legion-crypt 1.4.8 → 1.4.10

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f23263a49bc4e450c4c13189039e6a1324201fc31c074a59800569076c4baa40
-  data.tar.gz: 7c7fddeb4adb4a6d6721dea856af301f69a6b6a4c124c28195c87cf3e5e04f82
+  metadata.gz: 14e4a34517eb19612bc6e2f1f07093f3e5d2affef6e04f48b5c8a1fb1bd06a74
+  data.tar.gz: 793e8657ba9d56a34a96362fb0777c7f22e1c63f8953ab00b562fa3e57e9e5a3
 SHA512:
-  metadata.gz: fe700545e2fe3ec3166cf14e760655e84572c5283895057d9c5f114849e89d5e00f59b13de05769c350eea9deabc0caa3cba926d89ca9121f40787c75707583c
-  data.tar.gz: 7b22b0a6ff01a262d44497e201c0f9fab260d5897e4be7af0a7a8c8d7a1e6c7c95ec9b422c9047ef5c6428a8ffb0ed9de066bda0d63849f45c9634eb2692ebc4
+  metadata.gz: e56636a54d3a9e6c615184361ca3242d7c17919c0235878cf43e8283858b2e261dc82ff02fa4777d57b2b619cd16f3c254e7aa5e453cf56cdcfca6156166c98d
+  data.tar.gz: e5f5b735f176da76b49438d1bd5b0a40a42b1087c288d5487edbcc3b0601466ca9f4d16fba257bda8cd2f84782102ab675d117c976567efab4dcaa493706343e

data/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Legion::Crypt
 
+## [1.4.10] - 2026-03-24
+
+### Added
+- `Legion::Crypt.delete(path)` for Vault KV path deletion (supports credential revocation on worker termination)
+
+## [1.4.9] - 2026-03-22
+
+### Added
+- `Legion::Crypt::Helper` module: injectable Vault mixin for LEX extensions
+- Namespaced `vault_get`, `vault_write`, `vault_exist?` with automatic lex-prefixed paths
+
 ## [1.4.8] - 2026-03-22
 
 ### Changed

data/lib/legion/crypt/helper.rb

@@ -0,0 +1,53 @@
+# frozen_string_literal: true
+
+module Legion
+  module Crypt
+    module Helper
+      def vault_namespace
+        @vault_namespace ||= derive_vault_namespace
+      end
+
+      def vault_get(path = nil)
+        Legion::Crypt.get(vault_path(path))
+      end
+
+      def vault_write(path, data)
+        Legion::Crypt.write(vault_path(path), data)
+      end
+
+      def vault_exist?(path = nil)
+        Legion::Crypt.exist?(vault_path(path))
+      end
+
+      private
+
+      def vault_path(suffix = nil)
+        base = vault_namespace
+        suffix ? "#{base}/#{suffix}" : base
+      end
+
+      def derive_vault_namespace
+        if respond_to?(:lex_filename)
+          fname = lex_filename
+          fname.is_a?(Array) ? fname.first : fname
+        else
+          derive_vault_namespace_from_class
+        end
+      end
+
+      def derive_vault_namespace_from_class
+        name = respond_to?(:ancestors) ? ancestors.first.to_s : self.class.to_s
+        parts = name.split('::')
+        ext_idx = parts.index('Extensions')
+        target = if ext_idx && parts[ext_idx + 1]
+                   parts[ext_idx + 1]
+                 else
+                   parts.last
+                 end
+        target.gsub(/([A-Z]+)([A-Z][a-z])/, '\1_\2')
+              .gsub(/([a-z\d])([A-Z])/, '\1_\2')
+              .downcase
+      end
+    end
+  end
+end

data/lib/legion/crypt/vault.rb

@@ -76,6 +76,14 @@ module Legion
         raise
       end
 
+      def delete(path)
+        ::Vault.logical.delete(path)
+        { success: true, path: path }
+      rescue StandardError => e
+        Legion::Logging.warn "Vault delete failed for #{path}: #{e.message}" if defined?(Legion::Logging)
+        { success: false, path: path, error: e.message }
+      end
+
       def exist?(path)
         !::Vault.kv(settings[:vault][:kv_path]).read_metadata(path).nil?
       end

data/lib/legion/crypt/version.rb

@@ -2,6 +2,6 @@
 
 module Legion
   module Crypt
-    VERSION = '1.4.8'
+    VERSION = '1.4.10'
   end
 end

data/lib/legion/crypt.rb

@@ -10,6 +10,7 @@ require 'legion/crypt/vault_jwt_auth'
 require 'legion/crypt/lease_manager'
 require 'legion/crypt/vault_cluster'
 require 'legion/crypt/ldap_auth'
+require 'legion/crypt/helper'
 
 module Legion
   module Crypt

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: legion-crypt
 version: !ruby/object:Gem::Version
-  version: 1.4.8
+  version: 1.4.10
 platform: ruby
 authors:
 - Esity
@@ -77,6 +77,7 @@ files:
 - lib/legion/crypt/cluster_secret.rb
 - lib/legion/crypt/ed25519.rb
 - lib/legion/crypt/erasure.rb
+- lib/legion/crypt/helper.rb
 - lib/legion/crypt/jwks_client.rb
 - lib/legion/crypt/jwt.rb
 - lib/legion/crypt/ldap_auth.rb