legion-logging 1.3.4 → 1.3.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ac6e65a10ce7708585f78114b5ee2d18303430e0d70b9039620f819a7de14325
-  data.tar.gz: fbf159026929b5d15668cd68aa5b0533f05d32ed67587389ade09a97bddc910c
+  metadata.gz: a197403f8e3949ef6680892655b47cdfec6052dffcf32732c8d9d277c5eecc93
+  data.tar.gz: 3baa080b906527dc521b1f326f014469d2802cac0e16682cc3eb3b2354079894
 SHA512:
-  metadata.gz: 0a94512fdad36ed375ee678cc64bf7473496418cd3f25d560286d83f0db5af32c86eb262d489725bfc70b6e9e44724d197b8a85b4497073da6932f8a312c0682
-  data.tar.gz: f146a912510f6b0eba2e3b28bc86952330e8d31caaee509869ee116fa12c60a21c599af4c882c44524d674a0ccc1320eea5ab6a5f13afd9c770c5c0d5de35dd5
+  metadata.gz: c63d0b3a21a3822f0f6e8226455b6d1f65a743094acd6d8669f4f8cda2a63e988503026b53c25084f9cd4c1bda0b87fcc94a6bc9afbe057736a713e7d4f1a31c
+  data.tar.gz: 1e76100161836d8e258fcb11a266f542bfc4e2df323a2830b3a54b649b2b0ea128613282f2fbebe8a0d5668200411fbfadcc92a152cd0fe1e3b0fea675a8de7d

data/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Legion::Logging Changelog
 
+## [1.3.5] - 2026-03-24
+
+### Added
+- Automatic PII/PHI redaction in log write path: all log methods (`debug`, `info`, `warn`, `error`, `fatal`, `unknown`) pass string messages through `Legion::Logging::Redactor.redact_string` when `logging.redaction.enabled` is `true` (default: `false`)
+- `maybe_redact(message)` private helper on `Legion::Logging::Methods` — no-ops when redaction is disabled, `Redactor` is not defined, or message is not a string
+- Hook callbacks (`on_warn`, `on_error`, `on_fatal`) receive already-redacted message so no PHI leaks through hook dispatch
+
+### Fixed
+- `redaction_enabled?` guards against recursive `Legion::Settings::Loader` initialization by checking `@loader` ivar directly before calling `dig`; prevents infinite recursion when settings bootstrap calls `Legion::Logging.warn`
+
 ## [1.3.4] - 2026-03-24
 
 ### Fixed

data/lib/legion/logging/methods.rb

@@ -21,6 +21,7 @@ module Legion
         return unless log.level < 1
 
         message = yield if message.nil? && block_given?
+        message = maybe_redact(message)
         message = Rainbow(message).blue if @color
         writer = @async_writer
         if writer&.alive?
@@ -34,6 +35,7 @@ module Legion
         return unless log.level < 2
 
         message = yield if message.nil? && block_given?
+        message = maybe_redact(message)
         message = Rainbow(message).green if @color
         writer = @async_writer
         if writer&.alive?
@@ -47,6 +49,7 @@ module Legion
         return unless log.level < 3
 
         message = yield if message.nil? && block_given?
+        message = maybe_redact(message)
         raw = message
         message = Rainbow(message).yellow if @color
         writer = @async_writer
@@ -63,6 +66,7 @@ module Legion
         return unless log.level < 4
 
         message = yield if message.nil? && block_given?
+        message = maybe_redact(message)
         raw = message
         message = Rainbow(message).red if @color
         writer = @async_writer
@@ -79,6 +83,7 @@ module Legion
         return unless log.level < 5
 
         message = yield if message.nil? && block_given?
+        message = maybe_redact(message)
         raw = message
         message = Rainbow(message).darkred if @color
         log.fatal(message)
@@ -87,6 +92,7 @@ module Legion
 
       def unknown(message = nil)
         message = yield if message.nil? && block_given?
+        message = maybe_redact(message)
         message = Rainbow(message).purple if @color
         writer = @async_writer
         if writer&.alive?
@@ -113,6 +119,27 @@ module Legion
 
       private
 
+      def maybe_redact(message)
+        return message unless message.is_a?(String)
+        return message unless redaction_enabled?
+        return message unless defined?(Legion::Logging::Redactor)
+
+        Legion::Logging::Redactor.redact_string(message)
+      rescue StandardError
+        message
+      end
+
+      def redaction_enabled?
+        return false unless defined?(Legion::Settings)
+
+        loader = Legion::Settings.instance_variable_get(:@loader)
+        return false unless loader
+
+        loader.dig(:logging, :redaction, :enabled) == true
+      rescue StandardError
+        false
+      end
+
       def build_hook_context(level, message)
         return nil unless Legion::Logging::Hooks.enabled?
         return nil if Legion::Logging::Hooks.hooks[level].empty?

data/lib/legion/logging/version.rb

@@ -2,6 +2,6 @@
 
 module Legion
   module Logging
-    VERSION = '1.3.4'
+    VERSION = '1.3.5'
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: legion-logging
 version: !ruby/object:Gem::Version
-  version: 1.3.4
+  version: 1.3.5
 platform: ruby
 authors:
 - Esity