rails_error_dashboard 0.11.9 → 0.12.0

data/app/views/rails_error_dashboard/errors/overview.html.erb

@@ -7,6 +7,15 @@
     </span>
   </div>
 
+  <%# Zero errors and a failed query look identical on a dashboard that
+      rescues to zeros. Say which one this is. %>
+  <% if @stats[:data_unavailable] %>
+    <div class="alert-warning" style="display: flex; align-items: center; gap: 10px; padding: 10px var(--space-5); background: var(--status-warning-bg); border-radius: var(--radius-md); border: 1px solid var(--status-warning); margin-bottom: var(--space-6); font-size: 13px; color: var(--status-warning);">
+      <i class="bi bi-exclamation-triangle"></i>
+      <strong><%= red_t("red.errors.overview_page.data_unavailable") %></strong>
+    </div>
+  <% end %>
+
   <!-- Spike / Critical Alerts Banner -->
   <% if @critical_alerts.any? %>
     <%
@@ -37,7 +46,7 @@
     <div class="card stat-card" style="border-left: 3px solid var(--status-critical); padding: var(--space-5) var(--space-6);">
       <div class="stat-label" style="margin-bottom: 4px;"><%= red_t("red.errors.overview_page.error_rate") %></div>
       <div style="display: flex; align-items: baseline; gap: 8px;">
-        <span class="stat-value" style="color: var(--status-critical);"><%= red_t("red.errors.pages.percent", value: @stats[:error_rate]) %></span>
+        <span class="stat-value" style="color: var(--status-critical);"><%= red_t("red.errors.overview_page.rate_per_hour", value: @stats[:error_rate]) %></span>
         <% if @stats[:trend_percentage].present? && @stats[:trend_percentage] != 0 %>
           <span style="display: inline-flex; align-items: center; gap: 2px; font-size: 12px; font-weight: 600; color: <%= @stats[:trend_percentage] > 0 ? 'var(--status-critical)' : 'var(--status-success)' %>;">
             <i class="bi <%= @stats[:trend_percentage] > 0 ? 'bi-arrow-up-right' : 'bi-arrow-down-right' %>" style="font-size: 10px;"></i>
@@ -93,6 +102,9 @@
     <!-- Affected Users -->
     <div class="card stat-card" style="padding: var(--space-5) var(--space-6);">
       <div class="stat-label" style="margin-bottom: 4px;"><%= red_t("red.errors.overview_page.affected_users") %></div>
+      <% if @stats[:affected_users_incomplete] %>
+        <small style="display: block; color: var(--text-tertiary); margin-bottom: 4px;"><%= red_t("red.errors.overview_page.affected_users_incomplete") %></small>
+      <% end %>
       <div style="display: flex; align-items: baseline; gap: 8px;">
         <span class="stat-value"><%= @stats[:affected_users_today] %></span>
         <% if @stats[:affected_users_change] != 0 %>

data/config/locales/de.yml

@@ -577,6 +577,12 @@ de:
         copy_curl_title: curl-Befehl in die Zwischenablage kopieren
         copy_rspec: Als RSpec kopieren
         copy_rspec_title: RSpec-Request-Spec in die Zwischenablage kopieren
+        snapshot: 'Momentaufnahme:'
+        snapshot_captured_html: Erfasst %{time}
+        snapshot_stale: aus einem früheren Auftreten — spätere lieferten keinen Kontext
+        snapshot_fidelity_lite: reduzierte Erfassung (der Storm-Schutz hat die Kontext-Payloads verworfen)
+        snapshot_fidelity_minimal: während eines Storms gezählt — es wurde kein Kontext erfasst
+        snapshot_unknown: erfasst, bevor RED die Herkunft von Momentaufnahmen aufzeichnete
       similar_errors:
         title: Ähnliche Fehler
         badge: Unscharfer Abgleich
@@ -930,6 +936,9 @@ de:
         alert_view: Ansehen
         error_rate: Fehlerrate
         error_rate_hint: Fehler pro Stunde heute
+        rate_per_hour: "%{value}/Std."
+        affected_users_incomplete: mindestens — der Storm-Schutz hat Detaildaten pro Ereignis verworfen
+        data_unavailable: Statistiken sind derzeit nicht verfügbar — die Zahlen unten sind keine Messung.
         unresolved: Offen
         unresolved_hint: Behebung ausstehend
         resolution_rate: Behebungsquote

data/config/locales/en.yml

@@ -802,6 +802,26 @@ en:
         copy_rspec: "Copy as RSpec"
         copy_rspec_title: "Copy RSpec request spec to clipboard"
 
+        # Provenance for the diagnostic snapshot this page shows.
+        #
+        # An ErrorLog row is a GROUP, but its request context, breadcrumbs,
+        # locals and health describe ONE moment of failure -- refreshed by each
+        # occurrence that carried them, and deliberately left alone by one that
+        # did not. Without these labels the page presented that collection as
+        # "the error's context" with no way to tell which event supplied it.
+        snapshot: "Snapshot:"
+        # %{time} is a <span class="local-time"> element, hence _html.
+        snapshot_captured_html: "Captured %{time}"
+        # Shown when the snapshot predates the most recent occurrence: the
+        # counts moved on, this evidence did not.
+        snapshot_stale: "from an earlier occurrence — later ones carried no context"
+        # Capture fidelity. "minimal" rows are reconstructed by the storm flush
+        # from a counted-only event: the group is real and its count is exact,
+        # but no backtrace or context was ever captured for it.
+        snapshot_fidelity_lite: "reduced capture (storm protection shed the context payloads)"
+        snapshot_fidelity_minimal: "counted during a storm — no context was captured"
+        snapshot_unknown: "captured before RED recorded snapshot provenance"
+
       similar_errors:
         title: "Similar Errors"
         badge: "Fuzzy Matching"
@@ -1058,6 +1078,8 @@ en:
       # Each is a bare noun phrase standing over a number, not a sentence
       # fragment to be joined to one.
       stats:
+        # These count EVENTS (every occurrence), not error groups. A single
+        # group that happened 500 times contributes 500 here.
         today: "Today"
         this_week: "This Week"
         unresolved: "Unresolved"
@@ -1294,6 +1316,19 @@ en:
         alert_view: "View"
         error_rate: "Error Rate"
         error_rate_hint: "Errors per hour today"
+        # The error rate is a RATE, not a percentage. It used to render with a
+        # "%" against a scale that called one error per hour "1%", capped at
+        # 100 -- so 4,000 errors/hour showed as "100%". There is no request
+        # denominator to build a real failure percentage from, so the honest
+        # figure is the rate itself. %{value} is the already-formatted number.
+        rate_per_hour: "%{value}/hr"
+        # Shown beside the affected-user figure when storm protection shed
+        # per-event rows in the window: the count is a floor, not a total.
+        # "storm" is RED's term and stays verbatim (see TRANSLATIONS.md).
+        affected_users_incomplete: "at least — storm protection shed per-event detail"
+        # Zero errors and "the dashboard could not read its data" are
+        # different states. This banner says which one you are looking at.
+        data_unavailable: "Statistics are currently unavailable — the figures below are not a measurement."
         unresolved: "Unresolved"
         unresolved_hint: "Pending resolution"
         resolution_rate: "Resolution Rate"

data/config/locales/es.yml

@@ -602,6 +602,12 @@ es:
         copy_curl_title: Copiar el comando curl al portapapeles
         copy_rspec: Copiar como RSpec
         copy_rspec_title: Copiar el request spec de RSpec al portapapeles
+        snapshot: 'Instantánea:'
+        snapshot_captured_html: Capturada %{time}
+        snapshot_stale: de una aparición anterior — las posteriores no aportaron contexto
+        snapshot_fidelity_lite: captura reducida (la protección ante storms descartó los payloads de contexto)
+        snapshot_fidelity_minimal: contabilizado durante un storm — no se capturó ningún contexto
+        snapshot_unknown: capturada antes de que RED registrara la procedencia de las instantáneas
       similar_errors:
         title: Errores similares
         badge: Coincidencia aproximada
@@ -960,6 +966,9 @@ es:
         alert_view: Ver
         error_rate: Tasa de error
         error_rate_hint: Errores por hora hoy
+        rate_per_hour: "%{value}/h"
+        affected_users_incomplete: al menos — la protección ante storms descartó el detalle por evento
+        data_unavailable: Las estadísticas no están disponibles por ahora — las cifras siguientes no son una medición.
         unresolved: Sin resolver
         unresolved_hint: Pendientes de resolución
         resolution_rate: Tasa de resolución

data/config/locales/fr.yml

@@ -1,6 +1,6 @@
 # RED dashboard translations — fr
 #
-# MACHINE-TRANSLATED AND NOT REVIEWED BY A NATIVE SPEAKER.
+# COMMUNITY-REVIEWED BY A NATIVE SPEAKER (v0.11.5, #201, issue #158).
 # See docs/guides/TRANSLATIONS.md. Corrections are welcome, and a one-key
 # pull request is a perfectly good pull request.
 #
@@ -601,6 +601,12 @@ fr:
         copy_curl_title: Copier la commande curl dans le presse-papiers
         copy_rspec: Copier en RSpec
         copy_rspec_title: Copier le request spec RSpec dans le presse-papiers
+        snapshot: 'Instantané :'
+        snapshot_captured_html: Capturé %{time}
+        snapshot_stale: issu d'une occurrence antérieure — les suivantes n'ont apporté aucun contexte
+        snapshot_fidelity_lite: capture réduite (la protection contre les storms a écarté les payloads de contexte)
+        snapshot_fidelity_minimal: comptabilisé pendant un storm — aucun contexte n'a été capturé
+        snapshot_unknown: capturé avant que RED n'enregistre la provenance des instantanés
       similar_errors:
         title: Erreurs similaires
         badge: Correspondance approximative
@@ -961,6 +967,9 @@ fr:
         alert_view: Voir
         error_rate: Taux d'erreur
         error_rate_hint: Erreurs par heure aujourd'hui
+        rate_per_hour: "%{value}/h"
+        affected_users_incomplete: au moins — la protection contre les storms a écarté le détail par événement
+        data_unavailable: Les statistiques sont indisponibles pour le moment — les chiffres ci-dessous ne sont pas une mesure.
         unresolved: Non résolues
         unresolved_hint: En attente de résolution
         resolution_rate: Taux de résolution

data/config/locales/it.yml

@@ -595,6 +595,12 @@ it:
         copy_curl_title: Copia il comando curl negli appunti
         copy_rspec: Copia come RSpec
         copy_rspec_title: Copia il request spec RSpec negli appunti
+        snapshot: 'Istantanea:'
+        snapshot_captured_html: Acquisita %{time}
+        snapshot_stale: da un'occorrenza precedente — quelle successive non hanno fornito contesto
+        snapshot_fidelity_lite: acquisizione ridotta (la protezione dagli storm ha scartato i payload di contesto)
+        snapshot_fidelity_minimal: conteggiato durante uno storm — non è stato acquisito alcun contesto
+        snapshot_unknown: acquisita prima che RED registrasse la provenienza delle istantanee
       similar_errors:
         title: Errori simili
         badge: Corrispondenza approssimata
@@ -952,6 +958,9 @@ it:
         alert_view: Vedi
         error_rate: Tasso di errore
         error_rate_hint: Errori all'ora oggi
+        rate_per_hour: "%{value}/h"
+        affected_users_incomplete: almeno — la protezione dagli storm ha scartato il dettaglio per evento
+        data_unavailable: Le statistiche non sono al momento disponibili — i valori seguenti non sono una misurazione.
         unresolved: Non risolti
         unresolved_hint: In attesa di risoluzione
         resolution_rate: Tasso di risoluzione

data/config/locales/ja.yml

@@ -526,6 +526,12 @@ ja:
         copy_curl_title: curl コマンドをクリップボードにコピー
         copy_rspec: RSpec としてコピー
         copy_rspec_title: RSpec のリクエストスペックをクリップボードにコピー
+        snapshot: 'スナップショット:'
+        snapshot_captured_html: '%{time} に取得'
+        snapshot_stale: より前の発生から取得 — それ以降の発生はコンテキストを伴いませんでした
+        snapshot_fidelity_lite: 縮小された取得 (storm 保護によりコンテキストの payload が破棄されました)
+        snapshot_fidelity_minimal: storm 中にカウントされました — コンテキストは取得されていません
+        snapshot_unknown: RED がスナップショットの出所を記録する前に取得されました
       similar_errors:
         title: 類似エラー
         badge: あいまい一致
@@ -836,6 +842,9 @@ ja:
         alert_view: 表示
         error_rate: エラー率
         error_rate_hint: 本日の1時間あたりのエラー数
+        rate_per_hour: "%{value}/時"
+        affected_users_incomplete: 最少値 — storm 保護によりイベントごとの詳細が破棄されました
+        data_unavailable: 統計は現在利用できません — 以下の数値は計測値ではありません。
         unresolved: 未解決
         unresolved_hint: 解決待ち
         resolution_rate: 解決率

data/config/locales/pl.yml

@@ -605,6 +605,12 @@ pl:
         copy_curl_title: Skopiuj polecenie curl do schowka
         copy_rspec: Skopiuj jako RSpec
         copy_rspec_title: Skopiuj request spec RSpec do schowka
+        snapshot: 'Migawka:'
+        snapshot_captured_html: Przechwycono %{time}
+        snapshot_stale: z wcześniejszego wystąpienia — późniejsze nie przyniosły kontekstu
+        snapshot_fidelity_lite: ograniczone przechwytywanie (ochrona przed storm odrzuciła payloady kontekstu)
+        snapshot_fidelity_minimal: zliczone podczas storm — nie przechwycono żadnego kontekstu
+        snapshot_unknown: przechwycono, zanim RED zaczął zapisywać pochodzenie migawek
       similar_errors:
         title: Podobne błędy
         badge: Dopasowanie rozmyte
@@ -968,6 +974,9 @@ pl:
         alert_view: Zobacz
         error_rate: Wskaźnik błędów
         error_rate_hint: Błędów na godzinę dzisiaj
+        rate_per_hour: "%{value}/godz."
+        affected_users_incomplete: co najmniej — ochrona przed storm odrzuciła szczegóły poszczególnych zdarzeń
+        data_unavailable: Statystyki są obecnie niedostępne — poniższe liczby nie są pomiarem.
         unresolved: Nierozwiązane
         unresolved_hint: Oczekują na rozwiązanie
         resolution_rate: Wskaźnik rozwiązań

data/config/locales/pt-BR.yml

@@ -600,6 +600,12 @@ pt-BR:
         copy_curl_title: Copiar o comando curl para a área de transferência
         copy_rspec: Copiar como RSpec
         copy_rspec_title: Copiar o request spec do RSpec para a área de transferência
+        snapshot: 'Instantâneo:'
+        snapshot_captured_html: Capturado %{time}
+        snapshot_stale: de uma ocorrência anterior — as posteriores não trouxeram contexto
+        snapshot_fidelity_lite: captura reduzida (a proteção contra storms descartou os payloads de contexto)
+        snapshot_fidelity_minimal: contabilizado durante um storm — nenhum contexto foi capturado
+        snapshot_unknown: capturado antes de o RED registrar a procedência dos instantâneos
       similar_errors:
         title: Erros semelhantes
         badge: Correspondência aproximada
@@ -956,6 +962,9 @@ pt-BR:
         alert_view: Ver
         error_rate: Taxa de erro
         error_rate_hint: Erros por hora hoje
+        rate_per_hour: "%{value}/h"
+        affected_users_incomplete: no mínimo — a proteção contra storms descartou o detalhe por evento
+        data_unavailable: As estatísticas estão indisponíveis no momento — os números abaixo não são uma medição.
         unresolved: Não resolvidos
         unresolved_hint: Aguardando resolução
         resolution_rate: Taxa de resolução

data/config/locales/ru.yml

@@ -608,6 +608,12 @@ ru:
         copy_curl_title: Скопировать команду curl в буфер обмена
         copy_rspec: Скопировать как RSpec
         copy_rspec_title: Скопировать request-спеку RSpec в буфер обмена
+        snapshot: 'Снимок:'
+        snapshot_captured_html: 'Получен %{time}'
+        snapshot_stale: из более раннего появления — последующие не содержали контекста
+        snapshot_fidelity_lite: сокращённый сбор (защита от storm отбросила payload контекста)
+        snapshot_fidelity_minimal: учтено во время storm — контекст не собирался
+        snapshot_unknown: получен до того, как RED начал записывать происхождение снимков
       similar_errors:
         title: Похожие ошибки
         badge: Нечёткое совпадение
@@ -971,6 +977,9 @@ ru:
         alert_view: Открыть
         error_rate: Частота ошибок
         error_rate_hint: Ошибок в час за сегодня
+        rate_per_hour: "%{value}/ч"
+        affected_users_incomplete: не менее — защита от storm отбросила детализацию по событиям
+        data_unavailable: Статистика сейчас недоступна — приведённые ниже числа не являются измерением.
         unresolved: Не решено
         unresolved_hint: Ожидают решения
         resolution_rate: Доля решённых

data/config/locales/uk.yml

@@ -606,6 +606,12 @@ uk:
         copy_curl_title: Скопіювати команду curl у буфер обміну
         copy_rspec: Скопіювати як RSpec
         copy_rspec_title: Скопіювати request spec RSpec у буфер обміну
+        snapshot: 'Знімок:'
+        snapshot_captured_html: 'Отримано %{time}'
+        snapshot_stale: з ранішого випадку — подальші не містили контексту
+        snapshot_fidelity_lite: скорочений збір (захист від storm відкинув payload контексту)
+        snapshot_fidelity_minimal: враховано під час storm — контекст не збирався
+        snapshot_unknown: отримано до того, як RED почав записувати походження знімків
       similar_errors:
         title: Схожі помилки
         badge: Нечітке зіставлення
@@ -968,6 +974,9 @@ uk:
         alert_view: Переглянути
         error_rate: Частота помилок
         error_rate_hint: Помилок за годину сьогодні
+        rate_per_hour: "%{value}/год"
+        affected_users_incomplete: щонайменше — захист від storm відкинув деталізацію за подіями
+        data_unavailable: Статистика зараз недоступна — наведені нижче числа не є вимірюванням.
         unresolved: Не вирішено
         unresolved_hint: Очікують вирішення
         resolution_rate: Частка вирішених

data/config/locales/zh-CN.yml

@@ -523,6 +523,12 @@ zh-CN:
         copy_curl_title: 复制 curl 命令到剪贴板
         copy_rspec: 复制为 RSpec
         copy_rspec_title: 复制 RSpec request spec 到剪贴板
+        snapshot: '快照:'
+        snapshot_captured_html: 捕获于 %{time}
+        snapshot_stale: 来自更早的一次发生 — 之后的发生未携带上下文
+        snapshot_fidelity_lite: 已精简的捕获（storm 保护丢弃了上下文 payload）
+        snapshot_fidelity_minimal: 在 storm 期间计数 — 未捕获任何上下文
+        snapshot_unknown: 在 RED 记录快照来源之前捕获
       similar_errors:
         title: 相似错误
         badge: 模糊匹配
@@ -832,6 +838,9 @@ zh-CN:
         alert_view: 查看
         error_rate: 错误率
         error_rate_hint: 今日每小时错误数
+        rate_per_hour: "%{value}/小时"
+        affected_users_incomplete: 至少 — storm 保护丢弃了逐事件的明细
+        data_unavailable: 统计数据当前不可用 — 下方数字并非测量结果。
         unresolved: 未解决
         unresolved_hint: 等待处理
         resolution_rate: 解决率

data/db/migrate/20260915000001_add_group_identity_unique_index_to_error_logs.rb

@@ -0,0 +1,207 @@
+# frozen_string_literal: true
+
+# Give an error group a database-enforced identity.
+#
+# FindOrIncrementError locks the row it finds, which makes concurrent
+# *increments* safe. Creation had no such protection: two connections that both
+# miss the unresolved lookup for one fingerprint both INSERT, and the
+# RecordNotUnique retry branch below that miss was unreachable because no
+# unique constraint existed to violate. Two rows, each occurrence_count 1,
+# splitting counts, workflow and notifications at the exact moment a new fault
+# fans out across a fleet.
+#
+# The identity is (application_id, error_hash, environment, group_window)
+# restricted to unresolved rows:
+#
+#   * environment is a MATCH dimension — the same error in staging and in
+#     production is legitimately two rows, so it belongs in the key.
+#   * group_window is why this is not a blanket unique index. RED deliberately
+#     opens a NEW unresolved group once the previous one's occurred_at falls
+#     outside its 24 h window, so (application_id, error_hash, environment)
+#     alone forbids intended behaviour. group_window is an immutable bucket
+#     stamped at creation, so two racing creates (milliseconds apart) share a
+#     bucket and collide, while a create after the window rolls over gets a
+#     different bucket and is allowed.
+#   * both are wrapped in COALESCE. In SQL NULL != NULL, so a plain index over
+#     nullable columns would NOT constrain legacy rows: every NULL-environment
+#     row (pre-0.11.0) and every NULL-group_window row (pre-this-migration) is
+#     distinct from every other, and the duplicates this index exists to
+#     prevent slip straight through the hole.
+#   * WHERE resolved = false keeps reopen semantics intact. A resolved row and
+#     its unresolved successor coexist, and several resolved rows for one
+#     fingerprint are ordinary history.
+#
+# The index is a BACKSTOP, not the grouping mechanism. The 24 h lookup still
+# runs first and catches the ordinary near-boundary case; the index only bites
+# when two creates genuinely race, which is why a coarse bucket is sufficient.
+#
+# MySQL has no partial (filtered) indexes, so the index is skipped there and
+# the pre-existing RecordNotUnique retry simply stays dormant, exactly as it is
+# today. That is a real gap, documented rather than papered over. The column is
+# still added on MySQL so the model behaves identically on every adapter.
+class AddGroupIdentityUniqueIndexToErrorLogs < ActiveRecord::Migration[7.0]
+  # CREATE INDEX CONCURRENTLY cannot run inside a transaction on PostgreSQL.
+  disable_ddl_transaction!
+
+  TABLE = :rails_error_dashboard_error_logs
+  INDEX = "index_error_logs_on_group_identity"
+  # Byte-identical to the expression in spec/dummy/db/schema.rb. SQLite echoes
+  # an expression index back verbatim and bin/check-schema-parity compares the
+  # echoed text, so these two spellings must not drift (note: no space after
+  # the comma inside either COALESCE).
+  EXPRESSION = "application_id, error_hash, COALESCE(environment,''), COALESCE(group_window,'')"
+
+  def up
+    return unless table_exists?(TABLE)
+
+    unless column_exists?(TABLE, :group_window)
+      # 10 chars: an ISO date bucket ("2026-09-15"). Short enough to keep the
+      # composite index cheap under MySQL's utf8mb4 key limit.
+      add_column TABLE, :group_window, :string, limit: 10
+    end
+
+    # Existing rows predate the column. Stamp each unresolved row from its own
+    # occurred_at so the bucket means the same thing for history as it does for
+    # new rows; anything that still collides after that is a genuine duplicate
+    # and is merged below.
+    backfill_group_window!
+
+    return if mysql? # no partial indexes
+    return if index_name_exists?(TABLE, INDEX)
+
+    # A host upgrading may already hold duplicates created by the very race
+    # this index prevents. Building the index over them would fail, so merge
+    # them first: the survivor keeps the summed occurrence_count and the widest
+    # time range, and the losers are deleted after their occurrence rows are
+    # re-pointed at the survivor.
+    deduplicate_existing_groups!
+
+    if postgresql?
+      add_index TABLE, EXPRESSION, name: INDEX, unique: true,
+                where: "resolved = false", algorithm: :concurrently
+    else
+      add_index TABLE, EXPRESSION, name: INDEX, unique: true, where: "resolved = false"
+    end
+  end
+
+  def down
+    return unless table_exists?(TABLE)
+
+    # Dropping the index and the column is reversible; merging the duplicate
+    # groups it required is not — the losing rows and their original counts
+    # are gone.
+    raise ActiveRecord::IrreversibleMigration,
+          "this migration merges duplicate error groups before creating #{INDEX}; the pre-merge rows cannot be restored"
+  end
+
+  private
+
+  # Only unresolved rows need a bucket: the index covers `resolved = false`
+  # only, and leaving resolved history NULL keeps the backfill cheap on a big
+  # table.
+  def backfill_group_window!
+    quoted = connection.quote_column_name("group_window")
+    connection.update(<<~SQL)
+      UPDATE #{connection.quote_table_name(TABLE.to_s)}
+      SET #{quoted} = #{window_expression}
+      WHERE #{quoted} IS NULL
+        AND resolved = #{quoted_false}
+    SQL
+  end
+
+  # The same value ErrorLog#set_group_window computes in Ruby: occurred_at as
+  # a UTC ISO date.
+  def window_expression
+    if postgresql?
+      "to_char(occurred_at AT TIME ZONE 'UTC', 'YYYY-MM-DD')"
+    elsif mysql?
+      "DATE_FORMAT(CONVERT_TZ(occurred_at, '+00:00', '+00:00'), '%Y-%m-%d')"
+    else
+      "strftime('%Y-%m-%d', occurred_at)"
+    end
+  end
+
+  def deduplicate_existing_groups!
+    duplicate_keys.each do |application_id, error_hash, env_key, window_key|
+      # '' is the COALESCE stand-in for NULL (see duplicate_keys).
+      environment = env_key.presence
+      group_window = window_key.presence
+
+      scope = ErrorLogRow.where(application_id: application_id, error_hash: error_hash, resolved: false)
+      scope = environment.nil? ? scope.where(environment: nil) : scope.where(environment: environment)
+      scope = group_window.nil? ? scope.where(group_window: nil) : scope.where(group_window: group_window)
+
+      rows = scope.order(:id).to_a
+      next if rows.size < 2
+
+      survivor = rows.first
+      losers = rows[1..]
+
+      total = rows.sum { |r| r.occurrence_count.to_i }
+      first_seen = rows.filter_map { |r| r.occurred_at }.min
+      last_seen = rows.filter_map { |r| r.last_seen_at || r.occurred_at }.max
+
+      if occurrences_table?
+        OccurrenceRow.where(error_log_id: losers.map(&:id)).update_all(error_log_id: survivor.id)
+      end
+
+      updates = { occurrence_count: total }
+      updates[:occurred_at] = first_seen if first_seen
+      updates[:last_seen_at] = last_seen if last_seen
+      ErrorLogRow.where(id: survivor.id).update_all(updates)
+      ErrorLogRow.where(id: losers.map(&:id)).delete_all
+
+      say "merged #{losers.size} duplicate group(s) into error log #{survivor.id}", true
+    end
+  end
+
+  # The identity tuples that currently have more than one unresolved row.
+  # COALESCE mirrors the index expression, so a set of NULL-environment rows
+  # counts as one group rather than as N distinct ones.
+  def duplicate_keys
+    # PostgreSQL requires every selected column to appear in GROUP BY or an
+    # aggregate, so the COALESCE expressions are selected rather than the bare
+    # columns (SQLite tolerates the bare form; PG raises GroupingError).
+    # '' therefore means NULL here, which deduplicate_existing_groups! maps
+    # back when it scopes each group.
+    connection.select_rows(<<~SQL)
+      SELECT application_id,
+             error_hash,
+             COALESCE(environment, '') AS env_key,
+             COALESCE(group_window, '') AS window_key
+      FROM #{connection.quote_table_name(TABLE.to_s)}
+      WHERE resolved = #{quoted_false}
+      GROUP BY application_id, error_hash, COALESCE(environment, ''), COALESCE(group_window, '')
+      HAVING COUNT(*) > 1
+    SQL
+  end
+
+  def quoted_false
+    postgresql? ? "false" : "0"
+  end
+
+  def occurrences_table?
+    table_exists?(:rails_error_dashboard_error_occurrences)
+  end
+
+  def postgresql?
+    connection.adapter_name.downcase == "postgresql"
+  end
+
+  def mysql?
+    connection.adapter_name.downcase.match?(/mysql|trilogy/)
+  end
+
+  # Bare AR classes: the gem's real models carry callbacks, default scopes and
+  # a possibly separate connection. A migration must see the table it is
+  # migrating, exactly as it is on disk right now.
+  class ErrorLogRow < ActiveRecord::Base
+    self.table_name = "rails_error_dashboard_error_logs"
+    self.inheritance_column = nil
+  end
+
+  class OccurrenceRow < ActiveRecord::Base
+    self.table_name = "rails_error_dashboard_error_occurrences"
+    self.inheritance_column = nil
+  end
+end

data/db/migrate/20260915000002_add_issue_repo_identity_to_error_logs.rb

@@ -0,0 +1,89 @@
+# frozen_string_literal: true
+
+# Record WHICH repository (or Linear team) a linked issue belongs to.
+#
+# A linked issue was identified by provider + issue number alone, so issue 42
+# on github.com/acme/api and issue 42 on github.com/acme/web were the same
+# identity to RED. A validly signed webhook from the second repository
+# resolved the error linked to the first. It matters for shared databases,
+# several linked repositories, a repository rename, and Linear, where issue
+# numbers are scoped per team and collide constantly.
+#
+# The repository identity is present in every payload RED already parses and
+# in every issue URL LinkExistingIssue already matches -- it was extracted and
+# then discarded. This column keeps it.
+#
+# Shape per provider, matching what each API client already expects as `repo`:
+#   github    "owner/repo"
+#   gitlab    "group/project"      (URL-encoded by the client)
+#   codeberg  "owner/repo"         (Gitea/Forgejo)
+#   linear    "ENG"                (team key -- Linear has no repository)
+#
+# Nullable: rows linked before this migration have no recorded repository.
+# Those are matched leniently (provider + number, as before) so an existing
+# link keeps working, and the identity is filled in the first time a webhook
+# or a re-link supplies it. A backfill is not possible in general -- the URL
+# is the only evidence, and it is parsed here where it exists.
+class AddIssueRepoIdentityToErrorLogs < ActiveRecord::Migration[7.0]
+  TABLE = :rails_error_dashboard_error_logs
+
+  def up
+    return unless table_exists?(TABLE)
+    return if column_exists?(TABLE, :external_issue_repo)
+
+    # 255: "group/subgroup/subgroup/project" on GitLab can be long, and this
+    # column is matched, not indexed on its own.
+    add_column TABLE, :external_issue_repo, :string, limit: 255
+
+    # The lookup a webhook performs: provider + number + repository.
+    add_index TABLE, [ :external_issue_provider, :external_issue_number, :external_issue_repo ],
+              name: "index_error_logs_on_issue_identity"
+
+    backfill_from_urls!
+  end
+
+  def down
+    return unless table_exists?(TABLE)
+
+    if index_name_exists?(TABLE, "index_error_logs_on_issue_identity")
+      remove_index TABLE, name: "index_error_logs_on_issue_identity"
+    end
+    remove_column TABLE, :external_issue_repo if column_exists?(TABLE, :external_issue_repo)
+  end
+
+  private
+
+  # Recover the repository from the stored issue URL where its shape makes
+  # that unambiguous. Anything unrecognised stays NULL and is matched
+  # leniently until a webhook or a re-link supplies the identity.
+  def backfill_from_urls!
+    ErrorLogRow.where.not(external_issue_url: nil)
+               .where(external_issue_repo: nil)
+               .find_each do |row|
+      repo = parse_repo(row.external_issue_url)
+      next if repo.blank?
+
+      ErrorLogRow.where(id: row.id).update_all(external_issue_repo: repo)
+    end
+  rescue => e
+    # A backfill must never block the migration: NULL simply means "matched
+    # leniently", which is exactly the pre-migration behaviour.
+    say "skipped issue repository backfill: #{e.class} - #{e.message}", true
+  end
+
+  def parse_repo(url)
+    case url.to_s
+    when %r{github\.com/([^/]+/[^/]+)/issues/\d+}i     then Regexp.last_match(1)
+    when %r{gitlab\.com/([^/]+/[^/]+)/-/issues/\d+}i   then Regexp.last_match(1)
+    when %r{codeberg\.org/([^/]+/[^/]+)/issues/\d+}i   then Regexp.last_match(1)
+    when %r{linear\.app/[^/]+/issue/([A-Za-z][A-Za-z0-9]*)-\d+}i then Regexp.last_match(1).upcase
+    end
+  end
+
+  # Bare class: the real model carries callbacks, a default scope and possibly
+  # a separate connection. A migration reads the table as it is on disk.
+  class ErrorLogRow < ActiveRecord::Base
+    self.table_name = "rails_error_dashboard_error_logs"
+    self.inheritance_column = nil
+  end
+end