tinymonrb 0.1.0 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c33d3e807a92d0f19e975e8d384e2a6a9e78ed22e62c4f2fdf5a5c2e3ff953c7
-  data.tar.gz: 667a99ab8a3b6d3e08780c56e99ccbadbf0c748cd3c2524dfd8ecc78e8911b6b
+  metadata.gz: 8df6c08b32ccae44e241b41fbd2a98f2033043c37ce6292a2f529869838cb8aa
+  data.tar.gz: 8e924831169fbbbbd9c409c49c10a71428eef4dbd48e9b01345f606230e75eb5
 SHA512:
-  metadata.gz: '085fdbe62bc6c876ee0c15d40de22f7645141064d7f12cd9035789d2684bfcf3f19f7c1eeb0e0a830311df6eaaa219d3018997b0a0fb96576147a63fe0cd455d'
-  data.tar.gz: 13543ba9734ac10fc3a9ccda8b9c456d7d39e57314449f7583ab4dc48572c9d40051d0bd8f4cfe62d3660f74b23b3dcef5834fac20a464c709685eefd2f9af78
+  metadata.gz: 27265f4b71e845ffba1f87f3679f6979e7ec5a0175cdbc3399130a2140a8896178554ce72504159f1469674e288ef6a959f0dc84c293ff20a8a4f6b89cf55345
+  data.tar.gz: 0ff34d5f4fa892fb1dc00076ba17746836fd5d2205a4b804ca3cf16ec333e81fb307cdcabbbf0a1b778e1ae8cd8a8ff8392e1affaae381def405c72953af09d1

data/lib/tinymon/client.rb

@@ -2,37 +2,41 @@
 
 require_relative "event_builder"
 require_relative "scope"
+require_relative "scrub"
 require_relative "transport"
 
 module Tinymon
   class Client
     DEFAULT_ENDPOINT = "https://console.tinymon.dev/api/ingest"
 
-    def initialize(dsn:, endpoint: nil, environment: nil, release: nil, sample_rate: 1.0, before_send: nil)
+    def initialize(
+      dsn:,
+      endpoint: nil,
+      environment: nil,
+      release: nil,
+      sample_rate: 1.0,
+      before_send: nil,
+      # Privacy controls — defaults are privacy-preserving.
+      scrub_url_query: true,
+      scrub_patterns: nil,
+      send_default_pii: false
+    )
       @dsn = dsn
       @endpoint = endpoint || DEFAULT_ENDPOINT
       @environment = environment
       @release = release
       @sample_rate = sample_rate
       @before_send = before_send
+      @scrub_url_query = scrub_url_query
+      @scrub_patterns = scrub_patterns
+      @send_default_pii = send_default_pii
       @transport = Transport.new(@endpoint, dsn)
     end
 
     def capture_exception(exception)
       return if rand > @sample_rate
-      snap = SCOPE.snapshot
-      event = EventBuilder.build(
-        exception,
-        release: @release,
-        environment: @environment,
-        user: snap[:user],
-        tags: snap[:tags],
-        breadcrumbs: snap[:breadcrumbs],
-      )
-      if @before_send
-        event = @before_send.call(event)
-        return if event.nil?
-      end
+      event = _prepare(exception)
+      return if event.nil?
       @transport.enqueue(event)
     rescue StandardError
       # SWALLOW. The SDK must never throw into the host app.
@@ -40,21 +44,50 @@ module Tinymon
     end
 
     def capture_message(message, level: "info")
-      synthetic = StandardError.new(message)
+      event = _prepare(StandardError.new(message))
+      return if event.nil?
+      event["level"] = level
+      event["exception"]["type"] = "Message"
+      @transport.enqueue(event)
+    rescue StandardError
+      nil
+    end
+
+    # Per-event context capture. Use from Rack middleware; do NOT use
+    # Tinymon.set_user/set_tag for per-request data — they race under
+    # concurrency.
+    def capture_exception_with_context(exception, request: nil, user: nil, tags: nil)
+      return if rand > @sample_rate
+      event = _prepare(exception, ctx: { request: request, user: user, tags: tags })
+      return if event.nil?
+      @transport.enqueue(event)
+    rescue StandardError
+      nil
+    end
+
+    private
+
+    def _prepare(exception, ctx: nil)
       snap = SCOPE.snapshot
+      ctx ||= {}
       event = EventBuilder.build(
-        synthetic,
+        exception,
         release: @release,
         environment: @environment,
-        user: snap[:user],
-        tags: snap[:tags],
+        user: ctx[:user] || snap[:user],
+        tags: ctx[:tags] || snap[:tags],
         breadcrumbs: snap[:breadcrumbs],
+        request: ctx[:request],
       )
-      event["level"] = level
-      event["exception"]["type"] = "Message"
-      @transport.enqueue(event)
-    rescue StandardError
-      nil
+      # Default scrub BEFORE before_send.
+      Scrub.scrub_event(event, scrub_url_query: @scrub_url_query, scrub_patterns: @scrub_patterns)
+      # PII gate on the wire — server only attaches IP if true.
+      event["send_default_pii"] = !!@send_default_pii
+      if @before_send
+        event = @before_send.call(event)
+        return nil if event.nil?
+      end
+      event
     end
   end
 end

data/lib/tinymon/event_builder.rb

@@ -12,7 +12,7 @@ module Tinymon
 
     SENSITIVE = /password|token|secret|auth|card|cvv|ssn/i.freeze
 
-    def build(exception, release: nil, environment: nil, user: nil, tags: nil, breadcrumbs: nil, url: nil)
+    def build(exception, release: nil, environment: nil, user: nil, tags: nil, breadcrumbs: nil, url: nil, request: nil)
       event = {
         "event_id"  => SecureRandom.uuid,
         "timestamp" => Time.now.to_f,
@@ -30,7 +30,16 @@ module Tinymon
       }
       event["release"] = release if release
       event["environment"] = environment if environment
-      event["request"] = { "url" => url } if url
+      if request && (request[:method] || request["method"] || request[:url] || request["url"])
+        req = {}
+        m = request[:method] || request["method"]
+        u = request[:url] || request["url"]
+        req["method"] = m if m
+        req["url"] = u if u
+        event["request"] = req
+      elsif url
+        event["request"] = { "url" => url }
+      end
       event
     end
 

data/lib/tinymon/rack.rb

@@ -0,0 +1,56 @@
+# frozen_string_literal: true
+
+# Rack middleware. Insert into ANY Rack app (Rails, Sinatra, Hanami,
+# plain Rack) to capture in-request exceptions. Captures with per-event
+# request context (method + URL) and RE-RAISES so the framework's own
+# error handling still fires.
+#
+# Manual insert:
+#   require "tinymonrb"
+#   use Tinymon::Rack          # Sinatra / plain Rack
+#   # Rails:
+#   config.middleware.use Tinymon::Rack
+#
+# Or use the Railtie for auto-insert in Rails apps (loaded automatically
+# when Rails is detected at runtime).
+
+module Tinymon
+  class Rack
+    def initialize(app)
+      @app = app
+    end
+
+    def call(env)
+      @app.call(env)
+    rescue StandardError, ScriptError => e
+      capture(e, env)
+      raise
+    end
+
+    private
+
+    def capture(exc, env)
+      mod = ::Tinymon
+      client = mod.instance_variable_get(:@client)
+      return unless client
+
+      url = build_url(env)
+      method = env["REQUEST_METHOD"]
+      client.capture_exception_with_context(
+        exc,
+        request: { method: method, url: url }
+      )
+    rescue StandardError
+      # never let the SDK break the request
+      nil
+    end
+
+    def build_url(env)
+      scheme = env["rack.url_scheme"] || "http"
+      host = env["HTTP_HOST"] || env["SERVER_NAME"] || ""
+      path = env["REQUEST_URI"] ||
+             "#{env['SCRIPT_NAME']}#{env['PATH_INFO']}#{env['QUERY_STRING'] && !env['QUERY_STRING'].empty? ? "?#{env['QUERY_STRING']}" : ''}"
+      host.empty? ? path : "#{scheme}://#{host}#{path}"
+    end
+  end
+end

data/lib/tinymon/railtie.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+# Auto-insert Tinymon::Rack into the Rails middleware stack. Loaded only
+# when Rails is present at require time — no hard Rails dependency.
+require_relative "rack"
+
+module Tinymon
+  class Railtie < ::Rails::Railtie
+    initializer "tinymon.middleware" do |app|
+      app.middleware.use Tinymon::Rack
+    end
+  end
+end

data/lib/tinymon/scrub.rb

@@ -0,0 +1,63 @@
+# frozen_string_literal: true
+
+# Default PII scrub. Identical semantics to the JS SDK and the server.
+# Runs BEFORE before_send so user hooks can both relax and tighten the defaults.
+module Tinymon
+  module Scrub
+    SENSITIVE_TAG_KEY = /password|token|secret|auth|card|cvv|ssn/i.freeze
+
+    DEFAULT_PATTERNS = [
+      /\b[A-Za-z0-9._%+\-]+@[A-Za-z0-9.\-]+\.[A-Za-z]{2,}\b/,            # email
+      /\b(?:\d[ \-]?){12,15}\d\b/,                                        # card-like
+      /\b[Bb]earer\s+[A-Za-z0-9._\-]+/,                                   # bearer
+      /\bAuthorization\s*:\s*\S+/                                          # auth header
+    ].freeze
+
+    module_function
+
+    def scrub_string(s, patterns)
+      out = s.to_s.dup
+      patterns.each { |re| out.gsub!(re, "[redacted]") }
+      out
+    end
+
+    def strip_url_query(url)
+      return url if url.nil? || url.empty?
+      i = url.index(/[?#]/)
+      i.nil? ? url : url[0...i]
+    end
+
+    # Mutate the event hash in place. Returns it for chaining.
+    def scrub_event(event, scrub_url_query: true, scrub_patterns: nil)
+      patterns = DEFAULT_PATTERNS + Array(scrub_patterns)
+
+      if scrub_url_query && (req = event[:request] || event["request"])
+        url_key = req.key?(:url) ? :url : "url"
+        req[url_key] = strip_url_query(req[url_key]) if req[url_key]
+      end
+
+      if (exc = event[:exception] || event["exception"])
+        val_key = exc.key?(:value) ? :value : "value"
+        exc[val_key] = scrub_string(exc[val_key], patterns) if exc[val_key]
+      end
+
+      Array(event[:breadcrumbs] || event["breadcrumbs"]).each do |b|
+        msg_key = b.key?(:message) ? :message : "message"
+        b[msg_key] = scrub_string(b[msg_key], patterns) if b[msg_key]
+      end
+
+      tags = event[:tags] || event["tags"]
+      if tags
+        cleaned = {}
+        tags.each { |k, v| cleaned[k] = SENSITIVE_TAG_KEY.match?(k.to_s) ? "[redacted]" : v }
+        if event.key?(:tags)
+          event[:tags] = cleaned
+        else
+          event["tags"] = cleaned
+        end
+      end
+
+      event
+    end
+  end
+end

data/lib/tinymon/version.rb

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
 module Tinymon
-  VERSION = "0.1.0"
+  VERSION = "0.3.0"
   SDK_NAME = "tinymon.ruby"
 end

data/lib/tinymonrb.rb

@@ -7,6 +7,9 @@ require_relative "tinymon/scope"
 require_relative "tinymon/transport"
 require_relative "tinymon/client"
 require_relative "tinymon/integrations"
+require_relative "tinymon/rack"
+# Rails auto-insert — only loaded when Rails is present at require time.
+require_relative "tinymon/railtie" if defined?(::Rails::Railtie)
 
 # Public API:
 #
@@ -23,7 +26,17 @@ module Tinymon
   @client = nil
 
   class << self
-    def init(dsn:, endpoint: nil, environment: nil, release: nil, sample_rate: 1.0, before_send: nil)
+    def init(
+      dsn:,
+      endpoint: nil,
+      environment: nil,
+      release: nil,
+      sample_rate: 1.0,
+      before_send: nil,
+      scrub_url_query: true,
+      scrub_patterns: nil,
+      send_default_pii: false
+    )
       @client = Client.new(
         dsn: dsn,
         endpoint: endpoint,
@@ -31,6 +44,9 @@ module Tinymon
         release: release,
         sample_rate: sample_rate,
         before_send: before_send,
+        scrub_url_query: scrub_url_query,
+        scrub_patterns: scrub_patterns,
+        send_default_pii: send_default_pii,
       )
       Integrations.install(@client)
       @client
@@ -40,6 +56,12 @@ module Tinymon
       @client&.capture_exception(exception)
     end
 
+    # Per-event context capture. Use from Rack middleware; do NOT use
+    # set_user/set_tag for per-request data (they race under concurrency).
+    def capture_exception_with_context(exception, request: nil, user: nil, tags: nil)
+      @client&.capture_exception_with_context(exception, request: request, user: user, tags: tags)
+    end
+
     def capture_message(message, level: "info")
       @client&.capture_message(message, level: level)
     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: tinymonrb
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.3.0
 platform: ruby
 authors:
 - tinymon
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-06-06 00:00:00.000000000 Z
+date: 2026-06-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: json_schemer
@@ -48,7 +48,10 @@ files:
 - lib/tinymon/client.rb
 - lib/tinymon/event_builder.rb
 - lib/tinymon/integrations.rb
+- lib/tinymon/rack.rb
+- lib/tinymon/railtie.rb
 - lib/tinymon/scope.rb
+- lib/tinymon/scrub.rb
 - lib/tinymon/stacktrace.rb
 - lib/tinymon/transport.rb
 - lib/tinymon/version.rb