legion-transport 1.2.7 → 1.2.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d4289f15bf500b987315e7316a94dfbb57f44f9b4d1fd08f5595181172729858
-  data.tar.gz: 398d87bb9ea0a8e6802e9500ec82ed6fba72cdda980260756c0262cba1807c9e
+  metadata.gz: 675cb607fc415c57ee0a7ed48d60caea0fc951a6ce1ac8a092e3f10bc40b229e
+  data.tar.gz: 2e9f5410fca189ba407efebafc6b716289cf2890f914fefe456cb0cea5332fd8
 SHA512:
-  metadata.gz: ceb892d4f4628ee94357b23762ebf5eccfa7deefe0684aa83c5cc6b9122ec1f7b71623e20a84bf9966b24a0693ce93d87f652e37c7a1deac23ec630737474dfd
-  data.tar.gz: 46f5eec9db954d8e57615a3a0185f9475a4e43052e6be055420892378a9da21e48ddcfaf948e928fd875f57011eaf5cd1114c36e2d1144b1cee44d02695842ce
+  metadata.gz: c6610f64e0958da4ec59124c697c5ec611caabb3d6c08e296518d683c7212135e483d217c66a53b06ed38e6a9b03db3546f0efa7e18c71ca27d8dd35ea1249eb
+  data.tar.gz: ecbcc22eca4559cf40169501810798b02dcb5e2302ff97da1266db9a390fa4d7247b79e74fcad49e972a496a19fb0b7ccfb6aac4403db01ccd414f1055f56cb8

data/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Legion::Transport ChangeLog
 
+## [1.2.8] - 2026-03-21
+
+### Added
+- `TenantTopology` module: exchange/queue name prefixing with tenant context (`t.<tenant_id>.<name>`); disabled by default; shared exchanges (`legion.control`, `legion.health`, `legion.audit`) are never prefixed; delegates to `Legion::TenantContext.current_tenant_id` when no explicit tenant_id given
+- `TenantProvisioner` module: provisions and deprovisions RabbitMQ topology (topic exchanges for tasks/results/events + fanout DLX) for a given tenant; accepts optional channel kwarg for reuse
+- `TenantQuota` module: application-level sliding-window rate limiting per tenant; enforces `messages_per_second` and `bytes_per_second` limits from settings; raises `TenantQuota::QuotaExceededError` on violation
+- `Settings.tenant_topology` defaults block: `enabled: false`, `prefix_format`, `shared_exchanges`, `auto_provision: true`, `quotas: {}`
+- 61 new specs covering all three modules (227 total, 0 failures)
+
 ## [1.2.7] - 2026-03-20
 
 ### Added

data/lib/legion/transport/settings.rb

@@ -99,17 +99,28 @@ module Legion
         }
       end
 
+      def self.tenant_topology
+        {
+          enabled:          false,
+          prefix_format:    't.%<tenant_id>s.',
+          shared_exchanges: %w[legion.control legion.health legion.audit],
+          auto_provision:   true,
+          quotas:           {}
+        }
+      end
+
       def self.default
         {
-          type:         'rabbitmq',
-          connected:    false,
-          logger_level: ENV['transport.logger_level'] || 'info',
-          messages:     messages,
-          prefetch:     ENV['transport.prefetch'].to_i,
-          exchanges:    exchanges,
-          queues:       queues,
-          connection:   connection,
-          channel:      channel
+          type:            'rabbitmq',
+          connected:       false,
+          logger_level:    ENV['transport.logger_level'] || 'info',
+          messages:        messages,
+          prefetch:        ENV['transport.prefetch'].to_i,
+          exchanges:       exchanges,
+          queues:          queues,
+          connection:      connection,
+          channel:         channel,
+          tenant_topology: tenant_topology
         }
       end
     end

data/lib/legion/transport/tenant_provisioner.rb

@@ -0,0 +1,35 @@
+# frozen_string_literal: true
+
+require_relative 'tenant_topology'
+
+module Legion
+  module Transport
+    module TenantProvisioner
+      EXCHANGE_TYPES = %w[tasks results events].freeze
+
+      def self.provision(tenant_id, channel: nil)
+        ch = channel || Legion::Transport.connection.create_channel
+        EXCHANGE_TYPES.each do |type|
+          name = TenantTopology.exchange_name(type, tenant_id: tenant_id)
+          ch.topic(name, durable: true)
+        end
+        dlx = TenantTopology.exchange_name('dlx', tenant_id: tenant_id)
+        ch.fanout(dlx, durable: true)
+        ch.close unless channel
+      end
+
+      def self.deprovision(tenant_id, channel: nil)
+        ch = channel || Legion::Transport.connection.create_channel
+        (EXCHANGE_TYPES + ['dlx']).each do |type|
+          name = TenantTopology.exchange_name(type, tenant_id: tenant_id)
+          begin
+            ch.exchange_delete(name)
+          rescue StandardError
+            nil
+          end
+        end
+        ch.close unless channel
+      end
+    end
+  end
+end

data/lib/legion/transport/tenant_quota.rb

@@ -0,0 +1,78 @@
+# frozen_string_literal: true
+
+require_relative 'tenant_topology'
+
+module Legion
+  module Transport
+    module TenantQuota
+      class QuotaExceededError < StandardError
+      end
+
+      WINDOW_SECONDS = 1
+
+      @counters = {}
+      @mutex = Mutex.new
+
+      class << self
+        def check_publish(tenant_id, message_size: 0)
+          return true unless enabled?
+
+          msg_limit  = rate_limit(tenant_id)
+          size_limit = byte_limit(tenant_id)
+          return true if msg_limit.nil? && size_limit.nil?
+
+          now = current_window
+          @mutex.synchronize do
+            @counters[tenant_id] ||= { window: now, count: 0, bytes: 0 }
+            entry = @counters[tenant_id]
+            if entry[:window] != now
+              entry[:window] = now
+              entry[:count] = 0
+              entry[:bytes] = 0
+            end
+
+            raise QuotaExceededError, "Tenant #{tenant_id} exceeded message rate quota (#{msg_limit} msg/s)" if msg_limit && entry[:count] >= msg_limit
+
+            if size_limit && (entry[:bytes] + message_size) > size_limit
+              raise QuotaExceededError, "Tenant #{tenant_id} exceeded byte rate quota (#{size_limit} bytes/s)"
+            end
+
+            entry[:count] += 1
+            entry[:bytes] += message_size
+          end
+          true
+        end
+
+        def enabled?
+          TenantTopology.enabled?
+        end
+
+        def reset!
+          @mutex.synchronize { @counters.clear }
+        end
+
+        private
+
+        def current_window
+          (::Time.now.to_f / WINDOW_SECONDS).floor
+        end
+
+        def rate_limit(tenant_id)
+          quota_settings(tenant_id)&.dig(:messages_per_second)
+        end
+
+        def byte_limit(tenant_id)
+          quota_settings(tenant_id)&.dig(:bytes_per_second)
+        end
+
+        def quota_settings(tenant_id)
+          return nil unless defined?(Legion::Settings)
+
+          Legion::Settings.dig(:transport, :tenant_topology, :quotas, tenant_id.to_sym)
+        rescue StandardError
+          nil
+        end
+      end
+    end
+  end
+end

data/lib/legion/transport/tenant_topology.rb

@@ -0,0 +1,52 @@
+# frozen_string_literal: true
+
+module Legion
+  module Transport
+    module TenantTopology
+      SHARED_EXCHANGES = %w[legion.control legion.health legion.audit].freeze
+
+      def self.exchange_name(base_name, tenant_id: nil)
+        return base_name unless enabled?
+
+        tid = tenant_id || current_tenant_id
+        return base_name if tid.nil? || tid == 'default' || shared?(base_name)
+
+        "t.#{tid}.#{base_name}"
+      end
+
+      def self.queue_name(base_name, tenant_id: nil)
+        return base_name unless enabled?
+
+        tid = tenant_id || current_tenant_id
+        return base_name if tid.nil? || tid == 'default'
+
+        "t.#{tid}.#{base_name}"
+      end
+
+      def self.shared?(name)
+        SHARED_EXCHANGES.any? { |prefix| name.start_with?(prefix) }
+      end
+
+      def self.enabled?
+        settings = transport_settings
+        settings.is_a?(Hash) && settings.dig(:tenant_topology, :enabled) == true
+      end
+
+      def self.current_tenant_id
+        return nil unless defined?(Legion::TenantContext)
+
+        Legion::TenantContext.current_tenant_id
+      rescue StandardError
+        nil
+      end
+
+      private_class_method def self.transport_settings
+        return {} unless defined?(Legion::Settings)
+
+        Legion::Settings[:transport] || {}
+      rescue StandardError
+        {}
+      end
+    end
+  end
+end

data/lib/legion/transport/version.rb

@@ -2,6 +2,6 @@
 
 module Legion
   module Transport
-    VERSION = '1.2.7'
+    VERSION = '1.2.8'
   end
 end

data/lib/legion/transport.rb

@@ -44,4 +44,7 @@ module Legion
   require_relative 'transport/exchange'
   require_relative 'transport/message'
   require_relative 'transport/spool'
+  require_relative 'transport/tenant_topology'
+  require_relative 'transport/tenant_provisioner'
+  require_relative 'transport/tenant_quota'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: legion-transport
 version: !ruby/object:Gem::Version
-  version: 1.2.7
+  version: 1.2.8
 platform: ruby
 authors:
 - Esity
@@ -130,6 +130,9 @@ files:
 - lib/legion/transport/queues/task_update.rb
 - lib/legion/transport/settings.rb
 - lib/legion/transport/spool.rb
+- lib/legion/transport/tenant_provisioner.rb
+- lib/legion/transport/tenant_quota.rb
+- lib/legion/transport/tenant_topology.rb
 - lib/legion/transport/version.rb
 - sonar-project.properties
 homepage: https://github.com/LegionIO/legion-transport