legion-settings 1.3.19 → 1.3.20

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bcb9fa64de0a33406f5fd9ff5565901422a3db6ab594546d6fdee46d69cd38b7
-  data.tar.gz: 6201105537a8d3475e732b22a16e48b10b12787b03c18b1ce29d5b6e9531d85f
+  metadata.gz: beeec634e807f88a6a10a9076a258efedc233d5cfe0412be24d96f01f2b9be35
+  data.tar.gz: be84692b4242373941f10ee92dd0ed86df689d805283a6cd4e14879f7cd2a907
 SHA512:
-  metadata.gz: c4f621cfe19539e3da7c16d7673334e5db9b70591b6e3cb269dba12f3dd9d0591ef37204d48c7c97a6dd3ed6ac8708d99346b58797bd0c15d6824fec5de45304
-  data.tar.gz: 5c2fdb94529ace5f3e8922b00984539add86621f1582105f96d12782eaf50ca434117bb05da16c5cc6f87cfef9c21564f7de0b1a1f8ca8389799f5b9189a7727
+  metadata.gz: 7f9f4ed4728098aeeb92e1925d3465e89d05d30d8ee01ae030fd1424b483d7c31b67f423659b63e7f44bd01dabc28aad1906db8148c3576ebacf73d2667491bd
+  data.tar.gz: 247ed6734058a5ef16cd76ab37e7e620b8794d4fa60d6b7d561f616eef1030a1b461f71c65a987f1cc5223387df45e0eaf54105ec16ea9529355e772a9d3e930

data/CHANGELOG.md

@@ -1,11 +1,14 @@
 # Legion::Settings Changelog
 
-## [Unreleased]
+## [1.3.20] - 2026-03-27
 
 ### Fixed
 - Add 1-second timeout to FQDN detection to prevent boot hang on slow DNS
 - Downgrade FQDN detection failure log from warn to debug
 
+### Added
+- `Resolver#resolve_vault`: debug logging for vault path, key, cache hits, returned data structure, and extracted values
+
 ## [1.3.18] - 2026-03-24
 
 ### Added

data/CLAUDE.md

@@ -8,7 +8,7 @@
 Hash-like configuration store for the LegionIO framework. Loads settings from JSON files, directories, and environment variables. Provides a unified `Legion::Settings[:key]` accessor used by all other Legion gems. Includes schema-based validation with type inference, enum constraints, and cross-module checks.
 
 **GitHub**: https://github.com/LegionIO/legion-settings
-**Version**: 1.3.9
+**Version**: 1.3.19
 **License**: Apache-2.0
 
 ## Architecture
@@ -46,6 +46,8 @@ Legion::Settings (singleton module)
 │   ├── .validate_module # Validate values against schema
 │   └── .detect_unknown_keys  # Find typos via Levenshtein distance
 │
+├── AgentLoader          # Role-based profile loading: filters which extensions to load (profile: core/cognitive/service/dev/custom/nil)
+├── Validators::Tls      # TLS block validator: validates all `tls.*` blocks for required fields, certificate existence, and consistency
 ├── ValidationError      # Collects all errors, raises once with formatted message
 ├── OS                   # OS detection helpers
 └── CORE_MODULES         # [:transport, :cache, :crypt, :data, :logging, :client]
@@ -81,6 +83,8 @@ Legion::Settings (singleton module)
 | `lib/legion/settings/os.rb` | OS detection helpers |
 | `lib/legion/settings/resolver.rb` | Secret resolution: `vault://` and `env://` URI references, fallback chains |
 | `lib/legion/settings/dns_bootstrap.rb` | DNS-based corporate config discovery, caching, background refresh |
+| `lib/legion/settings/agent_loader.rb` | Role-based extension profile filtering (profile: core/cognitive/service/dev/custom/nil) |
+| `lib/legion/settings/validators/tls.rb` | Validates TLS configuration blocks for required fields, cert existence, and consistency |
 | `lib/legion/settings/version.rb` | VERSION constant |
 | `spec/legion/settings_spec.rb` | Core settings module tests |
 | `spec/legion/settings_module_spec.rb` | Module-level accessor and merge tests |

data/README.md

@@ -2,7 +2,7 @@
 
 Configuration management module for the [LegionIO](https://github.com/LegionIO/LegionIO) framework. Loads settings from JSON files, directories, and environment variables. Provides a unified `Legion::Settings[:key]` accessor used by all other Legion gems.
 
-**Version**: 1.3.9
+**Version**: 1.3.19
 
 ## Installation
 

data/lib/legion/settings/resolver.rb

@@ -139,19 +139,28 @@ module Legion
       end
 
       def resolve_vault(path, key)
+        log_debug("resolve_vault: path=#{path}, key=#{key}, vault_available=#{@vault_available}")
         return nil unless @vault_available
 
         @vault_cache[path] ||= begin
-          Legion::Crypt.read(path)
+          log_debug("resolve_vault: calling Legion::Crypt.read(#{path.inspect})")
+          result = Legion::Crypt.read(path)
+          log_debug("resolve_vault: read returned #{result.nil? ? 'nil' : "keys=#{result.keys.inspect}"}")
+          result
         rescue StandardError => e
-          log_debug("Settings resolver: vault read failed for #{path}: #{e.message}")
+          log_warn("Settings resolver: vault read failed for #{path}: #{e.class}=#{e.message}")
           nil
         end
 
         data = @vault_cache[path]
-        return nil unless data.is_a?(Hash)
+        unless data.is_a?(Hash)
+          log_debug("resolve_vault: data at #{path} is #{data.class}, returning nil")
+          return nil
+        end
 
-        data[key.to_sym] || data[key.to_s]
+        value = data[key.to_sym] || data[key.to_s]
+        log_debug("resolve_vault: #{path}##{key} = #{value.nil? ? 'nil' : '<present>'}")
+        value
       end
 
       def resolve_lease(name, key)

data/lib/legion/settings/version.rb

@@ -2,6 +2,6 @@
 
 module Legion
   module Settings
-    VERSION = '1.3.19'
+    VERSION = '1.3.20'
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: legion-settings
 version: !ruby/object:Gem::Version
-  version: 1.3.19
+  version: 1.3.20
 platform: ruby
 authors:
 - Esity