forest_admin_rails 1.38.3 → 1.39.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 833b87be7c464c040284316f54eabb82c6b7c0cf7747dd85dcee60a416a6f10e
-  data.tar.gz: 909e3069f216dba315c57a3b61d3ab7c18c53fced59b9771d95e2c6df2599faf
+  metadata.gz: fe017cbbf141336641a4e5f66f021847c8661488287db1beab964580c3c0d4ba
+  data.tar.gz: e4f542012d6d98544c9a1fc75a12a44de07883f1551eb18dc8743cfa1b3b5a65
 SHA512:
-  metadata.gz: 33f1013081c9fa328af9de7f7399bf2ea7fa4a78b527a077046ba8e8c4d10f517e3b7c0f78d6f6fb53a310600e99565f95d57a9f64ec92354f57fe8fbdc35826
-  data.tar.gz: 8047789034367bee3ad92bca50053bf071487e4d74ea0034b6ae24deae64d1875a3e4d6d9202bfb825bd869daeaddff0b43c14ca6292323ef54a3848d5fb95ff
+  metadata.gz: b10ddc9ea4acd4087c6ebea7e30d9ab7667eb68034d98b0ed7295257c22a14736e7bac3bce9e18a2989b772b72587b7af7e4993c7a1357c761513735b5ed871a
+  data.tar.gz: ff99052059e50e2792098179bed5379d0ad0899e4fad6280982de0aa9ecd0dd291ca10f8e726371fcdcbe667c0146470fe7728ac2ec4d0432a955854aeb0535e

data/lib/forest_admin_rails/engine.rb

@@ -34,6 +34,27 @@ module ForestAdminRails
         agent_factory.setup(ForestAdminRails.config)
         load_configuration
         load_cors
+        load_correlation_id
+      end
+    end
+
+    # Echo the agent-generated correlation id on every response (mirrors the Node agent's
+    # router.use(correlationIdMiddleware)); CORS exposure of the header is handled in load_cors.
+    #
+    # Ahead of ShowExceptions rather than at the end of the stack: a Rack middleware can only add a header
+    # to a response it sees returned, so sitting under the exception handlers meant error responses they
+    # build on the way out never carried the id.
+    def load_correlation_id
+      middleware = ForestAdminAgent::Http::CorrelationIdMiddleware
+
+      begin
+        # The application's stack, not the engine's: ShowExceptions lives there, and an
+        # insert_before recorded on the engine's own (empty) proxy raises when it is applied.
+        Rails.application.config.middleware.insert_before ActionDispatch::ShowExceptions, middleware
+      rescue StandardError
+        # No ShowExceptions in this stack (or already gone): the id still reaches every response the app
+        # returns normally.
+        config.middleware.use middleware
       end
     end
 
@@ -102,7 +123,8 @@ module ForestAdminRails
           hostnames += ENV['CORS_ORIGINS'].split(',') if ENV['CORS_ORIGINS']
 
           origins hostnames
-          resource '*', headers: :any, methods: :any, credentials: true, max_age: 86_400
+          resource '*', headers: :any, methods: :any, credentials: true, max_age: 86_400,
+                        expose: [ForestAdminAgent::Http::CorrelationId::HEADER]
         end
       end
     end

data/lib/forest_admin_rails/version.rb

@@ -1,3 +1,3 @@
 module ForestAdminRails
-  VERSION = "1.38.3"
+  VERSION = "1.39.0"
 end

data/lib/forest_admin_rails.rb

@@ -34,6 +34,9 @@ module ForestAdminRails
   setting :disable_route_cache, default: false
   setting :rpc_max_polling_threads, default: nil
   setting :workflow_executor_url, default: nil
+  # { database: <ActiveRecord config or URL>, schema:, table_name:, redact: } — setting `database`
+  # turns the audit trail on: every change is captured and the `/_audit-trail` routes are registered.
+  setting :audit_trail, default: nil
 
   if defined?(Rails::Railtie)
     # logic for cors middleware,... here // or it might be into Engine

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: forest_admin_rails
 version: !ruby/object:Gem::Version
-  version: 1.38.3
+  version: 1.39.0
 platform: ruby
 authors:
 - Matthieu
@@ -9,7 +9,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-08-14 00:00:00.000000000 Z
+date: 2026-08-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: base64