legion-logging 1.3.3 → 1.3.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3d376fafb0c34211ae2d198730af9c5b257301242c92f18525eb9afa04c570de
-  data.tar.gz: 865d58843c8bd43e9564f62dd4efebfd7b5ed5745102f5b43a6fb5e048500ee2
+  metadata.gz: a197403f8e3949ef6680892655b47cdfec6052dffcf32732c8d9d277c5eecc93
+  data.tar.gz: 3baa080b906527dc521b1f326f014469d2802cac0e16682cc3eb3b2354079894
 SHA512:
-  metadata.gz: 912e1ec7877ef76adb3f27b07eaf6283a05decfa27d325d953caf76acb295608f67a976cc56a600853a8ecf2e0a2aa247e77f100d3a65872061b6c5033e95b89
-  data.tar.gz: 8503664f4b1fef55b319d026bb7ccc0d13ac6a46773d234b5d8ab7aa2d56e2af61f2b4b4ff7340702012c4db3a54515a35537c8d66c6872b3affca3697cd7de7
+  metadata.gz: c63d0b3a21a3822f0f6e8226455b6d1f65a743094acd6d8669f4f8cda2a63e988503026b53c25084f9cd4c1bda0b87fcc94a6bc9afbe057736a713e7d4f1a31c
+  data.tar.gz: 1e76100161836d8e258fcb11a266f542bfc4e2df323a2830b3a54b649b2b0ea128613282f2fbebe8a0d5668200411fbfadcc92a152cd0fe1e3b0fea675a8de7d

data/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Legion::Logging Changelog
 
+## [1.3.5] - 2026-03-24
+
+### Added
+- Automatic PII/PHI redaction in log write path: all log methods (`debug`, `info`, `warn`, `error`, `fatal`, `unknown`) pass string messages through `Legion::Logging::Redactor.redact_string` when `logging.redaction.enabled` is `true` (default: `false`)
+- `maybe_redact(message)` private helper on `Legion::Logging::Methods` — no-ops when redaction is disabled, `Redactor` is not defined, or message is not a string
+- Hook callbacks (`on_warn`, `on_error`, `on_fatal`) receive already-redacted message so no PHI leaks through hook dispatch
+
+### Fixed
+- `redaction_enabled?` guards against recursive `Legion::Settings::Loader` initialization by checking `@loader` ivar directly before calling `dig`; prevents infinite recursion when settings bootstrap calls `Legion::Logging.warn`
+
+## [1.3.4] - 2026-03-24
+
+### Fixed
+- `EventBuilder#derive_lex_source` no longer blindly prepends `lex-` to all source names (was causing `add_gem_info` to fail for core gems like `legion-data` with `Could not find 'lex-data'`)
+- `EventBuilder#add_gem_info` now tries raw name, `lex-<name>`, and `legion-<name>` prefixes when resolving gem specs (extracted to `resolve_gem_spec` method)
+
 ## [1.3.3] - 2026-03-24
 
 ### Changed

data/lib/legion/logging/event_builder.rb

@@ -29,9 +29,9 @@ module Legion
 
         def derive_lex_source(lex, lex_segments)
           if lex_segments.is_a?(Array) && !lex_segments.empty?
-            "lex-#{lex_segments.join('-')}"
+            lex_segments.join('-')
           elsif lex && !lex.to_s.empty?
-            "lex-#{lex}"
+            lex.to_s
           end
         end
 
@@ -71,7 +71,9 @@ module Legion
         def add_gem_info(event, lex_source)
           return unless lex_source
 
-          spec = Gem::Specification.find_by_name(lex_source)
+          spec = resolve_gem_spec(lex_source)
+          return unless spec
+
           event[:gem] = {
             name:            spec.name,
             version:         spec.version.to_s,
@@ -79,8 +81,14 @@ module Legion
             homepage:        spec.metadata['homepage_uri'] || spec.homepage,
             path:            spec.full_gem_path
           }.compact
-        rescue Gem::MissingSpecError, ArgumentError => e
-          warn("Legion::Logging::EventBuilder#add_gem_info failed for #{lex_source}: #{e.message}")
+        end
+
+        def resolve_gem_spec(name)
+          [name, "lex-#{name}", "legion-#{name}"].each do |candidate|
+            return Gem::Specification.find_by_name(candidate)
+          rescue Gem::MissingSpecError
+            next
+          end
           nil
         end
 

data/lib/legion/logging/methods.rb

@@ -21,6 +21,7 @@ module Legion
         return unless log.level < 1
 
         message = yield if message.nil? && block_given?
+        message = maybe_redact(message)
         message = Rainbow(message).blue if @color
         writer = @async_writer
         if writer&.alive?
@@ -34,6 +35,7 @@ module Legion
         return unless log.level < 2
 
         message = yield if message.nil? && block_given?
+        message = maybe_redact(message)
         message = Rainbow(message).green if @color
         writer = @async_writer
         if writer&.alive?
@@ -47,6 +49,7 @@ module Legion
         return unless log.level < 3
 
         message = yield if message.nil? && block_given?
+        message = maybe_redact(message)
         raw = message
         message = Rainbow(message).yellow if @color
         writer = @async_writer
@@ -63,6 +66,7 @@ module Legion
         return unless log.level < 4
 
         message = yield if message.nil? && block_given?
+        message = maybe_redact(message)
         raw = message
         message = Rainbow(message).red if @color
         writer = @async_writer
@@ -79,6 +83,7 @@ module Legion
         return unless log.level < 5
 
         message = yield if message.nil? && block_given?
+        message = maybe_redact(message)
         raw = message
         message = Rainbow(message).darkred if @color
         log.fatal(message)
@@ -87,6 +92,7 @@ module Legion
 
       def unknown(message = nil)
         message = yield if message.nil? && block_given?
+        message = maybe_redact(message)
         message = Rainbow(message).purple if @color
         writer = @async_writer
         if writer&.alive?
@@ -113,6 +119,27 @@ module Legion
 
       private
 
+      def maybe_redact(message)
+        return message unless message.is_a?(String)
+        return message unless redaction_enabled?
+        return message unless defined?(Legion::Logging::Redactor)
+
+        Legion::Logging::Redactor.redact_string(message)
+      rescue StandardError
+        message
+      end
+
+      def redaction_enabled?
+        return false unless defined?(Legion::Settings)
+
+        loader = Legion::Settings.instance_variable_get(:@loader)
+        return false unless loader
+
+        loader.dig(:logging, :redaction, :enabled) == true
+      rescue StandardError
+        false
+      end
+
       def build_hook_context(level, message)
         return nil unless Legion::Logging::Hooks.enabled?
         return nil if Legion::Logging::Hooks.hooks[level].empty?

data/lib/legion/logging/version.rb

@@ -2,6 +2,6 @@
 
 module Legion
   module Logging
-    VERSION = '1.3.3'
+    VERSION = '1.3.5'
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: legion-logging
 version: !ruby/object:Gem::Version
-  version: 1.3.3
+  version: 1.3.5
 platform: ruby
 authors:
 - Esity