tinymonrb 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c33d3e807a92d0f19e975e8d384e2a6a9e78ed22e62c4f2fdf5a5c2e3ff953c7
-  data.tar.gz: 667a99ab8a3b6d3e08780c56e99ccbadbf0c748cd3c2524dfd8ecc78e8911b6b
+  metadata.gz: 2fb61a62ef1e259893c449ab46dbbbe6ba67f300a45551cb093e4598adeac193
+  data.tar.gz: 12f762661bba46acbbce593f7558e5dbc38ed1a2b181c9ed14e334bacc47a3de
 SHA512:
-  metadata.gz: '085fdbe62bc6c876ee0c15d40de22f7645141064d7f12cd9035789d2684bfcf3f19f7c1eeb0e0a830311df6eaaa219d3018997b0a0fb96576147a63fe0cd455d'
-  data.tar.gz: 13543ba9734ac10fc3a9ccda8b9c456d7d39e57314449f7583ab4dc48572c9d40051d0bd8f4cfe62d3660f74b23b3dcef5834fac20a464c709685eefd2f9af78
+  metadata.gz: 53ef44902a951ef0f01c463f94d8ebe841b35718b9a40ffe071e8ed559e34c939a6012e05e7a7b78aab0fcda7704a35aed814ffd982283a22a61633335ff97e4
+  data.tar.gz: cf09570386509420ff6952856d6366aa15d304699fc6b8d4692a877acb74f59d49933ca4d5d5154a7db24632c857f09272828324ad8dae40c8fb893b2f2ed9e7

data/lib/tinymon/client.rb

@@ -2,37 +2,41 @@
 
 require_relative "event_builder"
 require_relative "scope"
+require_relative "scrub"
 require_relative "transport"
 
 module Tinymon
   class Client
     DEFAULT_ENDPOINT = "https://console.tinymon.dev/api/ingest"
 
-    def initialize(dsn:, endpoint: nil, environment: nil, release: nil, sample_rate: 1.0, before_send: nil)
+    def initialize(
+      dsn:,
+      endpoint: nil,
+      environment: nil,
+      release: nil,
+      sample_rate: 1.0,
+      before_send: nil,
+      # Privacy controls — defaults are privacy-preserving.
+      scrub_url_query: true,
+      scrub_patterns: nil,
+      send_default_pii: false
+    )
       @dsn = dsn
       @endpoint = endpoint || DEFAULT_ENDPOINT
       @environment = environment
       @release = release
       @sample_rate = sample_rate
       @before_send = before_send
+      @scrub_url_query = scrub_url_query
+      @scrub_patterns = scrub_patterns
+      @send_default_pii = send_default_pii
       @transport = Transport.new(@endpoint, dsn)
     end
 
     def capture_exception(exception)
       return if rand > @sample_rate
-      snap = SCOPE.snapshot
-      event = EventBuilder.build(
-        exception,
-        release: @release,
-        environment: @environment,
-        user: snap[:user],
-        tags: snap[:tags],
-        breadcrumbs: snap[:breadcrumbs],
-      )
-      if @before_send
-        event = @before_send.call(event)
-        return if event.nil?
-      end
+      event = _prepare(exception)
+      return if event.nil?
       @transport.enqueue(event)
     rescue StandardError
       # SWALLOW. The SDK must never throw into the host app.
@@ -40,21 +44,36 @@ module Tinymon
     end
 
     def capture_message(message, level: "info")
-      synthetic = StandardError.new(message)
+      event = _prepare(StandardError.new(message))
+      return if event.nil?
+      event["level"] = level
+      event["exception"]["type"] = "Message"
+      @transport.enqueue(event)
+    rescue StandardError
+      nil
+    end
+
+    private
+
+    def _prepare(exception)
       snap = SCOPE.snapshot
       event = EventBuilder.build(
-        synthetic,
+        exception,
         release: @release,
         environment: @environment,
         user: snap[:user],
         tags: snap[:tags],
         breadcrumbs: snap[:breadcrumbs],
       )
-      event["level"] = level
-      event["exception"]["type"] = "Message"
-      @transport.enqueue(event)
-    rescue StandardError
-      nil
+      # Default scrub BEFORE before_send.
+      Scrub.scrub_event(event, scrub_url_query: @scrub_url_query, scrub_patterns: @scrub_patterns)
+      # PII gate on the wire — server only attaches IP if true.
+      event["send_default_pii"] = !!@send_default_pii
+      if @before_send
+        event = @before_send.call(event)
+        return nil if event.nil?
+      end
+      event
     end
   end
 end

data/lib/tinymon/scrub.rb

@@ -0,0 +1,63 @@
+# frozen_string_literal: true
+
+# Default PII scrub. Identical semantics to the JS SDK and the server.
+# Runs BEFORE before_send so user hooks can both relax and tighten the defaults.
+module Tinymon
+  module Scrub
+    SENSITIVE_TAG_KEY = /password|token|secret|auth|card|cvv|ssn/i.freeze
+
+    DEFAULT_PATTERNS = [
+      /\b[A-Za-z0-9._%+\-]+@[A-Za-z0-9.\-]+\.[A-Za-z]{2,}\b/,            # email
+      /\b(?:\d[ \-]?){12,15}\d\b/,                                        # card-like
+      /\b[Bb]earer\s+[A-Za-z0-9._\-]+/,                                   # bearer
+      /\bAuthorization\s*:\s*\S+/                                          # auth header
+    ].freeze
+
+    module_function
+
+    def scrub_string(s, patterns)
+      out = s.to_s.dup
+      patterns.each { |re| out.gsub!(re, "[redacted]") }
+      out
+    end
+
+    def strip_url_query(url)
+      return url if url.nil? || url.empty?
+      i = url.index(/[?#]/)
+      i.nil? ? url : url[0...i]
+    end
+
+    # Mutate the event hash in place. Returns it for chaining.
+    def scrub_event(event, scrub_url_query: true, scrub_patterns: nil)
+      patterns = DEFAULT_PATTERNS + Array(scrub_patterns)
+
+      if scrub_url_query && (req = event[:request] || event["request"])
+        url_key = req.key?(:url) ? :url : "url"
+        req[url_key] = strip_url_query(req[url_key]) if req[url_key]
+      end
+
+      if (exc = event[:exception] || event["exception"])
+        val_key = exc.key?(:value) ? :value : "value"
+        exc[val_key] = scrub_string(exc[val_key], patterns) if exc[val_key]
+      end
+
+      Array(event[:breadcrumbs] || event["breadcrumbs"]).each do |b|
+        msg_key = b.key?(:message) ? :message : "message"
+        b[msg_key] = scrub_string(b[msg_key], patterns) if b[msg_key]
+      end
+
+      tags = event[:tags] || event["tags"]
+      if tags
+        cleaned = {}
+        tags.each { |k, v| cleaned[k] = SENSITIVE_TAG_KEY.match?(k.to_s) ? "[redacted]" : v }
+        if event.key?(:tags)
+          event[:tags] = cleaned
+        else
+          event["tags"] = cleaned
+        end
+      end
+
+      event
+    end
+  end
+end

data/lib/tinymon/version.rb

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
 module Tinymon
-  VERSION = "0.1.0"
+  VERSION = "0.2.0"
   SDK_NAME = "tinymon.ruby"
 end

data/lib/tinymonrb.rb

@@ -23,7 +23,17 @@ module Tinymon
   @client = nil
 
   class << self
-    def init(dsn:, endpoint: nil, environment: nil, release: nil, sample_rate: 1.0, before_send: nil)
+    def init(
+      dsn:,
+      endpoint: nil,
+      environment: nil,
+      release: nil,
+      sample_rate: 1.0,
+      before_send: nil,
+      scrub_url_query: true,
+      scrub_patterns: nil,
+      send_default_pii: false
+    )
       @client = Client.new(
         dsn: dsn,
         endpoint: endpoint,
@@ -31,6 +41,9 @@ module Tinymon
         release: release,
         sample_rate: sample_rate,
         before_send: before_send,
+        scrub_url_query: scrub_url_query,
+        scrub_patterns: scrub_patterns,
+        send_default_pii: send_default_pii,
       )
       Integrations.install(@client)
       @client

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: tinymonrb
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - tinymon
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-06-06 00:00:00.000000000 Z
+date: 2026-06-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: json_schemer
@@ -49,6 +49,7 @@ files:
 - lib/tinymon/event_builder.rb
 - lib/tinymon/integrations.rb
 - lib/tinymon/scope.rb
+- lib/tinymon/scrub.rb
 - lib/tinymon/stacktrace.rb
 - lib/tinymon/transport.rb
 - lib/tinymon/version.rb