v0.4.0

Changed

• Decomposed the Debug\Dump and Debug\Renderer\HtmlRenderer god-methods: Dump::output() is now a formatValue() dispatcher over per-type formatters, and HtmlRenderer is assembly-only, delegating value formatting to Renderer\ValueDumper and templates to Template\TemplateStore. #4
• ReportBuilder::build() now takes (Throwable, ReportOptions, Superglobals) and no longer reads superglobals directly; BacktraceItem's fragment is now a CodeFragment. #4

Added

• Report\Superglobals (its fromGlobals() is the single $_REQUEST / $_SERVER boundary), Report\CodeFragment, and Report\ReportOptions value objects.
• Template\TemplateStore with Contracts\TemplateCatalog (HtmlTemplateCatalog, DumpTemplateCatalog), Renderer\ValueDumper, and Debug::setSuperglobals(). #4

Fixed

• Dump's "[already listed]" method guard no longer leaks across separate top-level dumps; it is now a per-dump set threaded through the recursion instead of instance state. #4

Removed

• Debug\Traits\TemplateAwareTrait (replaced by Template\TemplateStore composition) and the unused Debug::$hideDocumentRoot property. #4

v0.3.0

Added

• A logger collector and Phalcon\DebugBar\Logger\Adapter. Attach the adapter to the application logger and every item logged through Phalcon\Logger is captured in the bar's "Logs" tab, separate from the manual messages collector. Each entry keeps the log level, message, and PSR-3 context; the context renders as a collapsible, pretty-printed JSON detail. Forwarding runs through the new DebugBar::addLog() and no-ops when the collector is disabled.

v0.2.0

Changed

• Provider::boot() no longer throws CannotUseInProduction in a blocked or undefined environment; it returns without registering anything, so the bar is safe to boot unconditionally and never takes down the host application.

Added

• env.strict configuration key (default false). When true, Provider::boot() throws CannotUseInProduction in a blocked or undefined environment instead of returning silently, restoring the previous fail-fast behavior for those who want it.

Fixed

Removed

v0.1.0

Changed

Added

• Security\Redactor with two tiers - masking the values of sensitive keys and dropping configured "never shown" keys entirely - applied to the request, config, and session collectors, plus Security\AccessGate (IP allowlist and optional callback) restricting who receives the bar.
• A static Debug facade for manual instrumentation - Debug::info(), Debug::debug(), Debug::notice(), Debug::warning(), Debug::error(), Debug::message(), Debug::startMeasure() / Debug::stopMeasure(), and Debug::addException() - that no-ops when no bar is registered.
• Assets are minified with matthiasmullie/minify and injected inline, so the bar carries no external asset dependency.
• Eleven collectors - version, messages, time, exceptions, request, route, database, view, cache, config, and session. Streamed collectors (database, view, route, cache) read their data off the event source and never resolve services; snapshot collectors read injected objects (request, config) or PHP state (session). Durations are measured with hrtime().
• Migrated the Phalcon\Debug exception/error page component (Debug, Dump, ReportBuilder, HtmlRenderer, the Report value objects, Contracts, and the exception classes) out of the framework's Phalcon\Support\Debug, with its full test suite carried over green under PHPStan level max, plus the debug.css / debug.js page assets.
• Per-collector enable/disable, asset, header, environment, access, and redaction (mask / hidden) configuration on the Provider. The bar ships under PHPStan level max with 100% line, method, and class coverage.
• The database collector renders each query's bound parameters next to the statement; the session collector omits the session id and Phalcon's internal keys (such as the CSRF token).
• The exceptions collector auto-captures throwables via dispatch:beforeException (in addition to the Debug facade) and shows each one's stack trace in a collapsible panel entry.
• The bar's front-end (debugbar.js / debugbar.css): a tabbed bottom bar with a panel per collector, badges, and a collapse toggle that shrinks it to a corner handle so it never covers the host page's own controls.
• The web debug bar core: a Provider that boots the bar against an MVC Application purely through its EventsManager - no DI service and no container-specific wiring - and refuses to boot in blocked/production environments. It attaches a ResponseListener on application:beforeSendResponse that aggregates the collectors and injects the bar into HTML responses, backed by the DebugBar aggregator and the Renderer / Injector / BarOptions output pipeline.

Fixed

Removed