rails_error_dashboard 0.9.0 → 0.10.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f85952e5800c354ae158411afbec605cddbc5e19595e8e94620d1b13fc17894b
-  data.tar.gz: 1af4bb9352a7fcffc10fc6b913b896ca2fd75198d31e044ff156b76cb52f6afc
+  metadata.gz: 7065559d38e3152511024cd4a44698c3b215cc6cd60e4917d52cf4d893180b6c
+  data.tar.gz: 0d9237d4e89f4cb08392aecfe109dbb38bc1aaf673e834d827441bebf84a6e3f
 SHA512:
-  metadata.gz: a6bc19522b5797095df0545fd6eca1b2552bfcd693ebb4363a17e8076ad784654340a70d1e9591f2ab3fc17a5fc9be10e65efa1b0211b329203c639b085b37a7
-  data.tar.gz: c0885c4d27dde62b2439a40dac82acdee468f34ce9dd3d188b2f589bbceedab680c746ec7793e894cb3d5dacb7aff68908139cf90d655dc9790c0aea503ef784
+  metadata.gz: 996b72e8406365ca4ee064464faa785b7a43dfa5f643ed9f2ca3be39d4d98b3dd13ed6426a1dbef3eb53fad3d6433d89b70b3f8a3d8e40434aad1e882cff0eb1
+  data.tar.gz: 4814ed8949397ce5ca0cd27cf4e9f52f5ba2e5bf243eff411eb0e7c80539fef978c0dc87505c02bb0e2a259725a8fec97a5897c62073eae2a9142c0f0b2c2ea8

data/app/controllers/rails_error_dashboard/errors_controller.rb

@@ -535,6 +535,12 @@ module RailsErrorDashboard
       @unique_rules = all_events.size
       @total_events = all_events.sum { |e| e[:count] }
       @unique_ips = all_events.flat_map { |e| e[:ips] }.uniq.size
+      # Events matched by a recognised AI agent. Counts requests, not addresses —
+      # one agent rotates through many IPs, so unique_ips overstates it (#170).
+      @ai_events = all_events.sum { |e| e[:ai_count].to_i }
+      # Counts the tracker's LRU eviction dropped; shown so the totals above are
+      # never silently understated.
+      @overflow_count = result[:overflow_count].to_i
 
       @pagy, @events = pagy(:offset, all_events, limit: params[:per_page] || 25)
     end

data/app/helpers/rails_error_dashboard/i18n_helper.rb

@@ -150,5 +150,31 @@ module RailsErrorDashboard
     rescue StandardError
       "%B %d, %Y %I:%M:%S %p"
     end
+
+    # A finished, localized date string for somewhere the browser will not
+    # re-render it.
+    #
+    # Almost every timestamp on the dashboard goes out as a <span data-format>
+    # that formatDateTime() localizes client-side. Chart labels cannot: they
+    # are serialized into a JS array and handed to Chart.js as plain strings,
+    # so whatever the server writes is what the axis shows. Calling strftime
+    # directly there is what put English month names on every locale's charts
+    # (#178) — Ruby's strftime is not locale-aware.
+    #
+    # Same formatter the mailers and the Slack/Discord payloads use, so a chart
+    # axis and an email agree about what a date looks like.
+    #
+    # @param time [Time, Date, nil]
+    # @param pattern [String] a strftime pattern
+    # @return [String] "" for nil — an axis label must never read "undefined"
+    def red_chart_date(time, pattern)
+      return "" if time.nil?
+
+      time = time.to_time if time.respond_to?(:to_time) && !time.is_a?(Time)
+      Services::LocalizedTimeFormatter.call(time, pattern: pattern, locale: red_locale)
+    rescue StandardError
+      # A chart with an English axis beats a chart that fails to render.
+      time.respond_to?(:strftime) ? time.strftime(pattern) : time.to_s
+    end
   end
 end

data/app/jobs/rails_error_dashboard/rack_attack_flush_job.rb

@@ -22,9 +22,13 @@ module RailsErrorDashboard
         # Mode 1: Persist provided snapshot (dispatched from tracker flush)
         Commands::FlushRackAttackEvents.call(counts: counts)
       else
-        # Mode 2: Flush current thread's buffer (scheduled cron safety net).
-        # sync: true because we are already off the request path.
-        Services::RackAttackTracker.flush!(sync: true)
+        # Mode 2: Flush EVERY live thread's buffer (scheduled cron safety net).
+        #
+        # This used to call flush!, which only ever sees Thread.current — the
+        # job worker's own buffer, which is always empty. The counts live on the
+        # Puma threads that served the requests, so the documented safety net
+        # swept nothing. flush_all_threads! is what makes the promise true.
+        Services::RackAttackTracker.flush_all_threads!
       end
     end
   end

data/app/models/rails_error_dashboard/rack_attack_event.rb

@@ -12,8 +12,12 @@ module RailsErrorDashboard
   class RackAttackEvent < ErrorLogsRecord
     self.table_name = "rails_error_dashboard_rack_attack_events"
 
-    # Event types emitted by Rack::Attack (v5.0+)
-    MATCH_TYPES = %w[throttle blocklist track safelist].freeze
+    # Event types emitted by Rack::Attack (v5.0+), plus "overflow" — not a
+    # Rack::Attack event at all, but a synthetic bucket holding counts dropped
+    # by the tracker's LRU eviction so totals stay truthful. Overflow rows are
+    # excluded from the per-rule listing and surfaced separately.
+    MATCH_TYPES = %w[throttle blocklist track safelist overflow].freeze
+    OVERFLOW_MATCH_TYPE = "overflow"
 
     belongs_to :application, optional: true
 

data/app/views/layouts/rails_error_dashboard.html.erb

@@ -1751,6 +1751,51 @@ document.addEventListener('DOMContentLoaded', function() {
       .replace('%H',pad(h)).replace('%I',pad(h12)).replace('%M',pad(mi)).replace('%S',pad(s)).replace('%p',ampm).replace('%P',ampm.toLowerCase());
   }
 
+  // Chart.js renders date axes through chartjs-adapter-date-fns, whose bundle
+  // ships English locale data only. Loading eleven date-fns locales from a CDN
+  // to fix that would be absurd when RED already carries localized month and
+  // day names in red.js.* for formatDateTime(). So the adapter's format() is
+  // redirected through the same vocabulary the rest of the dashboard uses, and
+  // a chart axis, a page timestamp and an email now agree.
+  //
+  // Only the tokens the adapter's own format table can emit are mapped:
+  //   datetime "MMM d, yyyy, h:mm:ss aaaa"   millisecond "h:mm:ss.SSS aaaa"
+  //   second "h:mm:ss aaaa"  minute "h:mm aaaa"  hour "ha"  day "MMM d"
+  //   week "PP"  month "MMM yyyy"  quarter "qqq - yyyy"  year "yyyy"
+  // Anything else — a caller-supplied pattern, a future adapter version — is
+  // handed back to the original implementation rather than half-translated.
+  function installRedChartDateAdapter() {
+    if (typeof Chart === 'undefined' || !Chart._adapters || !Chart._adapters._date) return;
+    var proto = Chart._adapters._date.prototype;
+    if (!proto || typeof proto.format !== 'function' || proto._redPatched) return;
+
+    // date-fns token -> strftime, for the patterns the adapter actually uses.
+    var TOKENS = {
+      'MMM d, yyyy, h:mm:ss aaaa': '%b %d, %Y, %I:%M:%S %p',
+      'h:mm:ss.SSS aaaa': '%I:%M:%S %p',
+      'h:mm:ss aaaa': '%I:%M:%S %p',
+      'h:mm aaaa': '%I:%M %p',
+      'ha': '%I %p',
+      'MMM d': '%b %d',
+      'PP': '%b %d, %Y',
+      'MMM yyyy': '%b %Y',
+      'yyyy': '%Y'
+    };
+
+    var original = proto.format;
+    proto.format = function(time, fmt) {
+      try {
+        var strf = TOKENS[fmt];
+        if (strf) return formatDateTime(new Date(time), strf);
+      } catch (e) {
+        // Fall through — a chart with English axes beats a chart that throws.
+      }
+      return original.call(this, time, fmt);
+    };
+    proto._redPatched = true;
+  }
+
+
   function getTimezoneAbbreviation(date) {
     // RED's locale set and the browser's Intl data need not agree, so an
     // unsupported tag throws RangeError here rather than degrading. Catch it
@@ -1801,6 +1846,16 @@ document.addEventListener('DOMContentLoaded', function() {
   }
 
   convertToLocalTime();
+
+  // Localize Chart.js date axes. Kept out of the block above on purpose: that
+  // region is extracted and run in bare node by js_date_parity_spec, where
+  // `document` is a stub, so it must contain definitions only — no top-level
+  // browser calls. The adapter is patched on the prototype, so charts drawn
+  // later pick it up; chartkick:load re-asserts for page scripts whose own
+  // DOMContentLoaded handler beat this one, and _redPatched makes that a no-op.
+  installRedChartDateAdapter();
+  document.addEventListener('chartkick:load', installRedChartDateAdapter);
+
   if (typeof Turbo !== 'undefined') {
     document.addEventListener('turbo:load', convertToLocalTime);
     document.addEventListener('turbo:frame-load', convertToLocalTime);

data/app/views/rails_error_dashboard/errors/analytics.html.erb

@@ -75,8 +75,6 @@
             curve: false,
             points: true,
             height: "300px",
-            xtitle: "Date",
-            ytitle: "Number of Errors",
             library: {
               scales: {
                 x: {
@@ -172,18 +170,19 @@
               new Chartkick.BarChart("errors-by-type-chart", <%= raw @errors_by_type.to_json %>, {
                 color: "#EF4444",
                 height: "400px",
-                xtitle: "Error Type",
-                ytitle: "Count",
                 library: {
                   scales: {
+                    // Chartkick's BarChart is horizontal (it sets indexAxis:"y"),
+                    // so the categories sit on y and the counts on x — the
+                    // opposite of the ColumnCharts on this page. #178.
                     x: {
                       ticks: { color: colors.textColor },
-                      title: { color: colors.textColor, display: true, text: '<%= red_js_t("red.ui_js.charts.axis_error_type") %>' },
+                      title: { color: colors.textColor, display: true, text: '<%= red_js_t("red.ui_js.charts.axis_count") %>' },
                       grid: { color: colors.gridColor }
                     },
                     y: {
                       ticks: { color: colors.textColor },
-                      title: { color: colors.textColor, display: true, text: '<%= red_js_t("red.ui_js.charts.axis_count") %>' },
+                      title: { color: colors.textColor, display: true, text: '<%= red_js_t("red.ui_js.charts.axis_error_type") %>' },
                       grid: { color: colors.gridColor }
                     }
                   },
@@ -214,8 +213,6 @@
               new Chartkick.ColumnChart("errors-by-hour-chart", <%= raw @errors_by_hour.to_json %>, {
                 color: "#DC2626",
                 height: "300px",
-                xtitle: "Hour",
-                ytitle: "Number of Errors",
                 library: {
                   scales: {
                     x: {
@@ -422,8 +419,6 @@
                 new Chartkick.ColumnChart("errors-by-version-chart", versionData, {
                   colors: ["#8B5CF6", "#EF4444", "#F59E0B", "#10B981"],
                   height: "300px",
-                  xtitle: "Version",
-                  ytitle: "Error Count",
                   library: window.getChartLibraryOptions()
                 });
               });
@@ -558,7 +553,7 @@
                 const colors = window.getChartColors();
                 new Chartkick.BarChart("mttr-by-platform-chart",
                   <%= raw @mttr_by_platform.to_json %>, {
-                  suffix: " hours",
+                  suffix: '<%= red_js_t("red.ui_js.charts.suffix_hours") %>',
                   height: "200px",
                   colors: ["#8B5CF6"],
                   library: window.getChartLibraryOptions()
@@ -611,7 +606,7 @@
                 const colors = window.getChartColors();
                 new Chartkick.LineChart("mttr-trend-chart",
                   <%= raw @mttr_stats[:mttr_trend].to_json %>, {
-                  suffix: " hours",
+                  suffix: '<%= red_js_t("red.ui_js.charts.suffix_hours") %>',
                   height: "250px",
                   colors: ["#10B981"],
                   curve: false,

data/app/views/rails_error_dashboard/errors/correlation.html.erb

@@ -36,8 +36,8 @@
             <div class="display-6"><%= @period_comparison[:current_period][:count] %></div>
             <small class="text-muted">
               <%= red_t("red.analytics.correlation.trend_analysis.period_range",
-                         start: @period_comparison[:current_period][:start].strftime("%b %d"),
-                         end: @period_comparison[:current_period][:end].strftime("%b %d")) %>
+                         start: red_chart_date(@period_comparison[:current_period][:start], "%b %d"),
+                         end: red_chart_date(@period_comparison[:current_period][:end], "%b %d")) %>
             </small>
           </div>
           <div class="col-md-4">
@@ -45,8 +45,8 @@
             <div class="display-6"><%= @period_comparison[:previous_period][:count] %></div>
             <small class="text-muted">
               <%= red_t("red.analytics.correlation.trend_analysis.period_range",
-                         start: @period_comparison[:previous_period][:start].strftime("%b %d"),
-                         end: @period_comparison[:previous_period][:end].strftime("%b %d")) %>
+                         start: red_chart_date(@period_comparison[:previous_period][:start], "%b %d"),
+                         end: red_chart_date(@period_comparison[:previous_period][:end], "%b %d")) %>
             </small>
           </div>
           <div class="col-md-4">

data/app/views/rails_error_dashboard/errors/platform_comparison.html.erb

@@ -358,7 +358,7 @@
     new Chart(dailyTrendCtx, {
       type: 'line',
       data: {
-        labels: <%= raw @daily_trends.values.first&.keys&.map { |d| d.strftime('%b %d') }&.to_json || [].to_json %>,
+        labels: <%= raw @daily_trends.values.first&.keys&.map { |d| red_chart_date(d, '%b %d') }&.to_json || [].to_json %>,
         datasets: datasets
       },
       options: {

data/app/views/rails_error_dashboard/errors/rack_attack_summary.html.erb

@@ -49,7 +49,7 @@
     </div>
   <% else %>
     <div class="row mb-4">
-      <div class="col-md-4">
+      <div class="col-md-3">
         <div class="card text-center">
           <div class="card-body">
             <div class="display-6 text-warning"><%= @unique_rules %></div>
@@ -57,7 +57,7 @@
           </div>
         </div>
       </div>
-      <div class="col-md-4">
+      <div class="col-md-3">
         <div class="card text-center">
           <div class="card-body">
             <div class="display-6 text-danger"><%= @total_events %></div>
@@ -65,7 +65,7 @@
           </div>
         </div>
       </div>
-      <div class="col-md-4">
+      <div class="col-md-3">
         <div class="card text-center">
           <div class="card-body">
             <div class="display-6 text-info"><%= @unique_ips %></div>
@@ -73,8 +73,27 @@
           </div>
         </div>
       </div>
+      <div class="col-md-3">
+        <div class="card text-center">
+          <div class="card-body">
+            <div class="display-6 text-primary"><%= @ai_events %></div>
+            <small class="text-muted"><%= red_t("red.errors.rack_attack_page.ai_events") %></small>
+          </div>
+        </div>
+      </div>
     </div>
 
+    <% if @overflow_count.to_i.positive? %>
+      <div class="alert alert-warning d-flex align-items-start" role="alert">
+        <i class="bi bi-exclamation-triangle me-2"></i>
+        <div>
+          <%= red_t("red.errors.rack_attack_page.overflow_notice_html",
+                    count: @overflow_count,
+                    option: content_tag(:code, "rack_attack_max_cache_size")) %>
+        </div>
+      </div>
+    <% end %>
+
     <div class="card mb-4">
       <div class="card-header d-flex justify-content-between align-items-center">
         <h5 class="mb-0">
@@ -94,6 +113,7 @@
                 <th width="80"><%= red_t("red.errors.rack_attack_page.column_count") %></th>
                 <th width="80"><%= red_t("red.errors.rack_attack_page.column_ips") %></th>
                 <th><%= red_t("red.errors.rack_attack_page.column_top_path") %></th>
+                <th width="160"><%= red_t("red.errors.rack_attack_page.column_top_agent") %></th>
                 <th width="140"><%= red_t("red.errors.pages.column_last_seen") %></th>
               </tr>
             </thead>
@@ -115,6 +135,19 @@
                   <td><strong><%= event[:count] %></strong></td>
                   <td><%= event[:unique_ips] %></td>
                   <td><code><%= event[:top_path] %></code></td>
+                  <td>
+                    <% if event[:top_agent].present? %>
+                      <%# AI agents are highlighted because "which agent" is the
+                          question IP counts cannot answer — one agent is a fleet. %>
+                      <span class="badge <%= event[:ai_count].to_i.positive? ? "bg-primary" : "bg-light text-dark" %>"
+                            title="<%= event[:top_agent] %>"><%= truncate(event[:top_agent], length: 22) %></span>
+                      <% if event[:unique_agents].to_i > 1 %>
+                        <small class="text-muted">+<%= event[:unique_agents].to_i - 1 %></small>
+                      <% end %>
+                    <% else %>
+                      <span class="text-muted">&mdash;</span>
+                    <% end %>
+                  </td>
                   <td><%= local_time_ago(event[:last_seen]) %></td>
                 </tr>
               <% end %>

data/config/locales/de.yml

@@ -833,12 +833,16 @@ de:
         unique_rules: Eindeutige Regeln
         total_events: Ereignisse gesamt
         unique_ips: Eindeutige IPs
+        ai_events: KI-Agent-Anfragen
         all_title: Rate-Limit-Ereignisse nach Regel
         column_rule: Regel
         column_type: Typ
         column_count: Anzahl
         column_ips: IPs
         column_top_path: Häufigster Pfad
+        column_top_agent: Häufigster Agent
+        overflow_notice_html: >-
+          %{count} Ereignisse konnten keiner Regel zugeordnet werden, da der Puffer des Trackers voll war. Erhöhen Sie %{option}, um mehr zu erfassen.
         match_type:
           blocklist: blocklist
           throttle: throttle
@@ -2003,5 +2007,6 @@ de:
         axis_count: Anzahl
         axis_number_of_errors: Anzahl der Fehler
         axis_hours: Stunden
+        suffix_hours: " Stunden"
         series_total_errors: Fehler gesamt
         series_hours_to_resolve: Stunden bis zur Behebung

data/config/locales/en.yml

@@ -1172,12 +1172,16 @@ en:
         unique_rules: "Unique Rules"
         total_events: "Total Events"
         unique_ips: "Unique IPs"
+        ai_events: "AI Agent Requests"
         all_title: "Rate Limit Events by Rule"
         column_rule: "Rule"
         column_type: "Type"
         column_count: "Count"
         column_ips: "IPs"
         column_top_path: "Top Path"
+        column_top_agent: "Top Agent"
+        overflow_notice_html: >-
+          %{count} events could not be attributed to a rule because the tracker's buffer was full. Raise %{option} to capture more.
         # Rack Attack match types. These are machine values the view also
         # compares by string equality, so the display is a lookup and the
         # comparison keeps the English literal.
@@ -2715,5 +2719,8 @@ en:
         axis_count: "Count"
         axis_number_of_errors: "Number of Errors"
         axis_hours: "Hours"
+        # Chartkick concatenates this after a number on the MTTR charts, so it
+        # carries its own leading space and is a bare unit, not a sentence.
+        suffix_hours: " hours"
         series_total_errors: "Total Errors"
         series_hours_to_resolve: "Hours to Resolve"

data/config/locales/es.yml

@@ -862,12 +862,16 @@ es:
         unique_rules: Reglas únicas
         total_events: Total de eventos
         unique_ips: IP únicas
+        ai_events: Solicitudes de agentes de IA
         all_title: Eventos de límite de tasa por regla
         column_rule: Regla
         column_type: Tipo
         column_count: Cantidad
         column_ips: IP
         column_top_path: Ruta principal
+        column_top_agent: Agente principal
+        overflow_notice_html: >-
+          No se pudieron atribuir %{count} eventos a ninguna regla porque el búfer del rastreador estaba lleno. Aumente %{option} para capturar más.
         match_type:
           blocklist: blocklist
           throttle: throttle
@@ -2075,5 +2079,6 @@ es:
         axis_count: Cantidad
         axis_number_of_errors: Número de errores
         axis_hours: Horas
+        suffix_hours: " horas"
         series_total_errors: Total de errores
         series_hours_to_resolve: Horas hasta la resolución

data/config/locales/fr.yml

@@ -861,12 +861,16 @@ fr:
         unique_rules: Règles uniques
         total_events: Total des événements
         unique_ips: IP uniques
+        ai_events: Requêtes d'agents IA
         all_title: Événements de limitation de débit par règle
         column_rule: Règle
         column_type: Type
         column_count: Nombre
         column_ips: IP
         column_top_path: Chemin principal
+        column_top_agent: Agent principal
+        overflow_notice_html: >-
+          %{count} événements n'ont pas pu être attribués à une règle car la mémoire tampon du traceur était pleine. Augmentez %{option} pour en capturer davantage.
         match_type:
           blocklist: blocklist
           throttle: throttle
@@ -2078,5 +2082,6 @@ fr:
         axis_count: Nombre
         axis_number_of_errors: Nombre d'erreurs
         axis_hours: Heures
+        suffix_hours: " heures"
         series_total_errors: Total des erreurs
         series_hours_to_resolve: Heures avant résolution

data/config/locales/it.yml

@@ -847,12 +847,16 @@ it:
         unique_rules: Regole uniche
         total_events: Eventi totali
         unique_ips: IP unici
+        ai_events: Richieste di agenti IA
         all_title: Eventi di limite di richieste per regola
         column_rule: Regola
         column_type: Tipo
         column_count: Conteggio
         column_ips: Indirizzi IP
         column_top_path: Percorso principale
+        column_top_agent: Agente principale
+        overflow_notice_html: >-
+          %{count} eventi non sono stati attribuiti a nessuna regola perché il buffer del tracker era pieno. Aumenta %{option} per acquisirne di più.
         match_type:
           blocklist: blocklist
           throttle: throttle
@@ -2056,5 +2060,6 @@ it:
         axis_count: Conteggio
         axis_number_of_errors: Numero di errori
         axis_hours: Ore
+        suffix_hours: " ore"
         series_total_errors: Errori totali
         series_hours_to_resolve: Ore per la risoluzione

data/config/locales/ja.yml

@@ -755,12 +755,16 @@ ja:
         unique_rules: ルール数
         total_events: 総イベント数
         unique_ips: ユニーク IP 数
+        ai_events: AI エージェントのリクエスト数
         all_title: ルール別レート制限イベント
         column_rule: ルール
         column_type: 種類
         column_count: 件数
         column_ips: IP 数
         column_top_path: 上位パス
+        column_top_agent: 主要エージェント
+        overflow_notice_html: >-
+          トラッカーのバッファが満杯だったため、%{count} 件のイベントをルールに割り当てられませんでした。より多く記録するには %{option} を増やしてください。
         match_type:
           blocklist: blocklist
           throttle: throttle
@@ -1798,5 +1802,6 @@ ja:
         axis_count: 件数
         axis_number_of_errors: エラー件数
         axis_hours: 時間
+        suffix_hours: "時間"
         series_total_errors: 総エラー数
         series_hours_to_resolve: 解決までの時間

data/config/locales/pl.yml

@@ -869,12 +869,16 @@ pl:
         unique_rules: Unikalne reguły
         total_events: Łącznie zdarzeń
         unique_ips: Unikalne adresy IP
+        ai_events: Żądania agentów AI
         all_title: Zdarzenia limitu żądań wg reguły
         column_rule: Reguła
         column_type: Typ
         column_count: Liczba
         column_ips: Adresy IP
         column_top_path: Najczęstsza ścieżka
+        column_top_agent: Główny agent
+        overflow_notice_html: >-
+          Nie udało się przypisać %{count} zdarzeń do żadnej reguły, ponieważ bufor mechanizmu śledzenia był pełny. Zwiększ %{option}, aby rejestrować więcej.
         match_type:
           blocklist: blocklist
           throttle: throttle
@@ -2104,5 +2108,6 @@ pl:
         axis_count: Liczba
         axis_number_of_errors: Liczba błędów
         axis_hours: Godziny
+        suffix_hours: " godz."
         series_total_errors: Łącznie błędów
         series_hours_to_resolve: Godzin do rozwiązania

data/config/locales/pt-BR.yml

@@ -859,12 +859,16 @@ pt-BR:
         unique_rules: Regras únicas
         total_events: Total de eventos
         unique_ips: IPs únicos
+        ai_events: Solicitações de agentes de IA
         all_title: Eventos de limite de taxa por regra
         column_rule: Regra
         column_type: Tipo
         column_count: Quantidade
         column_ips: IPs
         column_top_path: Caminho principal
+        column_top_agent: Agente principal
+        overflow_notice_html: >-
+          Não foi possível atribuir %{count} eventos a nenhuma regra porque o buffer do rastreador estava cheio. Aumente %{option} para capturar mais.
         match_type:
           blocklist: blocklist
           throttle: throttle
@@ -2060,5 +2064,6 @@ pt-BR:
         axis_count: Quantidade
         axis_number_of_errors: Número de erros
         axis_hours: Horas
+        suffix_hours: " horas"
         series_total_errors: Total de erros
         series_hours_to_resolve: Horas até a resolução

data/config/locales/ru.yml

@@ -871,12 +871,16 @@ ru:
         unique_rules: Уникальные правила
         total_events: Всего событий
         unique_ips: Уникальные IP
+        ai_events: Запросы ИИ-агентов
         all_title: События ограничения частоты по правилам
         column_rule: Правило
         column_type: Тип
         column_count: Количество
         column_ips: IP-адреса
         column_top_path: Частый путь
+        column_top_agent: Основной агент
+        overflow_notice_html: >-
+          Не удалось отнести %{count} событий ни к одному правилу, так как буфер трекера был заполнен. Увеличьте %{option}, чтобы записывать больше.
         match_type:
           blocklist: blocklist
           throttle: throttle
@@ -2105,5 +2109,6 @@ ru:
         axis_count: Количество
         axis_number_of_errors: Количество ошибок
         axis_hours: Часы
+        suffix_hours: " ч"
         series_total_errors: Всего ошибок
         series_hours_to_resolve: Часов до решения

data/config/locales/uk.yml

@@ -869,12 +869,16 @@ uk:
         unique_rules: Унікальні правила
         total_events: Усього подій
         unique_ips: Унікальні IP
+        ai_events: Запити ШІ-агентів
         all_title: Події обмеження запитів за правилами
         column_rule: Правило
         column_type: Тип
         column_count: Кількість
         column_ips: IP-адреси
         column_top_path: Найчастіший шлях
+        column_top_agent: Основний агент
+        overflow_notice_html: >-
+          Не вдалося віднести %{count} подій до жодного правила, оскільки буфер трекера був заповнений. Збільште %{option}, щоб записувати більше.
         match_type:
           blocklist: blocklist
           throttle: throttle
@@ -2102,5 +2106,6 @@ uk:
         axis_count: Кількість
         axis_number_of_errors: Кількість помилок
         axis_hours: Години
+        suffix_hours: " год"
         series_total_errors: Усього помилок
         series_hours_to_resolve: Годин до вирішення

data/config/locales/zh-CN.yml

@@ -751,12 +751,16 @@ zh-CN:
         unique_rules: 规则数
         total_events: 事件总数
         unique_ips: 独立 IP 数
+        ai_events: AI 代理请求数
         all_title: 按规则查看限流事件
         column_rule: 规则
         column_type: 类型
         column_count: 数量
         column_ips: IP 地址
         column_top_path: 主要路径
+        column_top_agent: 主要代理
+        overflow_notice_html: >-
+          由于跟踪器缓冲区已满，%{count} 个事件无法归属到任何规则。请调高 %{option} 以捕获更多事件。
         match_type:
           blocklist: blocklist
           throttle: throttle
@@ -1787,5 +1791,6 @@ zh-CN:
         axis_count: 数量
         axis_number_of_errors: 错误数量
         axis_hours: 小时
+        suffix_hours: "小时"
         series_total_errors: 错误总数
         series_hours_to_resolve: 解决耗时（小时）

data/db/migrate/20260824000001_add_user_agent_to_rack_attack_events.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+class AddUserAgentToRackAttackEvents < ActiveRecord::Migration[7.0]
+  def change
+    # Guard against the squashed schema migration having already added this
+    # column — without it, every later migration is silently cancelled.
+    return if column_exists?(:rails_error_dashboard_rack_attack_events, :user_agent)
+
+    # Capped at 191 to match the other free-text columns on this table.
+    #
+    # Deliberately NOT added to index_rack_attack_events_upsert_key. That index
+    # is already budgeted at 250+50+191+191 chars = 2736 bytes against MySQL's
+    # 3072-byte utf8mb4 limit (see the create migration); a fourth 191-char
+    # column would blow it. User agents are also extremely high cardinality, so
+    # indexing them would fragment the hourly buckets this table exists to
+    # aggregate. It is stored first-write-wins per bucket, like http_method.
+    add_column :rails_error_dashboard_rack_attack_events, :user_agent, :string, limit: 191
+  end
+end