legion-data 1.6.30 → 1.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5736a13f366ea61837d0f2a27e51011b3e3729d4967f0434ca4cae245c4591c8
-  data.tar.gz: 1bc10f1333882ee230dd23a782d14603117ea1f141d35586ea81c5c713504795
+  metadata.gz: 8f45999e6d1c3b0727dc351630f7c76da902a40513e9cbcd35dbce97d5c90304
+  data.tar.gz: b3efe7c69e3ccb9540f44fc4e7a464428898abaa74bcddbab9c4b39f2eefc3b4
 SHA512:
-  metadata.gz: 29a76a92e428b6b255e20ade26b6323996762301f308fb711f7d02d47cc991e41e5f561babc0c068e1971d7453d3ef8fb52067ddf0d9f31093c8ca90a29966b1
-  data.tar.gz: f5a8d323ae53427f73bf194c7868ee4854b330b83329b825664b2a27d20ae7f7e53b0225399b07e12f8946a9c6bdc1b4e2b3038e62d48df65dc461d6b6c4681c
+  metadata.gz: 6449f9218be46e31329571cca1d9d3233860b8dd3e307eb35fcc824d3385969dd25a3493a1b0e4261786e622fe754c3d20f152bbf3bf9bfb920c0f0041103df9
+  data.tar.gz: b24487e1c279cda679fac9f27b3b4d7d5af00be5652782065e0f9b3a2b78502dce1d45c0db45b3f5f3632da9fd68f18b75714825d83dc0c0cd05953a26ae6c03

data/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 ## [Unreleased]
 
+## [1.7.0] - 2026-04-24
+
+### Added
+- Migration 072: `identity_audit_log` table (Postgres-only) with indexes
+- Migration 073: `employee_id` on principals, `account_type`/`qualifier`/`is_default`/`link_evidence` on identities, partial unique index for one-default-per-provider
+- `IdentityAuditLog` model added to model loader
+
 ## [1.6.30] - 2026-04-22
 
 ### Fixed

data/lib/legion/data/migrations/072_create_identity_audit_log.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+Sequel.migration do
+  up do
+    next unless adapter_scheme == :postgres
+
+    create_table(:identity_audit_log) do
+      column :id, :uuid, default: Sequel.lit('gen_random_uuid()'), primary_key: true
+      foreign_key :principal_id, :principals, type: :uuid, on_delete: :set_null
+      foreign_key :identity_id, :identities, type: :uuid, on_delete: :set_null
+      String :provider_name, null: false
+      String :event_type, null: false
+      String :trust_level
+      column :detail, :jsonb, null: false, default: Sequel.lit("'{}'")
+      String :node_id
+      String :session_id
+      DateTime :created_at, null: false, default: Sequel::CURRENT_TIMESTAMP
+    end
+
+    add_index :identity_audit_log, :principal_id
+    add_index :identity_audit_log, :event_type
+    add_index :identity_audit_log, :created_at
+    add_index :identity_audit_log, %i[principal_id event_type created_at]
+  end
+
+  down do
+    next unless adapter_scheme == :postgres
+
+    drop_table?(:identity_audit_log)
+  end
+end

data/lib/legion/data/migrations/073_add_identity_multi_instance_columns.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+Sequel.migration do
+  up do
+    next unless adapter_scheme == :postgres
+
+    alter_table(:principals) do
+      add_column :employee_id, String
+    end
+    run 'CREATE INDEX idx_principals_employee_id ON principals (employee_id) WHERE employee_id IS NOT NULL'
+
+    alter_table(:identities) do
+      add_column :account_type, String, null: false, default: 'primary'
+      add_column :qualifier, String
+      add_column :is_default, TrueClass, null: false, default: false
+      add_column :link_evidence, String
+    end
+
+    run 'CREATE UNIQUE INDEX identities_one_default_per_provider ON identities (principal_id, provider_id) WHERE is_default = true AND active = true'
+  end
+
+  down do
+    next unless adapter_scheme == :postgres
+
+    run 'DROP INDEX IF EXISTS identities_one_default_per_provider'
+
+    alter_table(:identities) do
+      drop_column :link_evidence
+      drop_column :is_default
+      drop_column :qualifier
+      drop_column :account_type
+    end
+
+    run 'DROP INDEX IF EXISTS idx_principals_employee_id'
+    alter_table(:principals) do
+      drop_column :employee_id
+    end
+  end
+end

data/lib/legion/data/model.rb

@@ -14,7 +14,7 @@ module Legion
           %w[extension function relationship chain task runner node setting digital_worker
              apollo_entry apollo_relation apollo_expertise apollo_access_log audit_log
              audit_record identity_provider principal identity identity_group
-             identity_group_membership]
+             identity_group_membership identity_audit_log]
         end
 
         def load

data/lib/legion/data/models/identity_audit_log.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+return unless Legion::Data::Connection.adapter == :postgres
+
+module Legion
+  module Data
+    module Model
+      class IdentityAuditLog < Sequel::Model(:identity_audit_log)
+        many_to_one :principal, class: 'Legion::Data::Model::Principal'
+        many_to_one :identity, class: 'Legion::Data::Model::Identity'
+      end
+    end
+  end
+end

data/lib/legion/data/version.rb

@@ -2,6 +2,6 @@
 
 module Legion
   module Data
-    VERSION = '1.6.30'
+    VERSION = '1.7.0'
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: legion-data
 version: !ruby/object:Gem::Version
-  version: 1.6.30
+  version: 1.7.0
 platform: ruby
 authors:
 - Esity
@@ -216,6 +216,8 @@ files:
 - lib/legion/data/migrations/069_add_principal_id_to_nodes.rb
 - lib/legion/data/migrations/070_add_approval_queue_resume.rb
 - lib/legion/data/migrations/071_add_engine_to_relationships.rb
+- lib/legion/data/migrations/072_create_identity_audit_log.rb
+- lib/legion/data/migrations/073_add_identity_multi_instance_columns.rb
 - lib/legion/data/model.rb
 - lib/legion/data/models/apollo_access_log.rb
 - lib/legion/data/models/apollo_entry.rb
@@ -228,6 +230,7 @@ files:
 - lib/legion/data/models/extension.rb
 - lib/legion/data/models/function.rb
 - lib/legion/data/models/identity.rb
+- lib/legion/data/models/identity_audit_log.rb
 - lib/legion/data/models/identity_group.rb
 - lib/legion/data/models/identity_group_membership.rb
 - lib/legion/data/models/identity_provider.rb