fiber_audit 0.2.0 → 0.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1c20b77ea07f9fedfc345f994798c6d58ffe14853dbf63bd46a1328cdf486271
-  data.tar.gz: c71285e1a636ebf514251634a8202b40a1459e2bb7de36b71f7459313afb72d8
+  metadata.gz: f76c5789a7f5490e2e568cb6ea912520ae1350cc5a0de15053b3b30fd271e10d
+  data.tar.gz: aac0a9b350682e2c1abb167057ab4ea9ba912f277efa8818dd7269cee8d71058
 SHA512:
-  metadata.gz: 86784bb39bb1d300324ef74e4ffce7e087a00567633c0645d8a0eed15fbb83cda38ec422ab07bcc49a1546c4d72614089b3af3ca78081abcd75eb08a15cb511b
-  data.tar.gz: 672e6b9cdd0da82c01e2ef4f2377ac82905b8656d5e545db234d55e0ebf6a36c854ca6f3bbc3c784b97363bae320fcceddfad34075cc885c9e91898dde255e14
+  metadata.gz: 9d1cbe6bca9cc0363a483f9c2902a13c0389fc1fc0b833023d923342c23e8ea01b884e71233ddc2ba5b6f802cb83f7af6c5bb17ae67ef1b01d96958517ea5bca
+  data.tar.gz: f14db18581138d051937fbb788b4c3d6a8ec8970647fa82612d5911d2809b55918adfd27e02ec790500e86ae80c8cdeec112a60515d8cc22eb1f52da07ffcf89

data/ARCHITECTURE.md

@@ -20,7 +20,7 @@ produces hypotheses, while observational runtime sessions provide bounded eviden
 without establishing complete coverage. FiberAudit never claims unconditional
 `PASS`.
 
-> **Repository status:** v0.2.0 includes the v0.1.0 static pipeline end to end:
+> **Repository status:** v0.2.1 includes the v0.1.0 static pipeline end to end:
 > project discovery, configuration, semantic and syntax analysis, execution
 > contexts, FA1001–FA1007, suppressions, status derivation, text/JSON reports,
 > and the CLI. The v0.2 runtime contracts, bounded JSONL recorder, explicit

data/CHANGELOG.md

@@ -2,6 +2,17 @@
 
 ## Unreleased
 
+## 0.2.1 (2026-08-12)
+
+### Fixed
+
+- Rails 8 and Zeitwerk compatibility during runtime boot: avoid reentrant
+  application initialization and premature constant autoloads, preserve
+  Zeitwerk directory autoload semantics, and avoid duplicate insertion into a
+  copied or frozen middleware stack.
+- Install the runtime context middleware at the outer edge of the Rails stack so
+  application middleware operations are classified as `middleware`.
+
 ## 0.2.0 (2026-08-12)
 
 ### Added

data/README.md

@@ -1,7 +1,7 @@
 # FiberAudit
 
 FiberAudit audits Ruby and Rails code for operations that can block the thread
-running a Fiber scheduler. Version 0.2.0 includes static analysis and an explicit,
+running a Fiber scheduler. Version 0.2.1 includes static analysis and an explicit,
 observational runtime audit.
 
 > **Safety disclaimer:** FiberAudit does not prove that an application is
@@ -10,7 +10,7 @@ observational runtime audit.
 
 ## Requirements and installation
 
-FiberAudit v0.2.0 supports Ruby 3.3 and 3.4.
+FiberAudit v0.2.1 supports Ruby 3.3 and 3.4.
 
 ```sh
 gem install fiber_audit
@@ -190,7 +190,7 @@ Missing reasons and invalid configuration return exit code 2.
 - `PASS_WITH_WARNINGS` — only low or informational findings.
 - `NO_FINDINGS` — no findings at the configured threshold.
 
-FiberAudit never emits unconditional `PASS` in v0.2.0.
+FiberAudit never emits unconditional `PASS` in v0.2.1.
 
 ## Exit codes
 
@@ -199,7 +199,7 @@ FiberAudit never emits unconditional `PASS` in v0.2.0.
 | 0 | No active finding at or above the configured threshold |
 | 1 | One or more active findings at or above the threshold |
 | 2 | Invalid options, configuration, analysis, or report output |
-| 3 | Reserved; never emitted by v0.2.0 |
+| 3 | Reserved; never emitted by v0.2.1 |
 
 Source parse errors are included in report data while analysis continues on
 other files.

data/lib/fiber_audit/runtime/rails_integration.rb

@@ -125,6 +125,15 @@ module FiberAudit
       def install_require_hook
         return if @require_hook_installed
 
+        # Zeitwerk replaces Kernel#require. Load its optional integration before
+        # prepending FiberAudit so later Rails autoloads retain Zeitwerk's require
+        # semantics. This remains a no-op when Zeitwerk is not installed.
+        begin
+          require 'zeitwerk'
+        rescue LoadError
+          nil
+        end
+
         # Install narrow guarded require hook for late Rails loading
         # Independent of probe registry
         ::Kernel.prepend(RequireHook) unless ::Kernel.ancestors.include?(RequireHook)
@@ -132,33 +141,57 @@ module FiberAudit
       end
 
       def install_controller_hook
-        return unless defined?(::ActionController::Metal)
+        namespace = loaded_constant(Object, :ActionController)
+        target = loaded_constant(namespace, :Metal)
+        return unless target
 
-        ::ActionController::Metal.prepend(ControllerHook) unless ::ActionController::Metal.ancestors.include?(ControllerHook)
+        target.prepend(ControllerHook) unless target.ancestors.include?(ControllerHook)
       end
 
       def install_job_hook
-        return unless defined?(::ActiveJob::Base)
+        namespace = loaded_constant(Object, :ActiveJob)
+        target = loaded_constant(namespace, :Base)
+        return unless target
 
-        ::ActiveJob::Base.prepend(JobHook) unless ::ActiveJob::Base.ancestors.include?(JobHook)
+        target.prepend(JobHook) unless target.ancestors.include?(JobHook)
       end
 
       def install_cable_hook
-        return unless defined?(::ActionCable::Channel::Base)
+        namespace = loaded_constant(Object, :ActionCable)
+        channel = loaded_constant(namespace, :Channel)
+        target = loaded_constant(channel, :Base)
+        return unless target
+
+        target.prepend(CableHook) unless target.ancestors.include?(CableHook)
+      end
+
+      def loaded_constant(namespace, name)
+        return unless namespace.is_a?(Module)
+        return if namespace.autoload?(name)
+        return unless namespace.const_defined?(name, false)
 
-        ::ActionCable::Channel::Base.prepend(CableHook) unless ::ActionCable::Channel::Base.ancestors.include?(CableHook)
+        namespace.const_get(name, false)
+      rescue NameError
+        nil
       end
 
       def try_install_middleware_hook
-        return unless defined?(::Rails) && ::Rails.respond_to?(:application) && ::Rails.application
+        rails = loaded_constant(Object, :Rails)
+        return unless rails
 
-        stack = ::Rails.application.config.middleware
-        return if @middleware_stack.equal?(stack)
+        # Rails.application may instantiate the application class. Calling it
+        # from a require hook while Rails itself is loading can re-enter a
+        # partially initialized application, so only inspect an existing instance.
+        application = rails.instance_variable_get(:@application)
+        return unless application
+
+        stack = application.config.middleware
+        return if @middleware_stack.equal?(stack) || middleware_installed_in?(stack)
 
         # Try to insert middleware into Rails stack. A replacement stack (for
         # example after a Rails reload) is eligible for installation again.
         begin
-          stack.use(Middleware)
+          stack.insert_before(0, Middleware)
           @middleware_stack = stack
         rescue StandardError => e
           # Stack may be finalized - that's okay, middleware is optional
@@ -166,6 +199,14 @@ module FiberAudit
         end
       end
 
+      def middleware_installed_in?(stack)
+        return false unless stack.respond_to?(:any?)
+
+        stack.any? do |entry|
+          entry.equal?(Middleware) || (entry.respond_to?(:klass) && entry.klass.equal?(Middleware))
+        end
+      end
+
       # Require hook for late Rails loading - independent of probe registry
       # Narrow, guarded, behavior-preserving
       module RequireHook

data/lib/fiber_audit/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module FiberAudit
-  VERSION = '0.2.0'
+  VERSION = '0.2.1'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: fiber_audit
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.2.1
 platform: ruby
 authors:
 - FiberAudit Contributors