legion-settings 1.3.19 → 1.3.21

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bcb9fa64de0a33406f5fd9ff5565901422a3db6ab594546d6fdee46d69cd38b7
-  data.tar.gz: 6201105537a8d3475e732b22a16e48b10b12787b03c18b1ce29d5b6e9531d85f
+  metadata.gz: 24640e14063c9f922ecb738b9cb1fc9fea8599dd2e721263aa6bbe940be65f3c
+  data.tar.gz: cf387ebcb1d7f6d7b52427dcc1283b7bbee9895f35be05cc7dffb63e1db3c367
 SHA512:
-  metadata.gz: c4f621cfe19539e3da7c16d7673334e5db9b70591b6e3cb269dba12f3dd9d0591ef37204d48c7c97a6dd3ed6ac8708d99346b58797bd0c15d6824fec5de45304
-  data.tar.gz: 5c2fdb94529ace5f3e8922b00984539add86621f1582105f96d12782eaf50ca434117bb05da16c5cc6f87cfef9c21564f7de0b1a1f8ca8389799f5b9189a7727
+  metadata.gz: 2a672dd08c5af2adacc95c7b47c8dc8c279c49c6a212c11a02663eb42c1624b232c509b180af753b06e963fa7998c2e831ee86644d834bcaa0145e2f53794b03
+  data.tar.gz: 5e7683ce7fd420785dc3d011410de328efeaa5df79ccfed19c2549e9b071dfcb4fa2b57b30245b4c4b5d513c6cc6da4205a67097332a812b998e3e26676a446a

data/CHANGELOG.md

@@ -1,11 +1,19 @@
 # Legion::Settings Changelog
 
-## [Unreleased]
+## [1.3.21] - 2026-03-27
+
+### Fixed
+- Prefer RFC-1918 private addresses over CGNAT (100.64.0.0/10) in client IP detection
+
+## [1.3.20] - 2026-03-27
 
 ### Fixed
 - Add 1-second timeout to FQDN detection to prevent boot hang on slow DNS
 - Downgrade FQDN detection failure log from warn to debug
 
+### Added
+- `Resolver#resolve_vault`: debug logging for vault path, key, cache hits, returned data structure, and extracted values
+
 ## [1.3.18] - 2026-03-24
 
 ### Added

data/CLAUDE.md

@@ -8,7 +8,7 @@
 Hash-like configuration store for the LegionIO framework. Loads settings from JSON files, directories, and environment variables. Provides a unified `Legion::Settings[:key]` accessor used by all other Legion gems. Includes schema-based validation with type inference, enum constraints, and cross-module checks.
 
 **GitHub**: https://github.com/LegionIO/legion-settings
-**Version**: 1.3.9
+**Version**: 1.3.19
 **License**: Apache-2.0
 
 ## Architecture
@@ -46,6 +46,8 @@ Legion::Settings (singleton module)
 │   ├── .validate_module # Validate values against schema
 │   └── .detect_unknown_keys  # Find typos via Levenshtein distance
 │
+├── AgentLoader          # Role-based profile loading: filters which extensions to load (profile: core/cognitive/service/dev/custom/nil)
+├── Validators::Tls      # TLS block validator: validates all `tls.*` blocks for required fields, certificate existence, and consistency
 ├── ValidationError      # Collects all errors, raises once with formatted message
 ├── OS                   # OS detection helpers
 └── CORE_MODULES         # [:transport, :cache, :crypt, :data, :logging, :client]
@@ -81,6 +83,8 @@ Legion::Settings (singleton module)
 | `lib/legion/settings/os.rb` | OS detection helpers |
 | `lib/legion/settings/resolver.rb` | Secret resolution: `vault://` and `env://` URI references, fallback chains |
 | `lib/legion/settings/dns_bootstrap.rb` | DNS-based corporate config discovery, caching, background refresh |
+| `lib/legion/settings/agent_loader.rb` | Role-based extension profile filtering (profile: core/cognitive/service/dev/custom/nil) |
+| `lib/legion/settings/validators/tls.rb` | Validates TLS configuration blocks for required fields, cert existence, and consistency |
 | `lib/legion/settings/version.rb` | VERSION constant |
 | `spec/legion/settings_spec.rb` | Core settings module tests |
 | `spec/legion/settings_module_spec.rb` | Module-level accessor and merge tests |

data/README.md

@@ -2,7 +2,7 @@
 
 Configuration management module for the [LegionIO](https://github.com/LegionIO/LegionIO) framework. Loads settings from JSON files, directories, and environment variables. Provides a unified `Legion::Settings[:key]` accessor used by all other Legion gems.
 
-**Version**: 1.3.9
+**Version**: 1.3.19
 
 ## Installation
 

data/lib/legion/settings/loader.rb

@@ -384,14 +384,20 @@ module Legion
       end
 
       def system_address
-        Socket.ip_address_list.find do |address|
-          address.ipv4? && !address.ipv4_loopback?
-        end.ip_address
+        addresses = Socket.ip_address_list.select { |a| a.ipv4? && !a.ipv4_loopback? }
+        preferred = addresses.find { |a| rfc1918?(a.ip_address) }
+        (preferred || addresses.first)&.ip_address || 'unknown'
       rescue StandardError => e
         Legion::Logging.debug("Legion::Settings::Loader#system_address failed: #{e.message}") if defined?(Legion::Logging)
         'unknown'
       end
 
+      def rfc1918?(ip)
+        ip.start_with?('10.') ||
+          ip.match?(/\A172\.(1[6-9]|2\d|3[01])\./) ||
+          ip.start_with?('192.168.')
+      end
+
       def log_info(message)
         defined?(Legion::Logging) ? Legion::Logging.info(message) : $stdout.puts(message)
       end

data/lib/legion/settings/resolver.rb

@@ -139,19 +139,28 @@ module Legion
       end
 
       def resolve_vault(path, key)
+        log_debug("resolve_vault: path=#{path}, key=#{key}, vault_available=#{@vault_available}")
         return nil unless @vault_available
 
         @vault_cache[path] ||= begin
-          Legion::Crypt.read(path)
+          log_debug("resolve_vault: calling Legion::Crypt.read(#{path.inspect})")
+          result = Legion::Crypt.read(path)
+          log_debug("resolve_vault: read returned #{result.nil? ? 'nil' : "keys=#{result.keys.inspect}"}")
+          result
         rescue StandardError => e
-          log_debug("Settings resolver: vault read failed for #{path}: #{e.message}")
+          log_warn("Settings resolver: vault read failed for #{path}: #{e.class}=#{e.message}")
           nil
         end
 
         data = @vault_cache[path]
-        return nil unless data.is_a?(Hash)
+        unless data.is_a?(Hash)
+          log_debug("resolve_vault: data at #{path} is #{data.class}, returning nil")
+          return nil
+        end
 
-        data[key.to_sym] || data[key.to_s]
+        value = data[key.to_sym] || data[key.to_s]
+        log_debug("resolve_vault: #{path}##{key} = #{value.nil? ? 'nil' : '<present>'}")
+        value
       end
 
       def resolve_lease(name, key)

data/lib/legion/settings/version.rb

@@ -2,6 +2,6 @@
 
 module Legion
   module Settings
-    VERSION = '1.3.19'
+    VERSION = '1.3.21'
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: legion-settings
 version: !ruby/object:Gem::Version
-  version: 1.3.19
+  version: 1.3.21
 platform: ruby
 authors:
 - Esity