lex-llm-ledger 0.1.9 → 0.1.10

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 65d2298886cd461ff9a4a5cfb89ee0b9d16f8cb3af3e5f38a8a6a8910094a14f
-  data.tar.gz: 74e394c3972fbc45153e898b8ead76c24cf185dcb677f48b032150894b0b4fe2
+  metadata.gz: a595a76ee91def4ec66dc3ec9b1daa0c40f872704a73659981b8eecebf5bd48e
+  data.tar.gz: 2f1c5ff38e83093df3c88e39a9a6c376f13f9af97fa000126a2d24c51324e3f3
 SHA512:
-  metadata.gz: 481103355373158a86cbc6b7b98ee59c6f78bdbee0ca9c1bb67a990675c7389d743fc2ce9b596965688825e1259a8257e06d5b47c2b0edf2623dafd063197c50
-  data.tar.gz: 5e94a8155fe3c6ce2a15bf3ac3a1e8c235d48d9d9d198e6fef07e89f43b4e10342387ab153d977efcc88743f87566f92a932555b29c5c790059b099baaa06141
+  metadata.gz: dd1e3ae7439152285ee97d681d72bf98131504ab81e0107bd1a4c3f254c6dc2b4738a8562725bfc8e16b2a3c5d2fe44eb94e8df418b422f9fb48d1f746a8d026
+  data.tar.gz: aebc36c406ece5b8c4c51e315eccd771dcca1d70589e776c2a64d5e24d7dd4c59ada66139760b5d8874fa6cbbb6ace87cb846cc8a22092daee77afab0272d6d9

data/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.1.10] - 2026-04-27
+
+### Fixed
+- Decode encrypted prompt and tool audit subscription payloads with either string or symbol `iv` headers before dispatch
+- Preserve cleartext prompt and tool audit subscription payload handling when audit encryption is disabled
+- Preserve AMQP headers and properties when prompt and tool subscription actors call their ledger runners
+
 ## [0.1.9] - 2026-04-09
 
 ### Fixed

data/lib/legion/extensions/llm/ledger/actors/prompt_writer.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require 'legion/extensions/actors/subscription'
+require_relative '../helpers/subscription_message'
 
 module Legion
   module Extensions
@@ -17,6 +18,10 @@ module Legion
             def use_runner?
               false
             end
+
+            def process_message(message, metadata, delivery_info)
+              Helpers::SubscriptionMessage.decode_payload(message, metadata, delivery_info)
+            end
           end
         end
       end

data/lib/legion/extensions/llm/ledger/actors/tool_writer.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require 'legion/extensions/actors/subscription'
+require_relative '../helpers/subscription_message'
 
 module Legion
   module Extensions
@@ -17,6 +18,10 @@ module Legion
             def use_runner?
               false
             end
+
+            def process_message(message, metadata, delivery_info)
+              Helpers::SubscriptionMessage.decode_payload(message, metadata, delivery_info)
+            end
           end
         end
       end

data/lib/legion/extensions/llm/ledger/helpers/subscription_message.rb

@@ -0,0 +1,114 @@
+# frozen_string_literal: true
+
+require_relative 'decryption'
+
+module Legion
+  module Extensions
+    module Llm
+      module Ledger
+        module Helpers
+          module SubscriptionMessage
+            module_function
+
+            def decode_payload(message, metadata, delivery_info)
+              headers = metadata_headers(metadata)
+              properties = metadata_properties(metadata)
+              payload = decrypt_payload(message, headers, properties)
+              body = parse_payload(payload, properties)
+
+              {
+                payload:  body,
+                metadata: {
+                  headers:    headers,
+                  properties: properties.merge(routing_key: routing_key(delivery_info))
+                }
+              }
+            end
+
+            def metadata_headers(metadata)
+              headers = metadata.respond_to?(:headers) ? metadata.headers : nil
+              headers ||= {}
+              headers.each_with_object({}) do |(key, value), normalized|
+                normalized[key] = value
+                normalized[key.to_s] = value unless key.is_a?(String)
+              end
+            end
+
+            def metadata_properties(metadata)
+              {
+                content_encoding: metadata_value(metadata, :content_encoding),
+                content_type:     metadata_value(metadata, :content_type),
+                message_id:       metadata_value(metadata, :message_id),
+                correlation_id:   metadata_value(metadata, :correlation_id),
+                app_id:           metadata_value(metadata, :app_id),
+                timestamp:        metadata_value(metadata, :timestamp)
+              }.compact
+            end
+
+            def decrypt_payload(message, headers, properties)
+              return message unless properties[:content_encoding] == 'encrypted/cs'
+
+              iv = headers['iv'] || headers[:iv]
+              raise DecryptionFailed, 'Encrypted audit record is missing iv header' if iv.nil?
+
+              Legion::Crypt.decrypt(message, iv)
+            end
+
+            def parse_payload(payload, properties)
+              return payload unless properties[:content_type] == 'application/json'
+
+              if json_load_keyword?(:symbolize_keys)
+                Legion::JSON.load(payload, symbolize_keys: true) # rubocop:disable Legion/HelperMigration/DirectJson
+              else
+                Legion::JSON.load(payload, symbolize_names: true) # rubocop:disable Legion/HelperMigration/DirectJson
+              end
+            end
+
+            def runner_args(payload, metadata, message)
+              message.key?(:payload) ? [message[:payload], message[:metadata] || {}] : [payload, metadata]
+            end
+
+            def routing_key(delivery_info)
+              return delivery_info[:routing_key] if delivery_info.respond_to?(:[])
+              return delivery_info.routing_key if delivery_info.respond_to?(:routing_key)
+
+              nil
+            end
+
+            def metadata_value(metadata, key)
+              return metadata.public_send(key) if metadata.respond_to?(key)
+              return metadata[key] if metadata.respond_to?(:[]) && metadata_key?(metadata, key)
+
+              nil
+            end
+
+            def metadata_key?(metadata, key)
+              return metadata.key?(key) if metadata.respond_to?(:key?)
+              return metadata.members.include?(key) if metadata.respond_to?(:members)
+
+              true
+            end
+
+            def symbolize(value)
+              case value
+              when Hash
+                value.to_h { |key, nested| [key.to_sym, symbolize(nested)] }
+              when Array
+                value.map { |nested| symbolize(nested) }
+              else
+                value
+              end
+            end
+
+            def json_load_keyword?(keyword)
+              Legion::JSON.method(:load).parameters.any? { |type, name| type == :key && name == keyword }
+            end
+
+            private_class_method :metadata_headers, :metadata_properties, :decrypt_payload, :parse_payload,
+                                 :routing_key, :metadata_value, :metadata_key?, :symbolize, :json_load_keyword?
+          end
+        end
+      end
+    end
+  end
+end

data/lib/legion/extensions/llm/ledger/runners/prompts.rb

@@ -8,7 +8,8 @@ module Legion
           module Prompts
             extend self
 
-            def write_prompt_record(payload, metadata = {})
+            def write_prompt_record(payload = nil, metadata = {}, **message)
+              payload, metadata = normalize_runner_args(payload, metadata, message)
               headers = metadata[:headers] || {}
               props   = metadata[:properties] || {}
 
@@ -34,6 +35,10 @@ module Legion
 
             private
 
+            def normalize_runner_args(payload, metadata, message)
+              Helpers::SubscriptionMessage.runner_args(payload, metadata, message)
+            end
+
             def build_prompt_record(body, ctx, props, headers, expires_at)
               routing = body[:routing] || {}
               tokens  = body[:tokens]  || {}

data/lib/legion/extensions/llm/ledger/runners/tools.rb

@@ -8,7 +8,8 @@ module Legion
           module Tools
             extend self
 
-            def write_tool_record(payload, metadata = {})
+            def write_tool_record(payload = nil, metadata = {}, **message)
+              payload, metadata = normalize_runner_args(payload, metadata, message)
               headers = metadata[:headers] || {}
               props   = metadata[:properties] || {}
 
@@ -35,6 +36,10 @@ module Legion
 
             private
 
+            def normalize_runner_args(payload, metadata, message)
+              Helpers::SubscriptionMessage.runner_args(payload, metadata, message)
+            end
+
             def build_tool_record(body, ctx, tool, props, headers, expires_at)
               src    = tool[:source] || {}
               cls    = body[:classification] || {}

data/lib/legion/extensions/llm/ledger/version.rb

@@ -4,7 +4,7 @@ module Legion
   module Extensions
     module Llm
       module Ledger
-        VERSION = '0.1.9'
+        VERSION = '0.1.10'
       end
     end
   end

data/lib/legion/extensions/llm/ledger.rb

@@ -4,6 +4,7 @@ require_relative 'ledger/version'
 require_relative 'ledger/helpers/decryption'
 require_relative 'ledger/helpers/retention'
 require_relative 'ledger/helpers/queries'
+require_relative 'ledger/helpers/subscription_message'
 require_relative 'ledger/runners/metering'
 require_relative 'ledger/runners/prompts'
 require_relative 'ledger/runners/tools'

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: lex-llm-ledger
 version: !ruby/object:Gem::Version
-  version: 0.1.9
+  version: 0.1.10
 platform: ruby
 authors:
 - Esity
@@ -198,6 +198,7 @@ files:
 - lib/legion/extensions/llm/ledger/helpers/decryption.rb
 - lib/legion/extensions/llm/ledger/helpers/queries.rb
 - lib/legion/extensions/llm/ledger/helpers/retention.rb
+- lib/legion/extensions/llm/ledger/helpers/subscription_message.rb
 - lib/legion/extensions/llm/ledger/migrations/001_create_metering_records.rb
 - lib/legion/extensions/llm/ledger/migrations/002_create_prompt_records.rb
 - lib/legion/extensions/llm/ledger/migrations/003_create_tool_records.rb