dial 0.3.2 → 0.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1cf2ace9f735e0ffd4c290b742bbf7f89f322babb96636e942fe1faaf92a8e45
-  data.tar.gz: '06279e4a580959080df277abe1a8488bca20f50276d9221ca399366f570e1426'
+  metadata.gz: dc0b70ff1d770bd0fc85123280a07bb683d649a059df325b2b9cad938ea346e2
+  data.tar.gz: ef4ab7cdb79f4e773b9d19d35d40624085a1ea15b47798fc9a092c476e4d5f25
 SHA512:
-  metadata.gz: bde524497181a25dbeddc54f8f04ff128714844a5f2b6d8c84ae569bf4d45cb39942dddbe0d687e63c7b3c23f590410128de4abfffa69e5ee41923be4a73b6c1
-  data.tar.gz: e2bd5aef0ee0975a8e9c227a77296f40811d558251035771177c11f2128b599d905644186237280b3718f64ff65b31b834e01cfd222e5baba0077a53ee631451
+  metadata.gz: 5fd19ba186d0689ad63827557f944c0fcee39c41c0d77053450d1a81ff52bb74442f26e7eb4bb377efacea763f87903d467c858834da56483a3d4ddf01307acc
+  data.tar.gz: 45ccf2409afdc88cca32063aa3583737f00eaffea57f10701a9d6d2c45d066586c85e52eea2387ee9cacb2bc0712feca2159c16e711c52c1c8e2c4f8e34ef162

data/CHANGELOG.md

@@ -1,5 +1,13 @@
 ## [Unreleased]
 
+## [0.4.0] - 2025-08-30
+
+- Add sampling configuration to control percentage of requests profiled
+- Replace response body buffering with streaming response wrapper
+- Make prosopite logging thread-safe with thread-local storage
+- Fix missing namespace for VERNIER_PROFILE_OUT_FILE_EXTENSION in engine routes
+- Improve error handling and input validation
+
 ## [0.3.2] - 2025-05-14
 
 - Consolidate railtie initializers

data/README.md

@@ -43,6 +43,7 @@ mount Dial::Engine, at: "/" if Rails.env.development?
 # config/initializers/dial.rb
 
 Dial.configure do |config|
+  config.sampling_percentage = 50
   config.vernier_interval = 100
   config.vernier_allocation_interval = 10_000
   config.prosopite_ignore_queries += [/pg_sleep/i]
@@ -53,10 +54,11 @@ end
 
 Option | Description | Default
 :- | :- | :-
+`sampling_percentage` | Percentage of requests to profile. | `100` in development, `1` in production
+`content_security_policy_nonce` | Sets the content security policy nonce to use when inserting Dial's script. Can be a string, or a Proc which receives `env` and response `headers` as arguments and returns the nonce string. | Rails generated nonce or `nil`
 `vernier_interval` | Sets the `interval` option for vernier. | `200`
 `vernier_allocation_interval` | Sets the `allocation_interval` option for vernier. | `2_000`
 `prosopite_ignore_queries` | Sets the `ignore_queries` option for prosopite. | `[/schema_migrations/i]`
-`content_security_policy_nonce` | Sets the content security policy nonce to use when inserting Dial's script. Can be a string, or a Proc which receives `env` and response `headers` as arguments and returns the nonce string. | Rails generated nonce or `nil`
 
 ## Comparison with [rack-mini-profiler](https://github.com/MiniProfiler/rack-mini-profiler)
 
@@ -70,7 +72,7 @@ Option | Description | Default
 | Memory Profiling          | Yes (with memory_profiler)         | Yes (*overall usage only) (via vernier hook - graph)    |
 | View Profiling            | Yes                                | Yes (via vernier hook - marker table, chart)            |
 | Snapshot Sampling         | Yes                                | No                                                      |
-| Production Support        | Yes                                | No (WIP)                                                |
+| Production Support        | Yes                                | No                                                      |
 
 > [!NOTE]
 > SQL queries displayed in the profile are not annotated with the caller location by default. If you're not using the

data/lib/dial/configuration.rb

@@ -12,10 +12,11 @@ module Dial
   class Configuration
     def initialize
       @options = {
+        sampling_percentage: ::Rails.env.development? ? 100 : 1,
+        content_security_policy_nonce: -> (env, _headers) { env[NONCE] || "" },
         vernier_interval: VERNIER_INTERVAL,
         vernier_allocation_interval: VERNIER_ALLOCATION_INTERVAL,
         prosopite_ignore_queries: PROSOPITE_IGNORE_QUERIES,
-        content_security_policy_nonce: -> (env, _headers) { env[NONCE] || "" },
       }
 
       @options.keys.each do |key|

data/lib/dial/constants.rb

@@ -25,5 +25,4 @@ module Dial
   VERNIER_VIEWER_URL = "https://vernier.prof"
 
   PROSOPITE_IGNORE_QUERIES = [/schema_migrations/i].freeze
-  PROSOPITE_LOG_IO = StringIO.new
 end

data/lib/dial/engine/routes.rb

@@ -4,14 +4,33 @@ Dial::Engine.routes.draw do
   scope path: "/dial", as: "dial" do
     get "profile", to: lambda { |env|
       uuid = env[::Rack::QUERY_STRING].sub "uuid=", ""
-      path = String ::Rails.root.join Dial::VERNIER_PROFILE_OUT_RELATIVE_DIRNAME, (uuid + VERNIER_PROFILE_OUT_FILE_EXTENSION)
 
-      if File.exist? path
-        [
-          200,
-          { "Content-Type" => "application/json", "Access-Control-Allow-Origin" => Dial::VERNIER_VIEWER_URL },
-          [File.read(path)]
+      # Validate UUID format (should end with _vernier)
+      unless uuid.match?(/\A[0-9a-f-]+_vernier\z/)
+        return [
+          400,
+          { "Content-Type" => "text/plain" },
+          ["Bad Request"]
         ]
+      end
+
+      path = String ::Rails.root.join Dial::VERNIER_PROFILE_OUT_RELATIVE_DIRNAME, (uuid + Dial::VERNIER_PROFILE_OUT_FILE_EXTENSION)
+
+      if File.exist? path
+        begin
+          content = File.read path
+          [
+            200,
+            { "Content-Type" => "application/json", "Access-Control-Allow-Origin" => Dial::VERNIER_VIEWER_URL },
+            [content]
+          ]
+        rescue
+          [
+            500,
+            { "Content-Type" => "text/plain" },
+            ["Internal Server Error"]
+          ]
+        end
       else
         [
           404,

data/lib/dial/middleware.rb

@@ -22,6 +22,10 @@ module Dial
         return @app.call env
       end
 
+      unless should_profile?
+        return @app.call env
+      end
+
       start_time = Process.clock_gettime Process::CLOCK_MONOTONIC
 
       profile_out_filename = "#{Util.uuid}_vernier" + VERNIER_PROFILE_OUT_FILE_EXTENSION
@@ -49,19 +53,12 @@ module Dial
       finish_time = Process.clock_gettime Process::CLOCK_MONOTONIC
       env[REQUEST_TIMING] = ((finish_time - start_time) * 1_000).round 2
 
-      body = String.new.tap do |str|
-        rack_body.each { |chunk| str << chunk }
-        rack_body.close if rack_body.respond_to? :close
-
-        str.sub! "</body>", <<~HTML
-            #{Panel.html env, headers, profile_out_filename, query_logs, ruby_vm_stat, gc_stat, gc_stat_heap, server_timing}
-          </body>
-        HTML
-      end
+      panel_html = Panel.html env, headers, profile_out_filename, query_logs, ruby_vm_stat, gc_stat, gc_stat_heap, server_timing
+      body = PanelInjector.new rack_body, panel_html
 
-      headers[CONTENT_LENGTH] = body.bytesize.to_s
+      headers.delete CONTENT_LENGTH
 
-      [status, headers, [body]]
+      [status, headers, body]
     end
 
     private
@@ -90,13 +87,13 @@ module Dial
     def clear_query_logs!
       [].tap do |query_logs|
         entry = section = count = nil
-        PROSOPITE_LOG_IO.string.lines.each do |line|
+        ProsopiteLogger.log_io.string.lines.each do |line|
           entry, section, count = process_query_log_line line, entry, section, count
           query_logs << entry if entry && section.nil?
         end
 
-        PROSOPITE_LOG_IO.truncate 0
-        PROSOPITE_LOG_IO.rewind
+        ProsopiteLogger.log_io.truncate 0
+        ProsopiteLogger.log_io.rewind
       end
     end
 
@@ -127,5 +124,42 @@ module Dial
     def profile_out_dir_pathname
       ::Rails.root.join VERNIER_PROFILE_OUT_RELATIVE_DIRNAME
     end
+
+    def should_profile?
+      rand(100) < Dial._configuration.sampling_percentage
+    end
+  end
+
+  class PanelInjector
+    def initialize original_body, panel_html
+      @original_body = original_body
+      @panel_html = panel_html
+      @injected = false
+    end
+
+    def each
+      @original_body.each do |chunk|
+        if !@injected && chunk.include?("</body>")
+          @injected = true
+          yield chunk.sub("</body>", "#{@panel_html}\n</body>")
+        else
+          yield chunk
+        end
+      end
+
+      yield @panel_html unless @injected
+    ensure
+      close
+    end
+
+    def close
+      @original_body.close if @original_body.respond_to? :close
+    end
+
+    def call stream
+      each { |chunk| stream.write chunk }
+    ensure
+      close
+    end
   end
 end

data/lib/dial/prosopite_logger.rb

@@ -4,5 +4,20 @@ require "logger"
 
 module Dial
   class ProsopiteLogger < Logger
+    def self.log_io
+      Thread.current[:dial_prosopite_log_io] ||= StringIO.new
+    end
+
+    def initialize
+      super StringIO.new
+    end
+
+    def add severity, message = nil, progname = nil
+      return if severity < level
+
+      progname = @progname if progname.nil?
+      formatted_message = format_message format_severity(severity), Time.now, progname, message
+      self.class.log_io.write formatted_message
+    end
   end
 end

data/lib/dial/railtie.rb

@@ -26,7 +26,7 @@ module Dial
         if ::ActiveRecord::Base.configurations.configurations.any? { |config| config.adapter == "postgresql" }
           require "pg_query"
         end
-        ::Prosopite.custom_logger = ProsopiteLogger.new PROSOPITE_LOG_IO
+        ::Prosopite.custom_logger = ProsopiteLogger.new
 
         # finalize configuration
         Dial._configuration.freeze

data/lib/dial/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dial
-  VERSION = "0.3.2"
+  VERSION = "0.4.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dial
 version: !ruby/object:Gem::Version
-  version: 0.3.2
+  version: 0.4.0
 platform: ruby
 authors:
 - Joshua Young
@@ -138,7 +138,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.9
+rubygems_version: 3.7.1
 specification_version: 4
 summary: A modern profiler for your Rails application
 test_files: []