legion-data 1.10.5 → 1.10.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7f3b320363f209f8dfae3ad1a9757bae5e17dd4d7e6327b849b0d8804df22c07
-  data.tar.gz: ac12848278ac407233eb43b6f5a72dbf503b030a9d404e88578fdb8ebd173cc5
+  metadata.gz: bc598e354968c28944d6e897feb5853d57987fed49eaf0cd16f319abcfbd8cf8
+  data.tar.gz: ebc17c4d4b8c49585bcdb0a49803c4988e8d55970ddde56b294746d810193f63
 SHA512:
-  metadata.gz: 0e0331f06f446400f70581981a8f083e1baac336aee984904f56af60eb9a9d021d56af48c8b845a13beaebd4aca1ba0e7a264af1101f78426d447a4cfd3d86b2
-  data.tar.gz: 70b599bee80873cd661bdd09aacb406da9d8cdd479d270b6012032945aedb08bb82a3819f00f11f44e45b3470b8b88042491e5e892900564d334d6b4748f945a
+  metadata.gz: 7f36631ecd03c493fa2dfd3b347a4f16765b7900545d31306e4b73f0418a455a99c15ab55a8de83ad86c123befede09a222a67a6095f624923028c585ca9c7d0
+  data.tar.gz: 9a1783c655df6dce9c23a4a878645cf196e4463d0763d95c380029263a8deeccce7cfce8e66ede4843a04c68e8369232d8d4b785460bd70181d4ad1adcf1c01b

data/.rubocop.yml

@@ -30,6 +30,8 @@ Metrics/BlockLength:
     - 'lib/legion/data/migrations/*'
 ThreadSafety/ClassInstanceVariable:
   Enabled: false
+Legion/Llm/TaxonomyEnum:
+  Enabled: false
 ThreadSafety/ClassAndModuleAttributes:
   Enabled: false
 Metrics/AbcSize:

data/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Legion::Data Changelog
 
+## [1.10.7] - 2026-07-15
+### Fixed
+- Fail loud with actionable error when unresolved lease:// credentials reach connection
+
+## [1.10.6] - 2026-07-03
+
+### Changed
+- Migration 136: drops the `(conversation_id, seq)` UNIQUE constraint on `llm_messages`, replacing it with a NON-unique composite index. A conversation is a tree, not a line — a single parent can legitimately have two children at the same depth (e.g. a failed branch and the branch that continued), so two distinct messages can share `(conversation_id, seq)` and that is truth, not a duplicate. The unique constraint rejected legitimate siblings and forced the centralized ledger into a racy `MAX(seq)+1` generation that collided under concurrent writers (`PG::UniqueViolation` on `llm_messages_conversation_id_seq_key`). Message identity remains guaranteed by the unique `uuid`; `seq` becomes descriptive tree-depth. On SQLite the constraint drop rebuilds the table (dropping the inline `uuid` UNIQUE), so the migration re-asserts the uuid unique index — a no-op on PostgreSQL where `DROP CONSTRAINT` is surgical.
+
 ## [1.10.5] - 2026-06-16
 
 ### Added

data/lib/legion/data/archiver.rb

@@ -97,18 +97,15 @@ module Legion
           total_rows = 0
           paths = []
 
-          loop do
-            batch_result = archive_batch(
-              conn:            conn,
-              table:           table,
-              cutoff:          cutoff,
-              batch_size:      batch_size,
-              batch_n:         batches + 1,
-              now:             now,
-              storage_backend: storage_backend
-            )
-            break unless batch_result
-
+          while (batch_result = archive_batch(
+            conn:            conn,
+            table:           table,
+            cutoff:          cutoff,
+            batch_size:      batch_size,
+            batch_n:         batches + 1,
+            now:             now,
+            storage_backend: storage_backend
+          ))
             batches += 1
             total_rows += batch_result[:row_count]
             paths << batch_result[:path]

data/lib/legion/data/connection.rb

@@ -10,6 +10,10 @@ module Legion
     module Connection
       ADAPTERS = %i[sqlite mysql2 postgres].freeze
 
+      UNRESOLVED_URI_PATTERN = %r{\A(?:vault|env|lease)://}
+
+      class UnresolvedCredentialError < StandardError; end
+
       GENERIC_KEYS = %i[max_connections pool_timeout preconnect single_threaded test name].freeze
 
       ADAPTER_KEYS = {
@@ -171,6 +175,9 @@ module Legion
                       attempted_adapter = adapter
                       begin
                         ::Sequel.connect(connection_opts_for(adapter: attempted_adapter, opts: opts))
+                      rescue UnresolvedCredentialError => e
+                        handle_exception(e, level: :fatal, handled: false, operation: :data_connect)
+                        raise
                       rescue StandardError => e
                         raise unless dev_fallback?
 
@@ -410,10 +417,23 @@ module Legion
 
         def connection_opts_for(adapter:, opts:)
           connection_opts = opts.merge(adapter: adapter, **creds_builder)
+          validate_no_unresolved_uris!(connection_opts)
           connection_opts[:preconnect] = false if adapter != :sqlite && dev_fallback?
           connection_opts
         end
 
+        def validate_no_unresolved_uris!(connection_opts)
+          %i[user username password].each do |key|
+            value = connection_opts[key]
+            next unless value.is_a?(String) && value.match?(UNRESOLVED_URI_PATTERN)
+
+            raise UnresolvedCredentialError,
+                  "Legion::Data cannot connect: settings[:data][:creds][:#{key}] is still " \
+                  "an unresolved URI placeholder (#{value}). The settings resolver failed to " \
+                  'resolve this lease — check that Legion::Crypt and Vault are available at boot.'
+          end
+        end
+
         def sequel_opts
           data = Legion::Settings[:data]
           opts = {}

data/lib/legion/data/extract/handlers/base.rb

@@ -53,7 +53,7 @@ module Legion
               require gem_name
               true
             rescue LoadError => e
-              handle_exception(e, level: :debug, handled: true, operation: :extract_handler_available, handler: name, gem: gem_name)
+              handle_exception(e, level: :warn, handled: true, operation: :extract_handler_available, handler: name, gem: gem_name)
               false
             end
           end

data/lib/legion/data/migrations/136_drop_llm_messages_seq_unique.rb

@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+# The (conversation_id, seq) UNIQUE constraint modeled a conversation as a flat
+# line, but a conversation is a tree: a single parent can legitimately have two
+# children at the same depth (e.g. a failed branch and the branch that
+# succeeded), so two distinct messages can share the same (conversation_id, seq)
+# and that is TRUTH, not a duplicate. The unique constraint rejected those
+# legitimate siblings and forced the ledger into a racy MAX(seq)+1 generation
+# that collided under concurrent writers.
+#
+# Message identity is guaranteed by the unique `uuid` (producer-derived, stable
+# across redelivery). seq/parent become descriptive ordering data, so we keep a
+# NON-unique composite index for conversation-ordered reads.
+Sequel.migration do
+  up do
+    alter_table(:llm_messages) do
+      drop_constraint(:llm_messages_conversation_id_seq_key, type: :unique)
+      add_index %i[conversation_id seq], name: :idx_llm_messages_conversation_seq
+    end
+    # SQLite emulates the constraint drop by rebuilding the table, which drops
+    # the inline `uuid` UNIQUE. Re-assert it so message identity/dedup is never
+    # lost. On PostgreSQL DROP CONSTRAINT is surgical and the original uuid index
+    # already exists, so this is a no-op there.
+    alter_table(:llm_messages) do
+      add_index :uuid, unique: true, name: :idx_llm_messages_uuid_unique, if_not_exists: true
+    end
+  end
+
+  down do
+    alter_table(:llm_messages) do
+      drop_index :uuid, name: :idx_llm_messages_uuid_unique, if_exists: true
+      drop_index %i[conversation_id seq], name: :idx_llm_messages_conversation_seq
+      add_unique_constraint %i[conversation_id seq], name: :llm_messages_conversation_id_seq_key
+    end
+  end
+end

data/lib/legion/data/models/function.rb

@@ -18,7 +18,7 @@ module Legion
 
           ::JSON.parse(embedding)
         rescue ::JSON::ParserError => e
-          handle_exception(e, level: :debug, handled: true, operation: :embedding_vector, id: self[:id])
+          handle_exception(e, level: :warn, handled: true, operation: :embedding_vector, id: self[:id])
           nil
         end
 

data/lib/legion/data/models/node.rb

@@ -17,7 +17,7 @@ module Legion
 
           Legion::JSON.load(metrics)
         rescue StandardError => e
-          handle_exception(e, level: :debug, handled: true, operation: :parsed_metrics, id: self[:id])
+          handle_exception(e, level: :warn, handled: true, operation: :parsed_metrics, id: self[:id])
           nil
         end
 
@@ -26,7 +26,7 @@ module Legion
 
           Legion::JSON.load(hosted_worker_ids)
         rescue StandardError => e
-          handle_exception(e, level: :debug, handled: true, operation: :parsed_hosted_worker_ids, id: self[:id])
+          handle_exception(e, level: :warn, handled: true, operation: :parsed_hosted_worker_ids, id: self[:id])
           []
         end
       end

data/lib/legion/data/version.rb

@@ -2,6 +2,6 @@
 
 module Legion
   module Data
-    VERSION = '1.10.5'
+    VERSION = '1.10.7'
   end
 end

data/lib/legion/data.rb

@@ -112,7 +112,7 @@ module Legion
       def connected?
         Legion::Settings[:data][:connected] == true
       rescue StandardError => e
-        handle_exception(e, level: :debug, handled: true, operation: :connected?)
+        handle_exception(e, level: :warn, handled: true, operation: :connected?)
         false
       end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: legion-data
 version: !ruby/object:Gem::Version
-  version: 1.10.5
+  version: 1.10.7
 platform: ruby
 authors:
 - Esity
@@ -282,6 +282,7 @@ files:
 - lib/legion/data/migrations/133_allow_null_context_tokens.rb
 - lib/legion/data/migrations/134_add_route_attempt_columns.rb
 - lib/legion/data/migrations/135_add_llm_context_token_accounting.rb
+- lib/legion/data/migrations/136_drop_llm_messages_seq_unique.rb
 - lib/legion/data/model.rb
 - lib/legion/data/models/apollo/access_log.rb
 - lib/legion/data/models/apollo/entries.rb