fix: prevent large context data from being serialized into job payloads

Use Context::addHidden() for large tracing data (queries, outgoing_requests,
session, request) to prevent serialization into Laravel job payloads.

Hidden context is available during the request for error logging but is NOT
serialized when jobs are queued, preventing ~6.8MB job payloads and Redis
OOM errors.

- QueryCollector: use hidden context for queries
- OutgoingRequestSendingCollector: use hidden context for request tracking
- OutgoingRequestResponseCollector: use hidden context for outgoing requests
- SessionCollector: use hidden context for session data
- RequestDataCollector: use hidden context for request data
- ContextProcessor: merge both regular and hidden context for logging
- GithubMonologServiceProvider: add dehydration callback as safety net

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: Naoray

src/GithubMonologServiceProvider.php

@@ -2,12 +2,18 @@
 
 namespace Naoray\LaravelGithubMonolog;
 
+use Illuminate\Support\Facades\Context;
 use Illuminate\Support\Facades\Event;
 use Illuminate\Support\ServiceProvider;
 use Naoray\LaravelGithubMonolog\Tracing\EventHandler;
 
 class GithubMonologServiceProvider extends ServiceProvider
 {
+    public function register(): void
+    {
+        $this->registerContextDehydration();
+    }
+
     public function boot(): void
     {
         $config = config('logging.channels.github.tracing');
@@ -22,4 +28,29 @@ public function boot(): void
             ], 'github-monolog-views');
         }
     }
+
+    /**
+     * Register context dehydration callback to prevent large tracing data
+     * from being serialized into job payloads.
+     */
+    protected function registerContextDehydration(): void
+    {
+        if (! method_exists(Context::class, 'dehydrating')) {
+            return;
+        }
+
+        Context::dehydrating(function ($context) {
+            foreach (['queries', 'outgoing_requests', 'session', 'request'] as $key) {
+                if ($context->has($key)) {
+                    $context->forget($key);
+                }
+            }
+
+            foreach (array_keys($context->all()) as $key) {
+                if (str_starts_with($key, 'outgoing_request.')) {
+                    $context->forget($key);
+                }
+            }
+        });
+    }
 }

src/Tracing/ContextProcessor.php

@@ -28,7 +28,7 @@ public function __invoke(LogRecord $record): LogRecord
             $sessionCollector->collect();
         }
 
-        $contextData = Context::all();
+        $contextData = array_merge(Context::all(), Context::allHidden());
 
         if (empty($contextData)) {
             return $record;

src/Tracing/OutgoingRequestResponseCollector.php

@@ -30,11 +30,11 @@ public function __invoke(ResponseReceived $event): void
         $config = config('logging.channels.github.tracing.outgoing_requests', []);
         $limit = $config['limit'] ?? self::DEFAULT_LIMIT;
 
-        $requestData = Context::get("outgoing_request.{$requestId}", []);
+        $requestData = Context::getHidden("outgoing_request.{$requestId}") ?? [];
         $startedAt = $requestData['started_at'] ?? microtime(true);
         $duration = (microtime(true) - $startedAt) * 1000; // Convert to milliseconds
 
-        $outgoingRequests = Context::get('outgoing_requests', []);
+        $outgoingRequests = Context::getHidden('outgoing_requests') ?? [];
 
         $outgoingRequests[] = [
             'url' => $request->url(),
@@ -49,7 +49,7 @@ public function __invoke(ResponseReceived $event): void
             $outgoingRequests = array_slice($outgoingRequests, -$limit);
         }
 
-        Context::add('outgoing_requests', $outgoingRequests);
-        Context::forget("outgoing_request.{$requestId}");
+        Context::addHidden('outgoing_requests', $outgoingRequests);
+        Context::forgetHidden("outgoing_request.{$requestId}");
     }
 }

src/Tracing/OutgoingRequestSendingCollector.php

@@ -31,7 +31,7 @@ public function __invoke(RequestSending $event): void
         $headers = $request->headers();
         $headerBag = new \Symfony\Component\HttpFoundation\HeaderBag($headers);
 
-        Context::add("outgoing_request.{$requestId}", [
+        Context::addHidden("outgoing_request.{$requestId}", [
             'url' => $request->url(),
             'method' => $request->method(),
             'headers' => $this->redactHeaders($headerBag),

src/Tracing/QueryCollector.php

@@ -30,7 +30,7 @@ public function __invoke(QueryExecuted $event): void
 
         $limit = $config['limit'] ?? self::DEFAULT_LIMIT;
 
-        $queries = Context::get('queries', []);
+        $queries = Context::getHidden('queries') ?? [];
         $queries[] = [
             'sql' => $event->sql,
             'bindings' => $this->redactBindings($event->bindings),
@@ -43,6 +43,6 @@ public function __invoke(QueryExecuted $event): void
             $queries = array_slice($queries, -$limit);
         }
 
-        Context::add('queries', $queries);
+        Context::addHidden('queries', $queries);
     }
 }

src/Tracing/RequestDataCollector.php

@@ -28,7 +28,7 @@ public function __invoke(RequestHandled $event): void
             $files = null;
         }
 
-        Context::add('request', array_filter([
+        Context::addHidden('request', array_filter([
             'url' => $request->url(),
             'full_url' => $request->fullUrl(),
             'method' => $request->method(),

src/Tracing/SessionCollector.php

@@ -27,7 +27,7 @@ public function collect(): void
             return;
         }
 
-        Context::add('session', [
+        Context::addHidden('session', [
             'data' => $this->redactPayload(Session::all()),
             'flash' => [
                 'old' => Session::get('_flash.old', []),

tests/Issues/TemplateRendererRouteTest.php

@@ -44,7 +44,7 @@
     // Verify route and request data are in Context
     expect(Context::get('route'))->toHaveKey('name');
     expect(Context::get('route')['name'])->toBe('api.users.index');
-    expect(Context::get('request'))->toHaveKey('url');
+    expect(Context::getHidden('request'))->toHaveKey('url');
 
     $record = createLogRecord('Test error');
     $record = ($this->processor)($record);
@@ -87,7 +87,7 @@
     expect(Context::get('user'))->toBe(['id' => 123, 'email' => 'user@example.com']);
     expect(Context::get('route'))->toHaveKey('name');
     expect(Context::get('route')['name'])->toBe('api.posts.store');
-    expect(Context::get('request'))->toHaveKey('url');
+    expect(Context::getHidden('request'))->toHaveKey('url');
 
     $record = createLogRecord('Test error');
     $record = ($this->processor)($record);

tests/Tracing/ContextProcessorTest.php

@@ -18,7 +18,7 @@
 it('merges context data into log record context', function () {
     // Arrange
     Context::add('user', ['id' => 123, 'name' => 'John']);
-    Context::add('request', ['url' => 'https://example.com', 'method' => 'GET']);
+    Context::addHidden('request', ['url' => 'https://example.com', 'method' => 'GET']);
 
     $record = createLogRecord(
         'Test message',

tests/Tracing/EventHandlerTest.php

@@ -42,8 +42,8 @@
 
     Event::dispatch($event);
 
-    expect(Context::get('request'))->not->toBeNull();
-    expect(Context::get('request')['url'])->toBe('https://example.com/test');
+    expect(Context::getHidden('request'))->not->toBeNull();
+    expect(Context::getHidden('request')['url'])->toBe('https://example.com/test');
 });
 
 it('registers route collector when enabled', function () {
@@ -97,8 +97,8 @@
 
     Event::dispatch($event);
 
-    expect(Context::get('queries'))->not->toBeNull();
-    expect(Context::get('queries'))->toHaveCount(1);
+    expect(Context::getHidden('queries'))->not->toBeNull();
+    expect(Context::getHidden('queries'))->toHaveCount(1);
 });
 
 it('registers job collector when enabled', function () {
@@ -151,7 +151,7 @@
 
     // Check that outgoing request data was stored (using object hash as key)
     $requestId = spl_object_hash($request);
-    expect(Context::get("outgoing_request.{$requestId}"))->not->toBeNull();
+    expect(Context::getHidden("outgoing_request.{$requestId}"))->not->toBeNull();
 
     // Mock the same request object for the response event
     $request->shouldReceive('url')->andReturn('https://example.com/api');
@@ -163,7 +163,7 @@
     $responseEvent = new ResponseReceived($request, $response);
     Event::dispatch($responseEvent);
 
-    $outgoingRequests = Context::get('outgoing_requests');
+    $outgoingRequests = Context::getHidden('outgoing_requests');
     expect($outgoingRequests)->toHaveCount(1);
     expect($outgoingRequests[0]['url'])->toBe('https://example.com/api');
     expect($outgoingRequests[0]['status'])->toBe(200);
@@ -216,7 +216,7 @@
 
     // Queries collector is disabled, so it should not have collected data
     // (Note: Context might have data from previous tests, but queries should be empty or unchanged)
-    $queries = Context::get('queries', []);
+    $queries = Context::getHidden('queries') ?? [];
     expect($queries)->toBeEmpty();
 });