legion-data 1.10.17 → 1.11.7

data/lib/legion/data.rb

@@ -17,6 +17,7 @@ require_relative 'data/rls'
 require_relative 'data/extract'
 require_relative 'data/audit_record'
 require_relative 'data/audit_log_hash_chain'
+require_relative 'data/task/status'
 
 unless Legion::Logging::Helper.method_defined?(:handle_exception)
   module Legion
@@ -83,6 +84,8 @@ module Legion
       end
 
       def setup_cache
+        return unless Legion::Settings[:data][:models][:loaded]
+
         cache_settings = Legion::Settings[:data][:cache]
         setup_static_cache if cache_settings[:static_cache]
         setup_external_cache if cache_settings[:auto_enable] && defined?(::Legion::Cache)
@@ -133,36 +136,56 @@ module Legion
       def can_write?(table_name)
         return false unless connected?
 
-        adapter = Legion::Settings[:data][:adapter]&.to_s
-        return true if adapter == 'sqlite'
-
-        @write_privileges ||= {}
-        return @write_privileges[table_name] unless @write_privileges[table_name].nil?
-
-        @write_privileges[table_name] = connection
-                                        .fetch("SELECT has_table_privilege(current_user, ?, 'INSERT') AS can", table_name.to_s)
-                                        .first[:can] == true
+        database = connection
+        return false unless database
+        return true if database.database_type == :sqlite
+
+        cache = @write_privileges ||= ObjectSpace::WeakKeyMap.new
+        database.synchronize do |session|
+          privileges = cache[session] ||= {}
+          return privileges[table_name] if privileges.key?(table_name)
+
+          privileges[table_name] = case database.database_type
+                                   when :postgres
+                                     database.fetch("SELECT has_table_privilege(current_user, ?, 'INSERT') AS can", table_name.to_s)
+                                             .server(:default).first[:can] == true
+                                   when :mysql
+                                     database.fetch('EXPLAIN INSERT INTO ? () VALUES ()', Sequel.identifier(table_name)).server(:default).all
+                                     true
+                                   else
+                                     raise Sequel::Error, "Unsupported privilege adapter: #{database.database_type}"
+                                   end
+        end
       rescue StandardError => e
         handle_exception(e, level: :warn, handled: true, operation: :can_write?, table: table_name)
-        @write_privileges[table_name] = false if @write_privileges
         false
       end
 
       def can_read?(table_name)
         return false unless connected?
 
-        adapter = Legion::Settings[:data][:adapter]&.to_s
-        return true if adapter == 'sqlite'
-
-        @read_privileges ||= {}
-        return @read_privileges[table_name] unless @read_privileges[table_name].nil?
-
-        @read_privileges[table_name] = connection
-                                       .fetch("SELECT has_table_privilege(current_user, ?, 'SELECT') AS can", table_name.to_s)
-                                       .first[:can] == true
+        database = connection
+        return false unless database
+        return true if database.database_type == :sqlite
+
+        cache = @read_privileges ||= ObjectSpace::WeakKeyMap.new
+        database.synchronize do |session|
+          privileges = cache[session] ||= {}
+          return privileges[table_name] if privileges.key?(table_name)
+
+          privileges[table_name] = case database.database_type
+                                   when :postgres
+                                     database.fetch("SELECT has_table_privilege(current_user, ?, 'SELECT') AS can", table_name.to_s)
+                                             .server(:default).first[:can] == true
+                                   when :mysql
+                                     database.fetch('SELECT * FROM ? LIMIT 0', Sequel.identifier(table_name)).server(:default).all
+                                     true
+                                   else
+                                     raise Sequel::Error, "Unsupported privilege adapter: #{database.database_type}"
+                                   end
+        end
       rescue StandardError => e
         handle_exception(e, level: :warn, handled: true, operation: :can_read?, table: table_name)
-        @read_privileges[table_name] = false if @read_privileges
         false
       end
 
@@ -189,7 +212,7 @@ module Legion
       end
 
       def setup_external_cache
-        ttl = Legion::Settings[:data][:cache][:ttl] || 60
+        ttl = Legion::Settings[:data][:cache][:ttl]
         {
           Model::Relationship => 10,
           Model::Node         => 10,
@@ -205,8 +228,9 @@ module Legion
 
       def shutdown
         Legion::Data::Local.shutdown if defined?(Legion::Data::Local) && Legion::Data::Local.connected?
-        Legion::Data::Connection.shutdown
-        log.info 'Legion::Data shutdown complete'
+        closed = Legion::Data::Connection.shutdown
+        log.info 'Legion::Data shutdown complete' if closed
+        closed
       end
 
       private

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: legion-data
 version: !ruby/object:Gem::Version
-  version: 1.10.17
+  version: 1.11.7
 platform: ruby
 authors:
 - Esity
@@ -57,14 +57,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.3.26
+        version: 1.4.5
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.3.26
+        version: 1.4.5
 - !ruby/object:Gem::Dependency
   name: sequel
   requirement: !ruby/object:Gem::Requirement
@@ -126,6 +126,7 @@ files:
 - lib/legion/data/audit_record.rb
 - lib/legion/data/auth_failure_handler.rb
 - lib/legion/data/connection.rb
+- lib/legion/data/database_lock.rb
 - lib/legion/data/encryption/cipher.rb
 - lib/legion/data/encryption/key_provider.rb
 - lib/legion/data/encryption/sequel_plugin.rb
@@ -284,6 +285,9 @@ files:
 - lib/legion/data/migrations/134_add_route_attempt_columns.rb
 - lib/legion/data/migrations/135_add_llm_context_token_accounting.rb
 - lib/legion/data/migrations/136_drop_llm_messages_seq_unique.rb
+- lib/legion/data/migrations/137_preserve_task_archive_fields.rb
+- lib/legion/data/migrations/138_add_append_claims.rb
+- lib/legion/data/migrations/139_create_task_logs.rb
 - lib/legion/data/model.rb
 - lib/legion/data/models/apollo/access_log.rb
 - lib/legion/data/models/apollo/entries.rb
@@ -295,13 +299,16 @@ files:
 - lib/legion/data/models/apollo_entry.rb
 - lib/legion/data/models/apollo_expertise.rb
 - lib/legion/data/models/apollo_relation.rb
+- lib/legion/data/models/append_claim.rb
 - lib/legion/data/models/audit_log.rb
 - lib/legion/data/models/audit_record.rb
 - lib/legion/data/models/chain.rb
+- lib/legion/data/models/data_archive.rb
 - lib/legion/data/models/digital_worker.rb
 - lib/legion/data/models/extension.rb
 - lib/legion/data/models/extract_step_timing.rb
 - lib/legion/data/models/function.rb
+- lib/legion/data/models/governance_event.rb
 - lib/legion/data/models/identity/audit_log.rb
 - lib/legion/data/models/identity/group.rb
 - lib/legion/data/models/identity/group_memberships.rb
@@ -342,6 +349,7 @@ files:
 - lib/legion/data/settings.rb
 - lib/legion/data/spool.rb
 - lib/legion/data/storage_tiers.rb
+- lib/legion/data/task/status.rb
 - lib/legion/data/vector.rb
 - lib/legion/data/version.rb
 - scripts/pre-commit-rubocop.sh