legion-data 1.6.29 → 1.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 15cf490b7bb437d183d3e9a0c5292d38953cee6ed85dd51b7e4a38cdbac1c19f
-  data.tar.gz: d95703e13bc0076b3432112d41e92992514b54312b6c9dad1b5c9f46f7db1949
+  metadata.gz: 8f45999e6d1c3b0727dc351630f7c76da902a40513e9cbcd35dbce97d5c90304
+  data.tar.gz: b3efe7c69e3ccb9540f44fc4e7a464428898abaa74bcddbab9c4b39f2eefc3b4
 SHA512:
-  metadata.gz: 925e30b597e82b14ce9f260a239a53c98f3b628682e125465668e8e86a6681d2811aec9c2b71463d8b6ecb0993e5ead76652b00e6249c416d030ed08deeb323d
-  data.tar.gz: 210dbeb6e2e3a545842b2523c43a1f3fe3e991a8043351e6b55a1a42f3113568c8e59a2f19d8680874fe09c1b2a848da7fd25d0416e3d1180932228d840882ac
+  metadata.gz: 6449f9218be46e31329571cca1d9d3233860b8dd3e307eb35fcc824d3385969dd25a3493a1b0e4261786e622fe754c3d20f152bbf3bf9bfb920c0f0041103df9
+  data.tar.gz: b24487e1c279cda679fac9f27b3b4d7d5af00be5652782065e0f9b3a2b78502dce1d45c0db45b3f5f3632da9fd68f18b75714825d83dc0c0cd05953a26ae6c03

data/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 ## [Unreleased]
 
+## [1.7.0] - 2026-04-24
+
+### Added
+- Migration 072: `identity_audit_log` table (Postgres-only) with indexes
+- Migration 073: `employee_id` on principals, `account_type`/`qualifier`/`is_default`/`link_evidence` on identities, partial unique index for one-default-per-provider
+- `IdentityAuditLog` model added to model loader
+
+## [1.6.30] - 2026-04-22
+
+### Fixed
+- `Spool.extension_path` now accepts any module under `Legion::`, not just `Legion::Extensions::` — fixes `ArgumentError` when core gems like `legion-llm` spool events via `Spool.for(Legion::LLM)`
+
 ## [1.6.29] - 2026-04-17
 
 ### Fixed

data/lib/legion/data/migrations/072_create_identity_audit_log.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+Sequel.migration do
+  up do
+    next unless adapter_scheme == :postgres
+
+    create_table(:identity_audit_log) do
+      column :id, :uuid, default: Sequel.lit('gen_random_uuid()'), primary_key: true
+      foreign_key :principal_id, :principals, type: :uuid, on_delete: :set_null
+      foreign_key :identity_id, :identities, type: :uuid, on_delete: :set_null
+      String :provider_name, null: false
+      String :event_type, null: false
+      String :trust_level
+      column :detail, :jsonb, null: false, default: Sequel.lit("'{}'")
+      String :node_id
+      String :session_id
+      DateTime :created_at, null: false, default: Sequel::CURRENT_TIMESTAMP
+    end
+
+    add_index :identity_audit_log, :principal_id
+    add_index :identity_audit_log, :event_type
+    add_index :identity_audit_log, :created_at
+    add_index :identity_audit_log, %i[principal_id event_type created_at]
+  end
+
+  down do
+    next unless adapter_scheme == :postgres
+
+    drop_table?(:identity_audit_log)
+  end
+end

data/lib/legion/data/migrations/073_add_identity_multi_instance_columns.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+Sequel.migration do
+  up do
+    next unless adapter_scheme == :postgres
+
+    alter_table(:principals) do
+      add_column :employee_id, String
+    end
+    run 'CREATE INDEX idx_principals_employee_id ON principals (employee_id) WHERE employee_id IS NOT NULL'
+
+    alter_table(:identities) do
+      add_column :account_type, String, null: false, default: 'primary'
+      add_column :qualifier, String
+      add_column :is_default, TrueClass, null: false, default: false
+      add_column :link_evidence, String
+    end
+
+    run 'CREATE UNIQUE INDEX identities_one_default_per_provider ON identities (principal_id, provider_id) WHERE is_default = true AND active = true'
+  end
+
+  down do
+    next unless adapter_scheme == :postgres
+
+    run 'DROP INDEX IF EXISTS identities_one_default_per_provider'
+
+    alter_table(:identities) do
+      drop_column :link_evidence
+      drop_column :is_default
+      drop_column :qualifier
+      drop_column :account_type
+    end
+
+    run 'DROP INDEX IF EXISTS idx_principals_employee_id'
+    alter_table(:principals) do
+      drop_column :employee_id
+    end
+  end
+end

data/lib/legion/data/model.rb

@@ -14,7 +14,7 @@ module Legion
           %w[extension function relationship chain task runner node setting digital_worker
              apollo_entry apollo_relation apollo_expertise apollo_access_log audit_log
              audit_record identity_provider principal identity identity_group
-             identity_group_membership]
+             identity_group_membership identity_audit_log]
         end
 
         def load

data/lib/legion/data/models/identity_audit_log.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+return unless Legion::Data::Connection.adapter == :postgres
+
+module Legion
+  module Data
+    module Model
+      class IdentityAuditLog < Sequel::Model(:identity_audit_log)
+        many_to_one :principal, class: 'Legion::Data::Model::Principal'
+        many_to_one :identity, class: 'Legion::Data::Model::Identity'
+      end
+    end
+  end
+end

data/lib/legion/data/spool.rb

@@ -9,6 +9,7 @@ module Legion
   module Data
     module Spool
       EXTENSION_PREFIX = 'Legion::Extensions::'
+      LEGION_PREFIX    = 'Legion::'
 
       class << self
         def root
@@ -25,9 +26,13 @@ module Legion
 
         def extension_path(extension_module)
           name = extension_module.name
-          raise ArgumentError, "#{name} is not under Legion::Extensions::" unless name&.start_with?(EXTENSION_PREFIX)
-
-          name.delete_prefix(EXTENSION_PREFIX).gsub('::', '/').downcase
+          if name&.start_with?(EXTENSION_PREFIX)
+            name.delete_prefix(EXTENSION_PREFIX).gsub('::', '/').downcase
+          elsif name&.start_with?(LEGION_PREFIX)
+            name.delete_prefix(LEGION_PREFIX).gsub('::', '/').downcase
+          else
+            raise ArgumentError, "#{name} is not under the Legion:: namespace"
+          end
         end
       end
 

data/lib/legion/data/version.rb

@@ -2,6 +2,6 @@
 
 module Legion
   module Data
-    VERSION = '1.6.29'
+    VERSION = '1.7.0'
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: legion-data
 version: !ruby/object:Gem::Version
-  version: 1.6.29
+  version: 1.7.0
 platform: ruby
 authors:
 - Esity
@@ -216,6 +216,8 @@ files:
 - lib/legion/data/migrations/069_add_principal_id_to_nodes.rb
 - lib/legion/data/migrations/070_add_approval_queue_resume.rb
 - lib/legion/data/migrations/071_add_engine_to_relationships.rb
+- lib/legion/data/migrations/072_create_identity_audit_log.rb
+- lib/legion/data/migrations/073_add_identity_multi_instance_columns.rb
 - lib/legion/data/model.rb
 - lib/legion/data/models/apollo_access_log.rb
 - lib/legion/data/models/apollo_entry.rb
@@ -228,6 +230,7 @@ files:
 - lib/legion/data/models/extension.rb
 - lib/legion/data/models/function.rb
 - lib/legion/data/models/identity.rb
+- lib/legion/data/models/identity_audit_log.rb
 - lib/legion/data/models/identity_group.rb
 - lib/legion/data/models/identity_group_membership.rb
 - lib/legion/data/models/identity_provider.rb