legionio 1.6.13 → 1.6.14

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8682edaf8eaf214c03e6dca287e4298260dde6482506bacee7c6ef247ad1fc8f
-  data.tar.gz: 3f045eec756ee09f7d15ea25c7d40709fd95dd71d6e277845e400c4c6be19f98
+  metadata.gz: dc17927ba8bbaf31e26083ef2c3d550ccbd87abafa545714e094e1f899d7f543
+  data.tar.gz: e5bb743c58d92b8342874f360bd7e4d4099afb02f952c11cf082da71018dcba9
 SHA512:
-  metadata.gz: b41ad3b698ae6318ae2a6e7f1c3e0f1d34a46df6dcc183bcf644f5850d458c0d5c1ca080ddee2f81d69dce7a8d5ecdcbb7ae509295a7fd56f852e8f5af8aa189
-  data.tar.gz: 860b776fc04f33f031f07c1969058f4278b8c6a124c09920a54c40b808bdbf708454b8062be32d3960741e8cef5afd1c2c38bb546ad382dd98e528c806a46bf4
+  metadata.gz: 4974c363f4072d5320529dcd0f4682b0d929c8d52fad085cfa6ec703f93306db15fc4a6a79e18fb48e933a62d96ba5039aa30b820e6a18a2d79a90bf3e2ca284
+  data.tar.gz: d3f45ca33a851c1de50d5a4bc2ec6fbce83afec0d5e64733c93a46372d423a6f0a892ef4233aa735e0c502ad93a748c958d31fc843382b388abfa8e10364e2f1

data/CHANGELOG.md

@@ -2,6 +2,21 @@
 
 ## [Unreleased]
 
+## [1.6.14] - 2026-03-27
+
+### Added
+- `Legion::Compliance` module rewritten with DEFAULTS hash, `merge_settings` registration, and clean API
+- `Compliance.setup` registers max-classification defaults: PHI, PCI, PII, FedRAMP all enabled by default
+- `Compliance.enabled?`, `.phi_enabled?`, `.pci_enabled?`, `.pii_enabled?`, `.fedramp_enabled?` convenience methods
+- `Compliance.classification_level` returns `'confidential'` by default (highest level)
+- `Compliance.profile` returns a hash with all compliance flags for downstream consumers
+- `setup_compliance` wired into Service boot sequence after settings load
+- Compliance profile spec (8 examples)
+
+### Changed
+- `Compliance.phi_enabled?` now uses `Settings.dig(:compliance, :phi_enabled)` instead of chaining `[]` calls
+- Existing PhiTag and PhiAccessLog specs updated to use `merge_settings` instead of stubbing `Settings.[]`
+
 ## [1.6.13] - 2026-03-27
 
 ### Added

data/lib/legion/compliance.rb

@@ -6,13 +6,69 @@ require 'legion/compliance/phi_erasure'
 
 module Legion
   module Compliance
+    DEFAULTS = {
+      enabled:              true,
+      classification_level: 'confidential',
+      phi_enabled:          true,
+      pci_enabled:          true,
+      pii_enabled:          true,
+      fedramp_enabled:      true,
+      log_redaction:        true,
+      cache_phi_max_ttl:    3600
+    }.freeze
+
     class << self
+      def setup
+        return unless defined?(Legion::Settings)
+
+        Legion::Settings.merge_settings(:compliance, DEFAULTS)
+        Legion::Logging.info('[Compliance] max-classification profile active') if defined?(Legion::Logging)
+      end
+
+      def enabled?
+        setting(:enabled) == true
+      end
+
       def phi_enabled?
-        return false unless defined?(Legion::Settings)
+        setting(:phi_enabled) == true
+      end
+
+      def pci_enabled?
+        setting(:pci_enabled) == true
+      end
+
+      def pii_enabled?
+        setting(:pii_enabled) == true
+      end
+
+      def fedramp_enabled?
+        setting(:fedramp_enabled) == true
+      end
+
+      def classification_level
+        setting(:classification_level) || 'confidential'
+      end
+
+      def profile
+        {
+          classification_level: classification_level,
+          phi:                  phi_enabled?,
+          pci:                  pci_enabled?,
+          pii:                  pii_enabled?,
+          fedramp:              fedramp_enabled?,
+          log_redaction:        setting(:log_redaction) == true,
+          cache_phi_max_ttl:    setting(:cache_phi_max_ttl) || 3600
+        }
+      end
+
+      private
+
+      def setting(key)
+        return nil unless defined?(Legion::Settings)
 
-        Legion::Settings[:compliance][:phi_enabled] == true
+        Legion::Settings.dig(:compliance, key)
       rescue StandardError
-        false
+        nil
       end
     end
   end

data/lib/legion/service.rb

@@ -31,6 +31,7 @@ module Legion
       Legion::Logging.debug('Starting Legion::Service')
       setup_settings
       apply_cli_overrides(http_port: http_port)
+      setup_compliance
       setup_local_mode
       reconfigure_logging(log_level)
       Legion::Logging.info("node name: #{Legion::Settings[:client][:name]}")
@@ -225,6 +226,15 @@ module Legion
       self.class.log_privacy_mode_status
     end
 
+    def setup_compliance
+      require 'legion/compliance'
+      Legion::Compliance.setup
+    rescue LoadError => e
+      Legion::Logging.debug "Compliance module not available: #{e.message}"
+    rescue StandardError => e
+      Legion::Logging.warn "Compliance setup failed: #{e.message}"
+    end
+
     def apply_cli_overrides(http_port: nil)
       return unless http_port
 

data/lib/legion/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Legion
-  VERSION = '1.6.13'
+  VERSION = '1.6.14'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: legionio
 version: !ruby/object:Gem::Version
-  version: 1.6.13
+  version: 1.6.14
 platform: ruby
 authors:
 - Esity