legion-data 1.8.2 → 1.8.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 38a6acdfd8b43c7f28928e2c972b292d5f4dac76fe62049600c3cafe617e270c
-  data.tar.gz: 00615b710b087d2d71683eca0424b44200cf9d2934d68169196ee9b13252f225
+  metadata.gz: 16137586242aa6d79a027d6e293dced3807ea3b61a0ff896c06164a3b600ebf3
+  data.tar.gz: 73c64585a2280fa2d0a143a7f6811f7707f1c2524468fcfc799f16aaaebbbc3a
 SHA512:
-  metadata.gz: 6dbf52624a9780173930c096f4fcd58216e6bcd59ffaa832d137446753dbb39eb293e17c6e2288dbce1451bc77cf5fa366d55d6ce99901794e82d871ca679ad7
-  data.tar.gz: 50ea8e3806bdf7de608af572802c8edf6ba40c77c2c42857ed4d7a7ec85470c29c3345771aefa62bbb92d7fd466fad1f3fce1d8b9ab85d404fd42bed70e70554
+  metadata.gz: ef0a8443c9405d83ff2ec0b84738ebfef221c85c09ffb2bc73311910872052df587e53e5ebd0739481175e56d2bade7d41f74747d3aef34d0fad1774f469d7a3
+  data.tar.gz: de5406352a6ce4d0bbc73ad5f2c38831d5083bbb01d2648cf49967a82059cf0c28906a7fb406db205b5c2126a91ea05327f7611cf8e90ec816f2418cd8f00e0f

data/CHANGELOG.md

@@ -2,6 +2,24 @@
 
 ## [Unreleased]
 
+## [1.8.4] - 2026-05-08
+
+### Removed
+- Dropped legacy postgres-only identity tables (`principals`, `identity_providers`, `identities`, `identity_groups`, `identity_group_memberships`, `identity_audit_log`) via migration 098.
+- Removed `table_available?` guards from all identity model files — models load unconditionally.
+
+### Changed
+- Renamed `portable_identity_*` tables to canonical names (`identity_principals`, `identity_providers`, `identities`, `identity_groups`, `identity_group_memberships`, `identity_audit_log`, `identity_provider_capabilities`) via migration 099.
+- Updated all identity models to reference the new table names.
+
+## [1.8.3] - 2026-05-07
+
+### Removed
+- Legacy top-level identity model files (`identity.rb`, `principal.rb`, `identity_provider.rb`, `identity_group.rb`, `identity_group_membership.rb`, `identity_audit_log.rb`) — superseded by the portable `identity/` namespace models backed by `portable_*` tables.
+
+### Fixed
+- `TypeError: superclass mismatch for class Identity` on postgres startup caused by `model_helpers.rb` defining `class Identity` as a plain namespace before `identity.rb` tried to reopen it as `< Sequel::Model(:identities)`.
+
 ## [1.8.2] - 2026-05-07
 
 ### Changed

data/lib/legion/data/migrations/098_drop_legacy_identity_tables.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+Sequel.migration do
+  up do
+    drop_table(:identity_audit_log) if table_exists?(:identity_audit_log)
+    drop_table(:identity_group_memberships) if table_exists?(:identity_group_memberships)
+    drop_table(:identity_groups) if table_exists?(:identity_groups)
+    drop_table(:identities) if table_exists?(:identities)
+
+    alter_table(:nodes) { drop_column :principal_id } if table_exists?(:nodes) && schema(:nodes).any? { |col, _| col == :principal_id }
+
+    drop_table(:principals) if table_exists?(:principals)
+    drop_table(:identity_providers) if table_exists?(:identity_providers)
+  end
+
+  down do
+    nil
+  end
+end

data/lib/legion/data/migrations/099_rename_portable_identity_tables.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+Sequel.migration do
+  up do
+    rename_table(:portable_identity_provider_capabilities, :identity_provider_capabilities)
+    rename_table(:portable_identity_audit_log, :identity_audit_log)
+    rename_table(:portable_identity_group_memberships, :identity_group_memberships)
+    rename_table(:portable_identity_groups, :identity_groups)
+    rename_table(:portable_identities, :identities)
+    rename_table(:portable_identity_principals, :identity_principals)
+    rename_table(:portable_identity_providers, :identity_providers)
+  end
+
+  down do
+    rename_table(:identity_providers, :portable_identity_providers)
+    rename_table(:identity_principals, :portable_identity_principals)
+    rename_table(:identities, :portable_identities)
+    rename_table(:identity_groups, :portable_identity_groups)
+    rename_table(:identity_group_memberships, :portable_identity_group_memberships)
+    rename_table(:identity_audit_log, :portable_identity_audit_log)
+    rename_table(:identity_provider_capabilities, :portable_identity_provider_capabilities)
+  end
+end

data/lib/legion/data/model.rb

@@ -13,8 +13,7 @@ module Legion
         def models
           %w[extension function relationship chain task runner node setting digital_worker
              apollo_entry apollo_relation apollo_expertise apollo_access_log audit_log
-             audit_record identity_provider principal identity identity_group
-             identity_group_membership identity_audit_log extract_step_timing
+             audit_record extract_step_timing
              identity/identity identity/principal identity/providers identity/group
              identity/group_memberships identity/audit_log
              apollo/entries apollo/relation apollo/access_log apollo/expertise

data/lib/legion/data/models/identity/audit_log.rb

@@ -2,13 +2,11 @@
 
 require_relative 'model_helpers'
 
-return unless Legion::Data::Model::Identity::ModelHelpers.table_available?(:portable_identity_audit_log)
-
 module Legion
   module Data
     module Model
       class Identity
-        class AuditLog < Sequel::Model(:portable_identity_audit_log)
+        class AuditLog < Sequel::Model(:identity_audit_log)
           include ModelHelpers
 
           many_to_one :principal, class: 'Legion::Data::Model::Identity::Principal'

data/lib/legion/data/models/identity/group.rb

@@ -2,19 +2,17 @@
 
 require_relative 'model_helpers'
 
-return unless Legion::Data::Model::Identity::ModelHelpers.table_available?(:portable_identity_groups)
-
 module Legion
   module Data
     module Model
       class Identity
-        class Group < Sequel::Model(:portable_identity_groups)
+        class Group < Sequel::Model(:identity_groups)
           include ModelHelpers
 
           one_to_many :memberships, class: 'Legion::Data::Model::Identity::GroupMembership', key: :group_id
           many_to_many :principals,
                        class:      'Legion::Data::Model::Identity::Principal',
-                       join_table: :portable_identity_group_memberships,
+                       join_table: :identity_group_memberships,
                        left_key:   :group_id,
                        right_key:  :principal_id
 

data/lib/legion/data/models/identity/group_memberships.rb

@@ -2,13 +2,11 @@
 
 require_relative 'model_helpers'
 
-return unless Legion::Data::Model::Identity::ModelHelpers.table_available?(:portable_identity_group_memberships)
-
 module Legion
   module Data
     module Model
       class Identity
-        class GroupMembership < Sequel::Model(:portable_identity_group_memberships)
+        class GroupMembership < Sequel::Model(:identity_group_memberships)
           include ModelHelpers
 
           many_to_one :principal, class: 'Legion::Data::Model::Identity::Principal'

data/lib/legion/data/models/identity/identity.rb

@@ -2,13 +2,11 @@
 
 require_relative 'model_helpers'
 
-return unless Legion::Data::Model::Identity::ModelHelpers.table_available?(:portable_identities)
-
 module Legion
   module Data
     module Model
       class Identity
-        class Identity < Sequel::Model(:portable_identities)
+        class Identity < Sequel::Model(:identities)
           include ModelHelpers
 
           many_to_one :principal, class: 'Legion::Data::Model::Identity::Principal'

data/lib/legion/data/models/identity/model_helpers.rb

@@ -11,12 +11,6 @@ module Legion
             model.extend(ClassMethods)
           end
 
-          def self.table_available?(table_name)
-            Legion::Data::Connection.sequel&.table_exists?(table_name)
-          rescue StandardError
-            false
-          end
-
           module ClassMethods
             def lookup(value)
               lookup_by_columns(value, lookup_columns)

data/lib/legion/data/models/identity/principal.rb

@@ -2,20 +2,18 @@
 
 require_relative 'model_helpers'
 
-return unless Legion::Data::Model::Identity::ModelHelpers.table_available?(:portable_identity_principals)
-
 module Legion
   module Data
     module Model
       class Identity
-        class Principal < Sequel::Model(:portable_identity_principals)
+        class Principal < Sequel::Model(:identity_principals)
           include ModelHelpers
 
           one_to_many :identities, class: 'Legion::Data::Model::Identity::Identity'
           one_to_many :group_memberships, class: 'Legion::Data::Model::Identity::GroupMembership'
           many_to_many :groups,
                        class:      'Legion::Data::Model::Identity::Group',
-                       join_table: :portable_identity_group_memberships,
+                       join_table: :identity_group_memberships,
                        left_key:   :principal_id,
                        right_key:  :group_id
 

data/lib/legion/data/models/identity/providers.rb

@@ -2,13 +2,11 @@
 
 require_relative 'model_helpers'
 
-return unless Legion::Data::Model::Identity::ModelHelpers.table_available?(:portable_identity_providers)
-
 module Legion
   module Data
     module Model
       class Identity
-        class Provider < Sequel::Model(:portable_identity_providers)
+        class Provider < Sequel::Model(:identity_providers)
           include ModelHelpers
 
           one_to_many :identities, class: 'Legion::Data::Model::Identity::Identity', key: :provider_id
@@ -25,7 +23,7 @@ module Legion
           end
         end
 
-        class ProviderCapability < Sequel::Model(:portable_identity_provider_capabilities)
+        class ProviderCapability < Sequel::Model(:identity_provider_capabilities)
           many_to_one :provider, class: 'Legion::Data::Model::Identity::Provider'
         end
       end

data/lib/legion/data/version.rb

@@ -2,6 +2,6 @@
 
 module Legion
   module Data
-    VERSION = '1.8.2'
+    VERSION = '1.8.4'
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: legion-data
 version: !ruby/object:Gem::Version
-  version: 1.8.2
+  version: 1.8.4
 platform: ruby
 authors:
 - Esity
@@ -244,6 +244,8 @@ files:
 - lib/legion/data/migrations/095_create_portable_identity_group_memberships.rb
 - lib/legion/data/migrations/096_create_portable_identity_audit_log.rb
 - lib/legion/data/migrations/097_add_llm_dispatch_fields.rb
+- lib/legion/data/migrations/098_drop_legacy_identity_tables.rb
+- lib/legion/data/migrations/099_rename_portable_identity_tables.rb
 - lib/legion/data/model.rb
 - lib/legion/data/models/apollo/access_log.rb
 - lib/legion/data/models/apollo/entries.rb
@@ -262,7 +264,6 @@ files:
 - lib/legion/data/models/extension.rb
 - lib/legion/data/models/extract_step_timing.rb
 - lib/legion/data/models/function.rb
-- lib/legion/data/models/identity.rb
 - lib/legion/data/models/identity/audit_log.rb
 - lib/legion/data/models/identity/group.rb
 - lib/legion/data/models/identity/group_memberships.rb
@@ -270,10 +271,6 @@ files:
 - lib/legion/data/models/identity/model_helpers.rb
 - lib/legion/data/models/identity/principal.rb
 - lib/legion/data/models/identity/providers.rb
-- lib/legion/data/models/identity_audit_log.rb
-- lib/legion/data/models/identity_group.rb
-- lib/legion/data/models/identity_group_membership.rb
-- lib/legion/data/models/identity_provider.rb
 - lib/legion/data/models/llm/conversation.rb
 - lib/legion/data/models/llm/conversation_compaction.rb
 - lib/legion/data/models/llm/message.rb
@@ -288,7 +285,6 @@ files:
 - lib/legion/data/models/llm/tool_call.rb
 - lib/legion/data/models/llm/tool_call_attempt.rb
 - lib/legion/data/models/node.rb
-- lib/legion/data/models/principal.rb
 - lib/legion/data/models/rbac/cross_team_grants.rb
 - lib/legion/data/models/rbac/model_helpers.rb
 - lib/legion/data/models/rbac/role_assignments.rb

data/lib/legion/data/models/identity.rb

@@ -1,26 +0,0 @@
-# frozen_string_literal: true
-
-return unless Legion::Data::Connection.adapter == :postgres
-
-module Legion
-  module Data
-    module Model
-      class Identity < Sequel::Model(:identities)
-        require_relative 'identity/model_helpers'
-        include ModelHelpers
-
-        many_to_one :principal, class: 'Legion::Data::Model::Principal'
-        many_to_one :provider, class: 'Legion::Data::Model::IdentityProvider', key: :provider_id
-
-        def self.lookup_columns
-          %i[id uuid provider_identity_key provider_identity]
-        end
-
-        if defined?(Legion::Data::Encryption::SequelPlugin)
-          plugin Legion::Data::Encryption::SequelPlugin
-          encrypted_column :profile
-        end
-      end
-    end
-  end
-end

data/lib/legion/data/models/identity_audit_log.rb

@@ -1,14 +0,0 @@
-# frozen_string_literal: true
-
-return unless Legion::Data::Connection.adapter == :postgres
-
-module Legion
-  module Data
-    module Model
-      class IdentityAuditLog < Sequel::Model(:identity_audit_log)
-        many_to_one :principal, class: 'Legion::Data::Model::Principal'
-        many_to_one :identity, class: 'Legion::Data::Model::Identity'
-      end
-    end
-  end
-end

data/lib/legion/data/models/identity_group.rb

@@ -1,26 +0,0 @@
-# frozen_string_literal: true
-
-require_relative 'identity/model_helpers'
-
-return unless Legion::Data::Connection.adapter == :postgres
-
-module Legion
-  module Data
-    module Model
-      class IdentityGroup < Sequel::Model(:identity_groups)
-        include Identity::ModelHelpers
-
-        one_to_many :memberships, class: 'Legion::Data::Model::IdentityGroupMembership', key: :group_id
-        many_to_many :principals,
-                     class:      'Legion::Data::Model::Principal',
-                     join_table: :identity_group_memberships,
-                     left_key:   :group_id,
-                     right_key:  :principal_id
-
-        def self.lookup_columns
-          %i[id uuid name]
-        end
-      end
-    end
-  end
-end

data/lib/legion/data/models/identity_group_membership.rb

@@ -1,22 +0,0 @@
-# frozen_string_literal: true
-
-return unless Legion::Data::Connection.adapter == :postgres
-
-module Legion
-  module Data
-    module Model
-      class IdentityGroupMembership < Sequel::Model(:identity_group_memberships)
-        many_to_one :principal, class: 'Legion::Data::Model::Principal'
-        many_to_one :group, class: 'Legion::Data::Model::IdentityGroup', key: :group_id
-
-        def expired?
-          status == 'expired' || (expires_at && Time.now >= expires_at)
-        end
-
-        def stale?
-          status == 'stale'
-        end
-      end
-    end
-  end
-end

data/lib/legion/data/models/identity_provider.rb

@@ -1,25 +0,0 @@
-# frozen_string_literal: true
-
-require_relative 'identity/model_helpers'
-
-return unless Legion::Data::Connection.adapter == :postgres
-
-module Legion
-  module Data
-    module Model
-      class IdentityProvider < Sequel::Model(:identity_providers)
-        include Identity::ModelHelpers
-
-        one_to_many :identities, class: 'Legion::Data::Model::Identity'
-
-        def self.lookup_columns
-          %i[id uuid name]
-        end
-
-        def parsed_capabilities
-          Array(capabilities)
-        end
-      end
-    end
-  end
-end

data/lib/legion/data/models/principal.rb

@@ -1,35 +0,0 @@
-# frozen_string_literal: true
-
-require_relative 'identity/model_helpers'
-
-return unless Legion::Data::Connection.adapter == :postgres
-
-module Legion
-  module Data
-    module Model
-      class Principal < Sequel::Model(:principals)
-        include Identity::ModelHelpers
-
-        one_to_many :identities, class: 'Legion::Data::Model::Identity'
-        one_to_many :group_memberships, class: 'Legion::Data::Model::IdentityGroupMembership'
-        many_to_many :groups,
-                     class:      'Legion::Data::Model::IdentityGroup',
-                     join_table: :identity_group_memberships,
-                     left_key:   :principal_id,
-                     right_key:  :group_id
-
-        def self.lookup_columns
-          %i[id uuid canonical_name employee_key employee_id]
-        end
-
-        def active_groups
-          group_memberships_dataset
-            .where(status: 'active')
-            .eager(:group)
-            .all
-            .map(&:group)
-        end
-      end
-    end
-  end
-end