legion-rbac 0.3.1 → 0.3.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1e31de28dec8d6ed48595581dae626ad860e9f7f3b5bf7bd40086d66edeca25a
-  data.tar.gz: ef15533a37dafea6e3783761405ea446d57cdfa55aca62816770e913aa0823e1
+  metadata.gz: 6971b76fa8052ff121e686629a6abcf800d6819afbffe4fc0adcf146f9b00b1d
+  data.tar.gz: 97c808593590d1416dc799b3711fa0353d86f55307c16b71cde4ab5e704a093c
 SHA512:
-  metadata.gz: 61dc20722e2fb34563fb06ec2f73b8db7c43e96450ff8ed7052ef3316827418b8896185a3d52ca6843ca620055ebae444090f4fb075f5740bbe521c30c900f86
-  data.tar.gz: 1154d70f8bbb2cee9e7b65414606d3bd5808b3f1822d40e02f1c5ca7b0896a6edd09e27534c7ab749ffaa0e3642ed99a08c00f19f169192d2803f5d7c9cf0822
+  metadata.gz: e6ef4dce9750b6de9544a49f12df5311f3a312a35ee46c89465f724b5ea0d02822bd9a8c23954665df498985a143913c4012f83401e8b0b12f776fd71e624eb2
+  data.tar.gz: 97bb68fae5dc33ac682461a12ef626ec8e5e392250ef11391381a9ad3212f587385648dcda982f6bcf2d9fc2bb601cdde9d699b58924da8bf4f7c73950164f54

data/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## [0.3.2] - 2026-04-08
+
+### Added
+- `client_id: nil` default added to Entra settings block for explicit Azure AD app registration tracking
+
 ## [0.3.1] - 2026-04-03
 
 ### Fixed

data/CLAUDE.md

@@ -2,7 +2,7 @@
 
 **Parent**: `/Users/miverso2/rubymine/legion/CLAUDE.md`
 **GitHub**: https://github.com/LegionIO/legion-rbac
-**Version**: 0.2.7
+**Version**: 0.3.2
 
 Optional RBAC gem for LegionIO. Vault-style flat policy model with deny-always-wins semantics.
 
@@ -29,6 +29,9 @@ lib/legion/rbac/policy_engine.rb # Core evaluator
 lib/legion/rbac/team_scope.rb   # Cross-team access validation
 lib/legion/rbac/store.rb        # Dual-mode data access
 lib/legion/rbac/middleware.rb              # Rack middleware
+lib/legion/rbac/routes.rb                 # Sinatra REST API routes for RBAC management
+lib/legion/rbac/capability_registry.rb    # Per-extension capability declarations and querying
+lib/legion/rbac/capability_audit.rb       # Source code scanning for dangerous patterns; enforces declared capabilities
 lib/legion/rbac/entra_claims_mapper.rb    # Entra ID claims -> Legion roles
 lib/legion/rbac/kerberos_claims_mapper.rb # Kerberos principal + AD groups -> Legion roles
 ```

data/README.md

@@ -2,7 +2,7 @@
 
 Role-based access control for LegionIO, following Vault-style flat policy patterns.
 
-**Version**: 0.2.9
+**Version**: 0.3.2
 
 ## Features
 

data/lib/legion/rbac/settings.rb

@@ -47,6 +47,7 @@ module Legion
         log.debug('RBAC Entra defaults requested')
         {
           tenant_id:    nil,
+          client_id:    nil,
           role_map:     {
             'Legion.Admin'      => 'admin',
             'Legion.Supervisor' => 'supervisor',

data/lib/legion/rbac/version.rb

@@ -2,6 +2,6 @@
 
 module Legion
   module Rbac
-    VERSION = '0.3.1'
+    VERSION = '0.3.2'
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: legion-rbac
 version: !ruby/object:Gem::Version
-  version: 0.3.1
+  version: 0.3.2
 platform: ruby
 authors:
 - Esity