at = nil
+        @overflow_last_seen_at = nil
       end
 
       def should_capture(key, now:)
-        state = (@states[key] ||= new_state(now))
+        locked = @mutex.try_lock
+        return true unless locked
+
+        fingerprint = Digest::SHA256.hexdigest(key)
+        state = @states.delete(fingerprint)
+        if state.nil? && @states.length >= MAX_TRACKED_FINGERPRINTS
+          _, evicted = @states.shift
+          record_overflow(evicted) if evicted.pending_suppressed_count.positive?
+        end
+        state ||= new_state(now)
+        @states[fingerprint] = state
 
         if state.suppression_mode && (now - state.last_seen_at) >= LOOP_RESET_AFTER_SECONDS
-          @states[key] = new_state(now)
-          state = @states[key]
+          @states[fingerprint] = new_state(now)
+          state = @states[fingerprint]
         end
 
         if (now - state.window_started_at) >= DUPLICATE_WINDOW_SECONDS
@@ -65,31 +80,58 @@ module DebugBundle
 
         mark_suppressed(state, now)
         false
+      ensure
+        @mutex.unlock if locked
       end
 
       def drain_aggregates(now:)
-        @states.each_with_object([]) do |(key, state), aggregates|
-          next if state.pending_suppressed_count.zero?
-          next if state.pending_first_seen_at.nil? || state.pending_last_seen_at.nil?
-          next if checkpoint_not_due?(state, now)
-
-          aggregates << {
-            'fingerprint' => Digest::SHA256.hexdigest(key),
-            'suppressed_count' => state.pending_suppressed_count,
-            'first_seen' => Time.at(state.pending_first_seen_at).utc.iso8601,
-            'last_seen' => Time.at(state.pending_last_seen_at).utc.iso8601,
-            'window_seconds' => DUPLICATE_WINDOW_SECONDS.to_i
-          }
-
-          state.pending_suppressed_count = 0
-          state.pending_first_seen_at = nil
-          state.pending_last_seen_at = nil
-          state.last_aggregate_emitted_at = now
+        @mutex.synchronize do
+          aggregates = @states.each_with_object([]) do |(fingerprint, state), results|
+            next if state.pending_suppressed_count.zero?
+            next if state.pending_first_seen_at.nil? || state.pending_last_seen_at.nil?
+            next if checkpoint_not_due?(state, now)
+
+            results << {
+              'fingerprint' => fingerprint,
+              'suppressed_count' => state.pending_suppressed_count,
+              'first_seen' => Time.at(state.pending_first_seen_at).utc.iso8601,
+              'last_seen' => Time.at(state.pending_last_seen_at).utc.iso8601,
+              'window_seconds' => DUPLICATE_WINDOW_SECONDS.to_i
+            }
+
+            state.pending_suppressed_count = 0
+            state.pending_first_seen_at = nil
+            state.pending_last_seen_at = nil
+            state.last_aggregate_emitted_at = now
+          end
+          append_overflow_aggregate(aggregates)
+          aggregates
         end
       end
 
       private
 
+      def record_overflow(state)
+        @overflow_first_seen_at ||= state.pending_first_seen_at
+        @overflow_count += state.pending_suppressed_count
+        @overflow_last_seen_at = state.pending_last_seen_at
+      end
+
+      def append_overflow_aggregate(aggregates)
+        return if @overflow_count.zero?
+
+        aggregates << {
+          'fingerprint' => Digest::SHA256.hexdigest('ruby:suppression-state-pressure'),
+          'suppressed_count' => @overflow_count,
+          'first_seen' => Time.at(@overflow_first_seen_at).utc.iso8601,
+          'last_seen' => Time.at(@overflow_last_seen_at).utc.iso8601,
+          'window_seconds' => DUPLICATE_WINDOW_SECONDS.to_i
+        }
+        @overflow_count = 0
+        @overflow_first_seen_at = nil
+        @overflow_last_seen_at = nil
+      end
+
       def new_state(now)
         State.new(
           window_started_at: now,

data/lib/debugbundle/telemetry_privacy.rb

@@ -14,6 +14,11 @@ module DebugBundle
       verification_code authorization cookie ssn client_secret x_api_key set_cookie
       proxy_authorization accessToken refreshToken privateKey clientSecret
     ].freeze
+    ASSIGNMENT_VALUE_PATTERN = '(?:"[^"]*"|\'[^\']*\'|[^\s&,;]+)'
+    DEFAULT_ASSIGNMENT_PATTERN = Regexp.new(
+      "\\b(#{FIELDS.map { |field| Regexp.escape(field) }.join('|')})\\b([\"']?\\s*[:=]\\s*)#{ASSIGNMENT_VALUE_PATTERN}",
+      Regexp::IGNORECASE
+    )
 
     module_function
 
@@ -25,7 +30,8 @@ module DebugBundle
 
       work = { nodes: 0, bytes: 0, seen: {}.compare_by_identity,
                fields: (FIELDS + additional_fields).map { |field| canonical(field) },
-               extra: additional_fields }
+               extra: additional_fields,
+               assignment_pattern: assignment_pattern(additional_fields) }
       result = visit(value, work, 0, true)
       raise ArgumentError, 'budget_exceeded' if JSON.generate(result).bytesize > MAX_BYTES
 
@@ -48,6 +54,13 @@ module DebugBundle
       value.downcase.gsub(/[^a-z0-9]/, '')
     end
 
+    def assignment_pattern(additional_fields)
+      return DEFAULT_ASSIGNMENT_PATTERN if additional_fields.empty?
+
+      terms = (FIELDS + additional_fields).map { |field| Regexp.escape(field) }.join('|')
+      Regexp.new("\\b(#{terms})\\b([\"']?\\s*[:=]\\s*)#{ASSIGNMENT_VALUE_PATTERN}", Regexp::IGNORECASE)
+    end
+
     def sensitive_key?(key, fields)
       segments = key.gsub(/([a-z0-9])([A-Z])/, '\\1_\\2').downcase.split(/[^a-z0-9]+/)
       segments.each_index.any? do |start|
@@ -151,10 +164,7 @@ module DebugBundle
       result = result.gsub(/\b(Authorization|Proxy-Authorization|Cookie|Set-Cookie)\s*:\s*[^\r\n]*/i, '\\1: [REDACTED]')
       result = result.gsub(%r{\b(Bearer|Basic)\s+[A-Za-z0-9._~+/-]{6,}}i, '\\1 [REDACTED]')
       result = result.gsub(/\bdbundle_(?:proj|mem|probe|agent)_[A-Za-z0-9_-]+\b/, REDACTED)
-      (FIELDS + work[:extra]).each do |field|
-        pattern = /\b(#{Regexp.escape(field)})\b(["']?\s*[:=]\s*)(?:"[^"]*"|'[^']*'|[^\s&,;]+)/i
-        result = result.gsub(pattern, '\\1\\2[REDACTED]')
-      end
+      result = result.gsub(work[:assignment_pattern], '\\1\\2[REDACTED]')
       result = result.gsub(/(?<![A-Za-z0-9_-])(?:[0-9][ -]?){12,18}[0-9](?![A-Za-z0-9_-])/) do |candidate|
         valid_card?(candidate) ? REDACTED : candidate
       end

data/lib/debugbundle/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module DebugBundle
-  VERSION = '1.5.0'
+  VERSION = '2.0.0'
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: debugbundle
 version: !ruby/object:Gem::Version
-  version: 1.5.0
+  version: 2.0.0
 platform: ruby
 authors:
 - DebugBundle
 bindir: exe
 cert_chain: []
-date: 2026-09-21 00:00:00.000000000 Z
+date: 2026-09-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: base64
@@ -51,7 +51,11 @@ files:
 - lib/debugbundle/before_send.rb
 - lib/debugbundle/client.rb
 - lib/debugbundle/client_event_support.rb
+- lib/debugbundle/client_process_support.rb
+- lib/debugbundle/client_queue_support.rb
 - lib/debugbundle/config.rb
+- lib/debugbundle/config_worker.rb
+- lib/debugbundle/delivery_worker.rb
 - lib/debugbundle/logging.rb
 - lib/debugbundle/rack/middleware.rb
 - lib/debugbundle/rack/relay_middleware.rb
@@ -63,6 +67,7 @@ files:
 - lib/debugbundle/relay/handler.rb
 - lib/debugbundle/remote_config.rb
 - lib/debugbundle/runtime.rb
+- lib/debugbundle/safe_input.rb
 - lib/debugbundle/sidekiq/server_middleware.rb
 - lib/debugbundle/suppression.rb
 - lib/debugbundle/telemetry_privacy.rb