lex-node 0.2.3 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d0260fcda3e0a5469d3bfc8d7065d4870addf415732a693da58d979746dcf97b
-  data.tar.gz: 67a9e3e080786935fea85006e9623cae1aff3a0995d9e507ba37eb723ffff48b
+  metadata.gz: 28273777625572488b115147d2eb643bb19129c16b0ed5ec5dd80a22f627fa9e
+  data.tar.gz: 8a99ebfdda96540357239dc6b3b94fe54a92b4f4ff76cdf775d55d2c7d7e0357
 SHA512:
-  metadata.gz: 27d58631dc278eceb7988cc6125382e55babcac167e2df4a68b386d0b2ac47c8ece02b76f8333732e9d342659d2fc0cc159241fae86a7194a5490ec90be6d504
-  data.tar.gz: 886335964005f1f868d644c0b084a1a2e82991a9714e00a25154551864c6cf6b55d4d2aaf2d66edd4c9b9313cc1650b07589345c20dbdcb71e95ee815b247384
+  metadata.gz: 8eb13c6de81ed6faa745794a5dcd1b2ea469609dd6abc08a8a5c6a4180b2777df63d20afe5651bea69919520296df02a5bcf13b9fbe990c9a101969442089440
+  data.tar.gz: 23a8582edf5ad2890a493d0cbc7a399adc09715edb2ca47914f4c491c8b9a4842f648475a65f2358c6bbeabb4479b336da8de930d447a4e2611544f3b0c2c71d

data/.gitignore

@@ -7,5 +7,7 @@
 /spec/reports/
 /tmp/
 
+Gemfile.lock
+
 # rspec failure tracking
 .rspec_status

data/CHANGELOG.md

@@ -1,5 +1,29 @@
 # Changelog
 
+## [0.3.0] - 2026-03-18
+
+### Fixed
+- `update_public_key` changed from class method to instance method (was unreachable by AMQP dispatch)
+- `request_cluster_secret` now uses correct message namespace
+- Beat message uses `[:name]` instead of `[:hostname]` for node identity
+- Boot time tracked as class constant (uptime_seconds was always ~0)
+- Added `require 'base64'` for Ruby 3.4+ compatibility
+- Public key encoding standardized to Base64 across all messages
+- Transport settings access uses safe navigation (nil crash prevention)
+- Beat actor uses symbol key for `beat_interval` setting
+- VaultTokenRequest actor now has `use_runner? true` (was dead wiring)
+- Request vault token message Base64-encodes public key
+
+### Changed
+- Consolidated Runners::Crypt into Runners::Node (deleted runners/crypt.rb)
+- Deleted data_test/ directory (broken MySQL-only migrations, zero consumers)
+- Vault runners support multi-cluster token storage (backward-compatible)
+
+### Removed
+- Duplicate push_public_key/receive_cluster_secret in Runners::Node (used Crypt versions)
+- Unused `require 'socket'` in transport queue
+- `|| nil` redundancies in push_cluster_secret message
+
 ## [0.2.3] - 2026-03-16
 
 ### Added

data/CLAUDE.md

@@ -10,7 +10,7 @@ Core Legion Extension responsible for node identity within a LegionIO cluster. H
 
 **GitHub**: https://github.com/LegionIO/lex-node
 **License**: MIT
-**Version**: 0.2.3
+**Version**: 0.3.0
 
 ## Architecture
 

data/README.md

@@ -2,7 +2,7 @@
 
 Node identity and cluster management for [LegionIO](https://github.com/LegionIO/LegionIO). Handles heartbeat broadcasting, dynamic configuration distribution, cluster secret exchange, Vault token management, and RSA public key distribution between nodes.
 
-**Version**: 0.2.2
+**Version**: 0.3.0
 
 This is a core LEX installed by default with LegionIO.
 

data/lex-node.gemspec

@@ -25,4 +25,6 @@ Gem::Specification.new do |spec|
     `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
   end
   spec.require_paths = ['lib']
+
+  spec.add_dependency 'base64'
 end

data/lib/legion/extensions/node/actors/beat.rb

@@ -26,7 +26,7 @@ module Legion
           end
 
           def time
-            settings['beat_interval']
+            settings[:beat_interval]
           end
         end
       end

data/lib/legion/extensions/node/actors/vault_token_request.rb

@@ -14,7 +14,7 @@ module Legion
           end
 
           def use_runner?
-            false
+            true
           end
 
           def check_subtask?

data/lib/legion/extensions/node/runners/beat.rb

@@ -8,9 +8,9 @@ module Legion
           include Legion::Extensions::Helpers::Transport
 
           def beat(status: 'active', **opts)
-            log.debug 'sending hearbeat'
+            log.debug 'sending heartbeat'
             messages::Beat.new(status: status).publish
-            { success: true, status: status, version: Legion::VERSION || nil, **opts }
+            { success: true, status: status, version: defined?(Legion::VERSION) ? Legion::VERSION : nil, **opts }
           end
 
           include Legion::Extensions::Helpers::Lex

data/lib/legion/extensions/node/runners/node.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require 'base64'
+
 module Legion
   module Extensions
     module Node
@@ -60,9 +62,9 @@ module Legion
           def push_public_key(**_opts)
             log.debug 'push_public_key'
             message_hash = { function:   'update_public_key',
-                             public_key: Legion::Crypt.public_key.to_s,
+                             public_key: Base64.encode64(Legion::Crypt.public_key),
                              **Legion::Settings[:client] }
-            Legion::Extensions::Node::Transport::Messages::PublicKey.new(**message_hash).publish
+            Legion::Extensions::Node::Transport::Messages::PublicKey.new(message_hash).publish
             {}
           end
 
@@ -72,6 +74,25 @@ module Legion
             {}
           end
 
+          def delete_public_key(name:, **_opts)
+            log.debug 'delete_public_key'
+            Legion::Settings[:cluster][:public_keys].delete(name)
+            {}
+          end
+
+          def request_public_keys(**_opts)
+            log.debug 'request_public_keys'
+            message_hash = { function: 'push_public_key' }
+            Legion::Extensions::Node::Transport::Messages::RequestPublicKeys.new(**message_hash).publish
+            {}
+          end
+
+          def request_cluster_secret(**_opts)
+            log.debug 'request_cluster_secret'
+            Legion::Extensions::Node::Transport::Messages::RequestClusterSecret.new.publish
+            {}
+          end
+
           def push_cluster_secret(public_key:, queue_name:, **_opts)
             log.debug 'push_cluster_secret'
             return {} unless Legion::Settings[:crypt][:cs_encrypt_ready]
@@ -86,9 +107,11 @@ module Legion
             {}
           end
 
-          def receive_cluster_secret(message:, **_opts)
+          def receive_cluster_secret(message:, **opts)
             log.debug 'receive_cluster_secret'
             Legion::Settings[:crypt][:cluster_secret] = Legion::Crypt.decrypt_from_keypair(message: message)
+            Legion::Settings[:crypt][:encrypted_string] = opts[:encrypted_string]
+            Legion::Settings[:crypt][:validation_string] = opts[:validation_string]
             {}
           end
 

data/lib/legion/extensions/node/runners/vault.rb

@@ -17,10 +17,18 @@ module Legion
             {}
           end
 
-          def receive_vault_token(message:, **opts)
-            return if Legion::Settings[:crypt][:vault][:connected]
+          def receive_vault_token(message: nil, token: nil, cluster_name: nil, **opts)
+            return { success: false, already_connected: true } if Legion::Settings[:crypt][:vault][:connected]
+
+            token ||= Legion::Crypt.decrypt_from_keypair(message: message)
+            clusters = Legion::Settings[:crypt][:vault][:clusters]
+            if cluster_name && clusters.is_a?(Hash) && clusters[cluster_name.to_sym]
+              clusters[cluster_name.to_sym][:token] = token
+              clusters[cluster_name.to_sym][:connected] = true
+              return { success: true }
+            end
 
-            Legion::Settings[:crypt][:vault][:token] = Legion::Crypt.decrypt_from_keypair(message: message)
+            Legion::Settings[:crypt][:vault][:token] = token
             %i[protocol address port].each do |setting|
               next unless opts.key? setting
               next unless Legion::Settings[:crypt][:vault][setting].nil?

data/lib/legion/extensions/node/transport/messages/beat.rb

@@ -6,6 +6,7 @@ module Legion
       module Transport
         module Messages
           class Beat < Legion::Transport::Message
+            BOOT_TIME = ::Process.clock_gettime(::Process::CLOCK_MONOTONIC)
             def routing_key
               'status'
             end
@@ -24,7 +25,7 @@ module Legion
 
             def message
               hash = {
-                name:      Legion::Settings[:client][:hostname],
+                name:      Legion::Settings[:client][:name],
                 pid:       ::Process.pid,
                 timestamp: Time.now,
                 status:    @options[:status].nil? ? 'healthy' : @options[:status]
@@ -72,11 +73,7 @@ module Legion
             end
 
             def uptime_seconds
-              (::Process.clock_gettime(::Process::CLOCK_MONOTONIC) - boot_time).round(0)
-            end
-
-            def boot_time
-              @boot_time ||= ::Process.clock_gettime(::Process::CLOCK_MONOTONIC)
+              (::Process.clock_gettime(::Process::CLOCK_MONOTONIC) - BOOT_TIME).round(0)
             end
 
             def collect_worker_ids

data/lib/legion/extensions/node/transport/messages/push_cluster_secret.rb

@@ -18,8 +18,8 @@ module Legion
               { function:          'receive_cluster_secret',
                 runner_class:      'Legion::Extensions::Node::Runners::Crypt',
                 message:           @options[:message],
-                validation_string: @options[:validation_string] || nil,
-                encrypted_string:  @options[:encrypted_string] || nil,
+                validation_string: @options[:validation_string],
+                encrypted_string:  @options[:encrypted_string],
                 public_key:        Base64.encode64(Legion::Crypt.public_key) }
             end
 

data/lib/legion/extensions/node/transport/messages/request_vault_token.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require 'base64'
+
 module Legion
   module Extensions
     module Node
@@ -15,7 +17,7 @@ module Legion
                 function:     'push_vault_token',
                 node_name:    Legion::Settings[:client][:name],
                 runner_class: 'Legion::Extensions::Node::Runners::Vault',
-                public_key:   Legion::Crypt.public_key
+                public_key:   Base64.encode64(Legion::Crypt.public_key.to_s)
               }
             end
 

data/lib/legion/extensions/node/transport/queues/node.rb

@@ -1,7 +1,5 @@
 # frozen_string_literal: true
 
-require 'socket'
-
 module Legion
   module Extensions
     module Node

data/lib/legion/extensions/node/transport.rb

@@ -10,8 +10,8 @@ module Legion
 
         def self.additional_e_to_q
           array = [{ from: 'node', to: 'node', routing_key: "node.#{Legion::Settings[:client][:name]}" }]
-          array.push(from: 'node', to: 'node', routing_key: 'node.data.#') if Legion::Settings[:data][:connected]
-          array.push(from: 'node', to: 'node', routing_key: 'node.cache.#') if Legion::Settings[:cache][:connected]
+          array.push(from: 'node', to: 'node', routing_key: 'node.data.#') if Legion::Settings[:data]&.[](:connected) || false
+          array.push(from: 'node', to: 'node', routing_key: 'node.cache.#') if Legion::Settings[:cache]&.[](:connected) || false
           array.push(from: 'node', to: 'node', routing_key: 'node.crypt.#')
           array
         end

data/lib/legion/extensions/node/version.rb

@@ -3,7 +3,7 @@
 module Legion
   module Extensions
     module Node
-      VERSION = '0.2.3'
+      VERSION = '0.3.0'
     end
   end
 end

metadata

@@ -1,14 +1,28 @@
 --- !ruby/object:Gem::Specification
 name: lex-node
 version: !ruby/object:Gem::Version
-  version: 0.2.3
+  version: 0.3.0
 platform: ruby
 authors:
 - Esity
 bindir: bin
 cert_chain: []
 date: 1980-01-02 00:00:00.000000000 Z
-dependencies: []
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: base64
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 description: This lex is responsible for sending heartbeats, allowing for dynamic
   config, cluster secret, etc
 email:
@@ -25,7 +39,6 @@ files:
 - CLAUDE.md
 - Dockerfile
 - Gemfile
-- Gemfile.lock
 - LICENSE
 - README.md
 - docker_deploy.rb
@@ -41,7 +54,6 @@ files:
 - lib/legion/extensions/node/data_test/migrations/003_legion_version_colume.rb
 - lib/legion/extensions/node/data_test/migrations/004_node_extensions.rb
 - lib/legion/extensions/node/runners/beat.rb
-- lib/legion/extensions/node/runners/crypt.rb
 - lib/legion/extensions/node/runners/node.rb
 - lib/legion/extensions/node/runners/vault.rb
 - lib/legion/extensions/node/transport.rb

data/Gemfile.lock

@@ -1,87 +0,0 @@
-PATH
-  remote: .
-  specs:
-    lex-node (0.2.3)
-
-GEM
-  remote: https://rubygems.org/
-  specs:
-    addressable (2.8.9)
-      public_suffix (>= 2.0.2, < 8.0)
-    ast (2.4.3)
-    bigdecimal (4.0.1)
-    diff-lcs (1.6.2)
-    docile (1.4.1)
-    json (2.19.1)
-    json-schema (6.2.0)
-      addressable (~> 2.8)
-      bigdecimal (>= 3.1, < 5)
-    language_server-protocol (3.17.0.5)
-    lint_roller (1.1.0)
-    mcp (0.8.0)
-      json-schema (>= 4.1)
-    parallel (1.27.0)
-    parser (3.3.10.2)
-      ast (~> 2.4.1)
-      racc
-    prism (1.9.0)
-    public_suffix (7.0.5)
-    racc (1.8.1)
-    rainbow (3.1.1)
-    rake (13.3.1)
-    regexp_parser (2.11.3)
-    rspec (3.13.2)
-      rspec-core (~> 3.13.0)
-      rspec-expectations (~> 3.13.0)
-      rspec-mocks (~> 3.13.0)
-    rspec-core (3.13.6)
-      rspec-support (~> 3.13.0)
-    rspec-expectations (3.13.5)
-      diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.13.0)
-    rspec-mocks (3.13.8)
-      diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.13.0)
-    rspec-support (3.13.7)
-    rspec_junit_formatter (0.6.0)
-      rspec-core (>= 2, < 4, != 2.12.0)
-    rubocop (1.85.1)
-      json (~> 2.3)
-      language_server-protocol (~> 3.17.0.2)
-      lint_roller (~> 1.1.0)
-      mcp (~> 0.6)
-      parallel (~> 1.10)
-      parser (>= 3.3.0.2)
-      rainbow (>= 2.2.2, < 4.0)
-      regexp_parser (>= 2.9.3, < 3.0)
-      rubocop-ast (>= 1.49.0, < 2.0)
-      ruby-progressbar (~> 1.7)
-      unicode-display_width (>= 2.4.0, < 4.0)
-    rubocop-ast (1.49.1)
-      parser (>= 3.3.7.2)
-      prism (~> 1.7)
-    ruby-progressbar (1.13.0)
-    simplecov (0.22.0)
-      docile (~> 1.1)
-      simplecov-html (~> 0.11)
-      simplecov_json_formatter (~> 0.1)
-    simplecov-html (0.13.2)
-    simplecov_json_formatter (0.1.4)
-    unicode-display_width (3.2.0)
-      unicode-emoji (~> 4.1)
-    unicode-emoji (4.2.0)
-
-PLATFORMS
-  arm64-darwin-25
-  ruby
-
-DEPENDENCIES
-  lex-node!
-  rake
-  rspec
-  rspec_junit_formatter
-  rubocop
-  simplecov
-
-BUNDLED WITH
-   2.6.9

data/lib/legion/extensions/node/runners/crypt.rb

@@ -1,69 +0,0 @@
-# frozen_string_literal: true
-
-module Legion
-  module Extensions
-    module Node
-      module Runners
-        module Crypt
-          def push_public_key(**_opts)
-            log.debug 'push_public_key'
-            message_hash = { function:   'update_public_key',
-                             public_key: Base64.encode64(Legion::Crypt.public_key),
-                             **Legion::Settings[:client] }
-            Legion::Extensions::Node::Transport::Messages::PublicKey.new(message_hash).publish
-            {}
-          end
-
-          def self.update_public_key(name:, public_key:, **_opts)
-            log.debug 'update_public_key'
-            Legion::Settings[:cluster][:public_keys][name] = public_key
-            {}
-          end
-
-          def delete_public_key(name:, **_opts)
-            log.debug 'delete_public_key'
-            Legion::Settings[:cluster][:public_keys].delete(name)
-            {}
-          end
-
-          def request_public_keys(**_opts)
-            log.debug 'request_public_keys'
-            message_hash = { function: 'push_public_key' }
-            Legion::Extensions::Node::Transport::Messages::RequestPublicKeys.new(**message_hash).publish
-            {}
-          end
-
-          def request_cluster_secret(**_opts)
-            log.debug 'request_cluster_secret'
-            Legion::Transport::Messages::RequestClusterSecret.new.publish
-            {}
-          end
-
-          def push_cluster_secret(public_key:, queue_name:, **_opts)
-            log.debug 'push_cluster_secret'
-            return {} unless Legion::Settings[:crypt][:cs_encrypt_ready]
-
-            encrypted = Legion::Crypt.encrypt_from_keypair(pub_key: public_key,
-                                                           message: Legion::Settings[:crypt][:cluster_secret].to_s)
-            legion = Legion::Crypt.encrypt('legion')
-            Legion::Extensions::Node::Transport::Messages::PushClusterSecret.new(message:           encrypted,
-                                                                                 queue_name:        queue_name,
-                                                                                 validation_string: 'legion',
-                                                                                 encrypted_string:  legion).publish
-            {}
-          end
-
-          def receive_cluster_secret(message:, **opts)
-            log.debug 'receive_cluster_secret'
-            Legion::Settings[:crypt][:cluster_secret] = Legion::Crypt.decrypt_from_keypair(message)
-            Legion::Settings[:crypt][:encrypted_string] = opts[:encrypted_string]
-            Legion::Settings[:crypt][:validation_string] = opts[:validation_string]
-            {}
-          end
-
-          include Legion::Extensions::Helpers::Lex
-        end
-      end
-    end
-  end
-end