bitranox-template-py-cli 2.0.1__tar.gz → 2.1.1__tar.gz

{bitranox_template_py_cli-2.0.1 → bitranox_template_py_cli-2.1.1}/.env.example

@@ -101,6 +101,20 @@ GITHUB_TOKEN=
 # .env: EMAIL__LOCAL_HOSTNAME=mail.example.com
 # EMAIL__LOCAL_HOSTNAME=mail.example.com
 
+# Purpose: Upper bound in seconds for one SMTP session (connect to QUIT); 0 for none
+# Type: float
+# Default: 0 (none)
+# Environment Variable: BITRANOX_TEMPLATE_PY_CLI___EMAIL__DELIVERY_DEADLINE=300
+# .env: EMAIL__DELIVERY_DEADLINE=300
+# EMAIL__DELIVERY_DEADLINE=300
+
+# Purpose: Most recipients one send accepts; 0 for no limit
+# Type: integer
+# Default: 1000
+# Environment Variable: BITRANOX_TEMPLATE_PY_CLI___EMAIL__RECIPIENT_MAX_COUNT=1000
+# .env: EMAIL__RECIPIENT_MAX_COUNT=1000
+# EMAIL__RECIPIENT_MAX_COUNT=1000
+
 # Purpose: Raise FileNotFoundError when attachment files are missing
 # Type: boolean (true/false)
 # Default: true

{bitranox_template_py_cli-2.0.1 → bitranox_template_py_cli-2.1.1}/CHANGELOG.md

@@ -6,6 +6,48 @@ the [Keep a Changelog](https://keepachangelog.com/) format.
 
 ## [Unreleased]
 
+## [2.1.1] 2026-10-06 18:13:05
+
+### Fixed
+- **A refused `LOG_*` variable no longer disables every command (exit code change).** A value
+  lib_log_rich refuses in a `LOG_*` variable, set in the environment or in the `.env` logging
+  reads (`LOG_CONSOLE_LEVEL=bogus` in the `--env-file`), made every command, `info` and
+  `config-deploy` included, exit 1 with `InvalidLoggingConfigError: lib_log_rich: Unknown log
+  level: 'bogus'`: the fallback restarted logging with an empty configuration, but lib_log_rich
+  reads the `LOG_*` variables on every start and refused the same variable again. Logging now
+  falls back to its defaults with every `LOG_*` variable hidden for that start (and put back
+  afterwards), so only the commands that read the configuration (`config`, `send-email`,
+  `send-notification`) exit 78, and the others run with exit 0. The 78 carries lib_log_rich's
+  own message, `Error: lib_log_rich: Unknown log level: 'bogus'`, which may name neither the
+  variable nor where it was set. A refused `[lib_log_rich]` value still leaves every valid
+  `LOG_*` variable in force for the fallback, as in 2.1.0: only a refused variable hides them.
+- **The testing composition ignores the developer's `LOG_*` variables.** `build_testing()`'s
+  logging runtime (`init_logging_in_memory`) now starts with every `LOG_*` variable hidden and
+  puts them back afterwards. A `LOG_CONSOLE_LEVEL=bogus` in the shell running the tests made
+  every command under `build_testing()` fail with `ValueError: Unknown log level: 'bogus'`, and a
+  valid one changed the quiet test runtime. Production logging is unaffected.
+
+## [2.1.0] 2026-10-06 15:37:27
+
+### Added
+- **Three email limits from btx_lib_mail 4.0.0 are configurable**: `[email] delivery_deadline`
+  (an upper bound in seconds for one SMTP session; the field is `smtp_delivery_deadline`),
+  `[email] recipient_max_count` (default 1000) and `[email.attachments] max_count` (default
+  100). A value of 0 means no limit, as `max_size_bytes = 0` already did. Shipped in
+  `50-mail.toml`, `.env.example` and the module reference.
+
+### Changed
+- **Requires `btx_lib_mail>=4.0.0`.** Effects a user of the email commands can see: the
+  Windows dangerous extensions (`.exe`, `.bat`, `.ps1`, ...) are refused on every platform by
+  default and the POSIX ones on Windows; a sender or recipient longer than RFC 5321 allows is
+  refused; a subject with a control character or over 4096 characters is refused; an
+  attachment swapped after its checks is refused; a delivery error is a `DeliveryError` (still
+  a `RuntimeError`). See the btx_lib_mail 4.0.0 changelog for the full list.
+
+### Removed
+- **`EmailConfig`'s own SMTP host validator.** `ConfMail` checks every host's syntax (port
+  range, IPv6 brackets) itself since btx_lib_mail 3.0.1; the messages are unchanged.
+
 ## [2.0.1] 2026-10-06 13:09:50
 
 Re-release of 2.0.0, which was tagged but never published: PyPI rejected the upload because

{bitranox_template_py_cli-2.0.1 → bitranox_template_py_cli-2.1.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: bitranox_template_py_cli
-Version: 2.0.1
+Version: 2.1.1
 Summary: Template CLI application with configuration management and structured logging
 Project-URL: Homepage, https://github.com/bitranox/bitranox_template_py_cli
 Project-URL: Repository, https://github.com/bitranox/bitranox_template_py_cli.git
@@ -21,7 +21,7 @@ Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
 Classifier: Typing :: Typed
 Requires-Python: >=3.10
-Requires-Dist: btx-lib-mail>=3.0.1
+Requires-Dist: btx-lib-mail>=4.0.0
 Requires-Dist: click>=8.5.0
 Requires-Dist: lib-cli-exit-tools>=2.4.0
 Requires-Dist: lib-layered-config>=7.0.1
@@ -286,6 +286,7 @@ use_starttls = true
 starttls_verify = true   # false accepts any certificate: only for a known internal relay
 timeout = 60.0
 # local_hostname = "mail.example.com"   # EHLO name; set it where reverse DNS is slow
+# delivery_deadline = 300               # upper bound in seconds for one SMTP session; 0 = none
 ```
 
 A key `[email]` or `[email.attachments]` does not know is refused (exit 78,
@@ -378,8 +379,8 @@ from bitranox_template_py_cli.composition import send_email, send_notification
 
 # Configure email. EmailConfig is a btx_lib_mail ConfMail, so in Python the fields use the
 # library's names (smtphosts, smtp_use_starttls, smtp_timeout, smtp_starttls_verify,
-# smtp_local_hostname); configuration files keep their keys (smtp_hosts, use_starttls, timeout,
-# starttls_verify, local_hostname). smtp_password is a SecretStr: it prints as
+# smtp_local_hostname, smtp_delivery_deadline); configuration files keep their keys (smtp_hosts,
+# use_starttls, timeout, starttls_verify, local_hostname, delivery_deadline). smtp_password is a SecretStr: it prints as
 # '**********' in logs, reprs and dumps, and config.smtp_password.get_secret_value() returns
 # the plain text.
 config = EmailConfig(

{bitranox_template_py_cli-2.0.1 → bitranox_template_py_cli-2.1.1}/README.md

@@ -231,6 +231,7 @@ use_starttls = true
 starttls_verify = true   # false accepts any certificate: only for a known internal relay
 timeout = 60.0
 # local_hostname = "mail.example.com"   # EHLO name; set it where reverse DNS is slow
+# delivery_deadline = 300               # upper bound in seconds for one SMTP session; 0 = none
 ```
 
 A key `[email]` or `[email.attachments]` does not know is refused (exit 78,
@@ -323,8 +324,8 @@ from bitranox_template_py_cli.composition import send_email, send_notification
 
 # Configure email. EmailConfig is a btx_lib_mail ConfMail, so in Python the fields use the
 # library's names (smtphosts, smtp_use_starttls, smtp_timeout, smtp_starttls_verify,
-# smtp_local_hostname); configuration files keep their keys (smtp_hosts, use_starttls, timeout,
-# starttls_verify, local_hostname). smtp_password is a SecretStr: it prints as
+# smtp_local_hostname, smtp_delivery_deadline); configuration files keep their keys (smtp_hosts,
+# use_starttls, timeout, starttls_verify, local_hostname, delivery_deadline). smtp_password is a SecretStr: it prints as
 # '**********' in logs, reprs and dumps, and config.smtp_password.get_secret_value() returns
 # the plain text.
 config = EmailConfig(

{bitranox_template_py_cli-2.0.1 → bitranox_template_py_cli-2.1.1}/docs/systemdesign/module_reference.md

@@ -26,7 +26,7 @@ moves or removes a module, a CLI option or a public name.
 - `src/bitranox_template_py_cli/adapters/email/transport.py`  -  `send_email` / `send_notification` over btx_lib_mail
 - `src/bitranox_template_py_cli/adapters/email/sender.py`  -  Re-exports of `config.py` and `transport.py`
 - `src/bitranox_template_py_cli/adapters/email/validation.py`  -  Email recipient validation
-- `src/bitranox_template_py_cli/adapters/logging/setup.py`  -  lib_log_rich initialization
+- `src/bitranox_template_py_cli/adapters/logging/setup.py`  -  lib_log_rich initialization; takes only the `LOG_*` lines of a `.env`, and raises `InvalidLoggingConfigError` for a refused `[lib_log_rich]` value or `LOG_*` variable, after starting logging with its defaults (and without the `LOG_*` variables only when one of them is refused)
 - `src/bitranox_template_py_cli/adapters/cli/`  -  CLI adapter package:
   - `__init__.py`  -  Public facade
   - `constants.py`  -  Shared constants
@@ -92,6 +92,7 @@ moves or removes a module, a CLI option or a public name.
 - `tests/test_enums.py`  -  Domain enum tests
 - `tests/test_errors.py`  -  Domain error types
 - `tests/test_logging.py`  -  Logging configuration model
+- `tests/test_logging_dotenv_isolation.py`  -  Only `LOG_*` lines of a `.env` reach the environment; an invalid `[lib_log_rich]` section or `LOG_*` variable is a configuration failure that leaves logging running
 - `tests/test_mail.py`  -  Email configuration and sending tests (the `integration` ones send real mail)
 - `tests/test_memory_logging.py`  -  Testing-composition logging runtime and the per-test logging reset
 - `tests/test_metadata.py`  -  Package metadata and PEP 561 marker tests
@@ -322,9 +323,9 @@ Raises `ValueError` with descriptive message on invalid input.
 `EmailConfig` (`adapters/email/config.py`, re-exported by `adapters/email/sender.py`) subclasses
 btx_lib_mail's `ConfMail`: frozen, a name that is not a field is refused, the password is a
 `SecretStr`, and a validation error never shows the password or a host. It adds `from_address` and
-`recipients`, and checks every SMTP host's syntax (port range, IPv6 brackets) when it loads. In
-Python the fields use the library's names; the configuration file keeps its own keys (third
-column).
+`recipients`. ConfMail checks every SMTP host's syntax (port range, IPv6 brackets, host name
+labels) when it loads, so `EmailConfig` has no host check of its own. In Python the fields use
+the library's names; the configuration file keeps its own keys (fourth column).
 
 | Field                          | Type                | Default | File key (`[email]`)           | Description                                                      |
 |--------------------------------|---------------------|---------|--------------------------------|------------------------------------------------------------------|
@@ -337,6 +338,8 @@ column).
 | `smtp_starttls_verify`         | `bool`              | `True`  | `starttls_verify`              | Verify the server certificate after STARTTLS                     |
 | `smtp_timeout`                 | `float`             | `30.0`  | `timeout`                      | Socket timeout in seconds                                        |
 | `smtp_local_hostname`          | `str \| None`       | `None`  | `local_hostname`               | Host name announced in EHLO; `None` looks it up once per process |
+| `smtp_delivery_deadline`       | `float \| None`     | `None`  | `delivery_deadline`            | Upper bound in seconds for one SMTP session; `None` for none     |
+| `recipient_max_count`          | `int \| None`       | `1000`  | `recipient_max_count`          | Most recipients one send accepts; `None` lifts the limit         |
 | `raise_on_missing_attachments` | `bool`              | `True`  | `raise_on_missing_attachments` | Raise on missing attachment files                                |
 | `raise_on_invalid_recipient`   | `bool`              | `True`  | `raise_on_invalid_recipient`   | Raise on invalid recipient addresses                             |
 
@@ -345,10 +348,11 @@ column).
 | Field                                    | Type                      | Default      | File key (`[email.attachments]`) | Description                                             |
 |------------------------------------------|---------------------------|--------------|----------------------------------|---------------------------------------------------------|
 | `attachment_allowed_extensions`          | `frozenset[str] \| None`  | `None`       | `allowed_extensions`             | Whitelist of allowed extensions                         |
-| `attachment_blocked_extensions`          | `frozenset[str]`          | OS defaults  | `blocked_extensions`             | Blacklist of blocked extensions                         |
+| `attachment_blocked_extensions`          | `frozenset[str]`          | POSIX + Win  | `blocked_extensions`             | Blacklist of blocked extensions (both lists, every OS)  |
 | `attachment_allowed_directories`         | `frozenset[Path] \| None` | `None`       | `allowed_directories`            | Whitelist of allowed source directories                 |
 | `attachment_blocked_directories`         | `frozenset[Path]`         | OS defaults  | `blocked_directories`            | Blacklist of blocked directories                        |
 | `attachment_max_size_bytes`              | `int \| None`             | `26_214_400` | `max_size_bytes`                 | Maximum file size (25 MiB), `None` to disable           |
+| `attachment_max_count`                   | `int \| None`             | `100`        | `max_count`                      | Most attachments one send accepts, `None` to disable    |
 | `attachment_allow_symlinks`              | `bool`                    | `False`      | `allow_symlinks`                 | Whether symlinks are permitted                          |
 | `attachment_raise_on_security_violation` | `bool`                    | `True`       | `raise_on_security_violation`    | Raise or skip on security violation                     |
 | `attachment_allow_empty_blocklists`      | `bool`                    | `False`      | not exposed                      | Allow an empty blocked set (blocks nothing) from Python |
@@ -359,13 +363,13 @@ lib_layered_config is the only reader of configuration: it merges every layer (t
 defaults, the app, host and user files, `.env`, the environment, `--set`) into one mapping.
 `load_email_config_from_dict()` turns that mapping's `[email]` section into an `EmailConfig`:
 
-- the five keys in the third column that differ from the field names are mapped;
+- the six keys in the fourth column that differ from the field names are mapped;
 - `[email.attachments]` keys become `attachment_<key>`;
 - a key that is not listed is refused (exit 78, `email.<key>: unknown key`), whatever layer it came from;
 - blank text means "not configured"; a single host or address string is a one-entry list;
 - an empty attachment list (`[]` or a blank string) means the library's defaults, and any other
   value that is not a list, such as a comma-separated string, is refused, as is a blank entry;
-- `max_size_bytes = 0` means no size limit.
+- a limit of 0 (`max_size_bytes`, `max_count`, `recipient_max_count`, `delivery_deadline`) means no limit.
 
 `describe_validation_error()` renders a refusal as one `email.<file key>: <reason>` line per
 problem, never with the refused value.
@@ -376,7 +380,7 @@ problem, never with the refused value.
 |---------------------|------------------------------------------------------------------------------|
 | `SECTION_KEYS`      | Every key `[email]` accepts (the `attachments` table included)               |
 | `ATTACHMENT_KEYS`   | Every key `[email.attachments]` accepts; each names field `attachment_<key>` |
-| `FILE_KEY_TO_FIELD` | File key -> `EmailConfig` field, for the five keys whose names differ        |
+| `FILE_KEY_TO_FIELD` | File key -> `EmailConfig` field, for the six keys whose names differ         |
 
 ---
 

{bitranox_template_py_cli-2.0.1 → bitranox_template_py_cli-2.1.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "bitranox_template_py_cli"
-version = "2.0.1"
+version = "2.1.1"
 description = "Template CLI application with configuration management and structured logging"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -12,7 +12,7 @@ dependencies = [
     "lib_log_rich>=6.3.9",
     "python-dotenv>=1.2.4",
     "lib_layered_config>=7.0.1",
-    "btx_lib_mail>=3.0.1",
+    "btx_lib_mail>=4.0.0",
     "pydantic>=2.13.5",
     "orjson>=3.12.0",
 ]

{bitranox_template_py_cli-2.0.1 → bitranox_template_py_cli-2.1.1}/src/bitranox_template_py_cli/__init__conf__.py

@@ -40,7 +40,7 @@ name = "bitranox_template_py_cli"
 #: Human-readable summary shown in CLI help output.
 title = "Template CLI application with configuration management and structured logging"
 #: Current release version pulled from ``pyproject.toml`` by automation.
-version = "2.0.1"
+version = "2.1.1"
 #: Repository homepage presented to users.
 homepage = "https://github.com/bitranox/bitranox_template_py_cli"
 #: Author attribution surfaced in CLI output.

{bitranox_template_py_cli-2.0.1 → bitranox_template_py_cli-2.1.1}/src/bitranox_template_py_cli/adapters/cli/commands/email/_common.py

@@ -84,8 +84,8 @@ def smtp_config_options(func: Callable[..., Any]) -> Callable[..., Any]:
 
     Adds CLI flags for the SMTP connection and delivery settings (hosts, credentials,
     STARTTLS, timeout, the two raise_on_* switches). ``starttls_verify``,
-    ``local_hostname`` and the attachment settings have no flag; set them with
-    ``--set email.<key>=...``.
+    ``local_hostname``, ``delivery_deadline``, ``recipient_max_count`` and the attachment
+    settings have no flag; set them with ``--set email.<key>=...``.
     """
     options = [
         option(

{bitranox_template_py_cli-2.0.1 → bitranox_template_py_cli-2.1.1}/src/bitranox_template_py_cli/adapters/cli/config_load.py

@@ -14,7 +14,8 @@ configuration.
 
 Contents:
     * :func:`load_config` - load with profile, ``.env`` and ``--set``, or say why not.
-    * :func:`start_logging` - start logging; an invalid ``[lib_log_rich]`` is a load failure.
+    * :func:`start_logging` - start logging; an invalid ``[lib_log_rich]`` value or ``LOG_*``
+      variable is a load failure.
     * :func:`require_config` - the configuration, or exit 78 naming the failure.
     * :func:`report_load_failure` - the one-line report, after the traceback on request.
     * :func:`echo_load_traceback` - the loader's traceback alone, for a caller with its own line.
@@ -97,9 +98,13 @@ def start_logging(
 ) -> tuple[Config, Exception | None]:
     """Start logging with ``config``; a logging section it refuses is recorded like a load failure.
 
-    An invalid ``[lib_log_rich]`` value would otherwise stop every command, ``config-deploy``
-    (which replaces the file holding it) included. Logging then starts with its defaults, and
-    the commands that read the configuration refuse with exit 78 naming the key.
+    An invalid ``[lib_log_rich]`` value or ``LOG_*`` variable would otherwise stop every
+    command, ``config-deploy`` (which replaces the file holding it) included. ``init_logging``
+    then starts logging with its defaults (and no ``LOG_*`` variable, if one of them is the
+    refused setting) before it raises, and the commands that read the configuration refuse with
+    exit 78 and the refusal: ``lib_log_rich.<key>: <reason>`` for a problem the section's type
+    check finds, lib_log_rich's own message for a value only lib_log_rich refuses, whether it
+    came from the section or a ``LOG_*`` variable (``lib_log_rich: Unknown log level: 'bogus'``).
 
     Args:
         services: The composition's services; only ``init_logging`` is used.
@@ -114,7 +119,6 @@ def start_logging(
     try:
         services.init_logging(config, dotenv_path=env_file)
     except InvalidLoggingConfigError as exc:
-        services.init_logging(Config({}, {}), dotenv_path=env_file)
         return Config({}, {}), config_error or exc
     return config, config_error
 

{bitranox_template_py_cli-2.0.1 → bitranox_template_py_cli-2.1.1}/src/bitranox_template_py_cli/adapters/config/defaultconfig.d/50-mail.toml

@@ -110,6 +110,23 @@ starttls_verify = true
 #   qualified name here.
 local_hostname = ""
 
+# Purpose: Upper bound in seconds for one SMTP session, from the connect to QUIT
+# Type: float, or 0 for no deadline
+# Default: 0 (none; only the socket timeout bounds each read or write)
+# Environment Variable: BITRANOX_TEMPLATE_PY_CLI___EMAIL__DELIVERY_DEADLINE=300
+# .env: EMAIL__DELIVERY_DEADLINE=300
+# Note: The socket timeout restarts with every byte, so a server answering one byte at a
+#   time can hold a session open indefinitely; past the deadline that host counts as failed.
+delivery_deadline = 0
+
+# Purpose: Most recipients one send accepts (counted after duplicates are dropped)
+# Type: integer, or 0 for no limit
+# Default: 1000
+# Environment Variable: BITRANOX_TEMPLATE_PY_CLI___EMAIL__RECIPIENT_MAX_COUNT=1000
+# .env: EMAIL__RECIPIENT_MAX_COUNT=1000
+# Note: More recipients are refused before anything is delivered
+recipient_max_count = 1000
+
 # Purpose: Behavior when attachment files are missing
 # Type: boolean
 # Default: true (raise FileNotFoundError)
@@ -152,9 +169,9 @@ allowed_extensions = []
 
 # Purpose: Blacklist of blocked file extensions (ignored when allowed_extensions is set)
 # Type: array of strings
-# Default: [] (the library's defaults apply: btx_lib_mail DANGEROUS_EXTENSIONS_POSIX /
-#   DANGEROUS_EXTENSIONS_WINDOWS; paths matching SENSITIVE_PATH_PATTERNS such as /.ssh/ are
-#   always refused)
+# Default: [] (the library's defaults apply: btx_lib_mail DANGEROUS_EXTENSIONS_POSIX plus
+#   DANGEROUS_EXTENSIONS_WINDOWS on every platform; paths matching SENSITIVE_PATH_PATTERNS such
+#   as /.ssh/ are always refused)
 # Environment Variable: BITRANOX_TEMPLATE_PY_CLI___EMAIL__ATTACHMENTS__BLOCKED_EXTENSIONS='[".exe",".bat",".cmd"]'
 # .env: EMAIL__ATTACHMENTS__BLOCKED_EXTENSIONS=[".exe",".bat",".cmd"] (unquoted)
 # A comma-separated value is NOT a list: it arrives as one string and is refused
@@ -197,6 +214,14 @@ blocked_directories = []
 # Note: Set to 0 to disable size checking entirely
 max_size_bytes = 26214400
 
+# Purpose: Most attachments one send accepts
+# Type: integer, or 0 for no limit
+# Default: 100
+# Environment Variable: BITRANOX_TEMPLATE_PY_CLI___EMAIL__ATTACHMENTS__MAX_COUNT=100
+# .env: EMAIL__ATTACHMENTS__MAX_COUNT=100
+# Note: More attachments are refused before any file is checked or anything is delivered
+max_count = 100
+
 # Purpose: Whether to allow symbolic links as attachments
 # Type: boolean
 # Default: false (symlinks are rejected)

{bitranox_template_py_cli-2.0.1 → bitranox_template_py_cli-2.1.1}/src/bitranox_template_py_cli/adapters/email/config.py

@@ -3,7 +3,7 @@
 lib_layered_config is the only reader of configuration. It merges every layer (the shipped
 defaults, the app, host and user files, ``.env``, the environment and ``--set``) into one
 mapping, and :func:`load_email_config_from_dict` turns that mapping's ``[email]`` section into
-:class:`EmailConfig`. Operators keep writing the file keys they always wrote; five of them
+:class:`EmailConfig`. Operators keep writing the file keys they always wrote; six of them
 differ from the field names code reads (``FILE_KEY_TO_FIELD``). A key that is not a file key
 is refused, so a typo cannot leave a setting silently at its default.
 """
@@ -14,7 +14,7 @@ import re
 from collections.abc import Mapping
 from typing import TYPE_CHECKING, Any, cast
 
-from btx_lib_mail import ConfMail, validate_email_address, validate_smtp_host
+from btx_lib_mail import ConfMail, validate_email_address
 from pydantic import ConfigDict, Field, SecretStr, ValidationError, field_validator
 
 if TYPE_CHECKING:
@@ -34,6 +34,7 @@ FILE_KEY_TO_FIELD: dict[str, str] = {
     "timeout": "smtp_timeout",
     "starttls_verify": "smtp_starttls_verify",
     "local_hostname": "smtp_local_hostname",
+    "delivery_deadline": "smtp_delivery_deadline",
 }
 _FIELD_TO_FILE_KEY: dict[str, str] = {field: key for key, field in FILE_KEY_TO_FIELD.items()}
 
@@ -47,6 +48,7 @@ SECTION_KEYS = frozenset(
         "smtp_password",
         "raise_on_missing_attachments",
         "raise_on_invalid_recipient",
+        "recipient_max_count",
         _ATTACHMENTS,
     }
 )
@@ -59,6 +61,7 @@ ATTACHMENT_KEYS = frozenset(
         "allowed_directories",
         "blocked_directories",
         "max_size_bytes",
+        "max_count",
         "allow_symlinks",
         "raise_on_security_violation",
     }
@@ -74,6 +77,9 @@ _BLANK_TEXT_MEANS_UNSET = frozenset(
 _EMPTY_LIST_MEANS_DEFAULT = frozenset(
     {"allowed_extensions", "blocked_extensions", "allowed_directories", "blocked_directories"}
 )
+#: Limits whose 0 means "no limit". ConfMail refuses 0 and lifts a limit with None, which a
+#: TOML file or an environment variable cannot write.
+_ZERO_MEANS_NO_LIMIT = frozenset({"max_size_bytes", "max_count", "recipient_max_count", "delivery_deadline"})
 #: The refusal of a blank entry in an attachment list.
 _BLANK_ENTRY = ValueError("an entry is blank; remove it")
 #: The form an attachment list must take, named by the refusal of any other form. A
@@ -146,16 +152,6 @@ class EmailConfig(ConfMail):
             return [value] if value.strip() else []
         return value
 
-    @field_validator("smtphosts")
-    @classmethod
-    def _check_hosts(cls, value: list[str]) -> list[str]:
-        # ConfMail refuses userinfo, a path and control characters; the port range and the
-        # IPv6 brackets are checked only by validate_smtp_host, so a typo surfaces at load
-        # time rather than at the first delivery.
-        for host in value:
-            validate_smtp_host(host)
-        return value
-
     @field_validator("from_address")
     @classmethod
     def _check_from_address(cls, value: str | None) -> str | None:
@@ -273,10 +269,10 @@ def _means_unset(key: str, value: object) -> bool:
 
 
 def _field_value(key: str, value: object) -> object:
-    """A lone host or address becomes a one-entry list; a size limit of 0 means no limit."""
+    """A lone host or address becomes a one-entry list; a limit of 0 means no limit."""
     if key in _ONE_OR_MANY and isinstance(value, str):
         return [value]
-    if key == "max_size_bytes" and type(value) in (int, float) and value == 0:
+    if key in _ZERO_MEANS_NO_LIMIT and type(value) in (int, float) and value == 0:
         return None
     return value
 

{bitranox_template_py_cli-2.0.1 → bitranox_template_py_cli-2.1.1}/src/bitranox_template_py_cli/adapters/email/transport.py

@@ -122,10 +122,12 @@ def send_email(
 
     Raises:
         ValueError: No from_address configured and no override provided,
-            or no recipients configured and no override provided.
+            or no recipients configured and no override provided, or more
+            recipients or attachments than config.recipient_max_count or
+            config.attachment_max_count allow (refused before any delivery).
         ConfigurationError: No SMTP hosts configured.
-        FileNotFoundError: Required attachment missing and config.raise_on_missing_attachments
-            is True.
+        FileNotFoundError: Required attachment missing or unreadable and
+            config.raise_on_missing_attachments is True.
         DeliveryError: All SMTP hosts failed for a recipient.
 
     Side Effects:

{bitranox_template_py_cli-2.0.1 → bitranox_template_py_cli-2.1.1}/src/bitranox_template_py_cli/adapters/logging/setup.py

@@ -5,8 +5,10 @@ eliminating duplication between module entry (__main__.py) and console script
 (cli.py) while ensuring initialization happens exactly once.
 
 Contents:
-    * :func:`init_logging` - idempotent logging initialization with layered config.
-    * :class:`InvalidLoggingConfigError` - the ``[lib_log_rich]`` section cannot configure logging.
+    * :func:`init_logging` - idempotent logging initialization from the ``[lib_log_rich]``
+      section and the ``LOG_*`` variables (the environment, plus the ``LOG_*`` lines of a ``.env``).
+    * :class:`InvalidLoggingConfigError` - the ``[lib_log_rich]`` section or a ``LOG_*`` variable
+      cannot configure logging.
     * :func:`_build_runtime_config` - constructs RuntimeConfig from layered sources.
 
 System Role:
@@ -18,18 +20,20 @@ System Role:
 from __future__ import annotations
 
 import os
+from contextlib import contextmanager
 from pathlib import Path
 from typing import TYPE_CHECKING, cast
 
 import lib_log_rich.runtime
 from dotenv import dotenv_values
+from lib_layered_config import Config
 from pydantic import BaseModel, ConfigDict, ValidationError
 
 from bitranox_template_py_cli import __init__conf__
 from bitranox_template_py_cli.domain.errors import ConfigurationError
 
 if TYPE_CHECKING:
-    from lib_layered_config import Config
+    from collections.abc import Generator
 
 
 class LoggingConfigModel(BaseModel):
@@ -94,18 +98,20 @@ def _build_runtime_config(config: Config) -> lib_log_rich.runtime.RuntimeConfig:
 class InvalidLoggingConfigError(ConfigurationError):
     """lib_log_rich refuses its settings: one ``<key>: <reason>`` in :attr:`problems` per problem.
 
-    The settings are the ``[lib_log_rich]`` section plus any ``LOG_*`` variable. A problem names
-    the key and never repeats the refused value.
+    The settings are the ``[lib_log_rich]`` section plus any ``LOG_*`` variable. A problem the
+    type check of the section finds names the key and never repeats the refused value. A value
+    only lib_log_rich itself refuses, such as an unknown level in ``LOG_CONSOLE_LEVEL`` or in the
+    section's ``console_level``, is reported in lib_log_rich's own words (``lib_log_rich: Unknown
+    log level: 'bogus'``), which may name neither the setting nor where it was set.
 
     Attributes:
         problems: One line per refused setting.
 
     Example:
-        >>> from lib_layered_config import Config
         >>> try:
-        ...     init_logging(Config({"lib_log_rich": {"rate_limit": "100:60"}}, {}))
-        ... except InvalidLoggingConfigError as exc:
-        ...     print(exc)
+        ...     _build_runtime_config(Config({"lib_log_rich": {"rate_limit": "100:60"}}, {}))
+        ... except ValidationError as exc:
+        ...     print(InvalidLoggingConfigError(_problems(exc)))
         lib_log_rich.rate_limit: Input should be a valid tuple
     """
 
@@ -126,8 +132,8 @@ def _problems(error: BaseException) -> list[str]:
     while cause is not None and not isinstance(cause, ValidationError):
         cause = cause.__cause__ or cause.__context__
     if cause is None:
-        # Not a pydantic error (e.g. an unknown level name): its own first line, which names
-        # the setting.
+        # Not a pydantic error (e.g. an unknown level name in a LOG_* variable): lib_log_rich's
+        # own first line, which may name neither the variable nor where it was set.
         return [f"lib_log_rich: {str(error).splitlines()[0]}"]
     return [f"lib_log_rich.{'.'.join(str(part) for part in item['loc'])}: {item['msg']}" for item in cause.errors()]
 
@@ -182,6 +188,41 @@ def _load_log_variables(dotenv_path: str | None) -> None:
             os.environ.setdefault(name, value)
 
 
+@contextmanager
+def log_variables_hidden() -> Generator[None]:
+    """Remove every ``LOG_*`` variable from the environment for the block, then put each back.
+
+    Example:
+        >>> os.environ["LOG_HIDDEN_PROBE"] = "x"
+        >>> with log_variables_hidden():
+        ...     "LOG_HIDDEN_PROBE" in os.environ
+        False
+        >>> os.environ.pop("LOG_HIDDEN_PROBE")
+        'x'
+    """
+    names = [name for name in os.environ if name.startswith(_LOG_VARIABLE_PREFIX)]
+    hidden = {name: os.environ.pop(name) for name in names}
+    try:
+        yield
+    finally:
+        os.environ.update(hidden)
+
+
+def _start_default_logging() -> None:
+    """Start lib_log_rich with the package defaults; without the ``LOG_*`` variables only if needed.
+
+    lib_log_rich reads the ``LOG_*`` variables from the environment on every init. When the
+    refused setting came from the ``[lib_log_rich]`` section, the defaults start with them and
+    a valid ``LOG_CONSOLE_LEVEL`` still applies. When one of them is the refused setting, that
+    start is refused again, and only then do the defaults start with every ``LOG_*`` hidden.
+    """
+    try:
+        lib_log_rich.runtime.init(_build_runtime_config(Config({}, {})))
+    except ValueError:  # pydantic's ValidationError is a ValueError
+        with log_variables_hidden():
+            lib_log_rich.runtime.init(_build_runtime_config(Config({}, {})))
+
+
 def init_logging(config: Config, *, dotenv_path: str | None = None) -> None:
     """Initialize lib_log_rich runtime with the provided configuration.
 
@@ -199,8 +240,12 @@ def init_logging(config: Config, *, dotenv_path: str | None = None) -> None:
             to use the nearest ``.env`` from the working directory up to the project root.
 
     Raises:
-        InvalidLoggingConfigError: The ``[lib_log_rich]`` section holds a value lib_log_rich
-            refuses; logging is not started.
+        InvalidLoggingConfigError: The ``[lib_log_rich]`` section or a ``LOG_*`` variable holds
+            a value lib_log_rich refuses. Logging is started anyway, with the package defaults
+            and the ``LOG_*`` variables (every one of them ignored if the defaults are refused
+            with them too), so the caller can record the failure and run the commands that do
+            not read the configuration. Only the first call can raise: logging is running after
+            it, so a later call returns at once, also with the same refused configuration.
 
     Side Effects:
         Copies the ``LOG_*`` lines of that ``.env`` into the process environment on first
@@ -226,9 +271,11 @@ def init_logging(config: Config, *, dotenv_path: str | None = None) -> None:
     _load_log_variables(dotenv_path)
     try:
         lib_log_rich.runtime.init(_build_runtime_config(config))
-    except (ValidationError, ValueError) as exc:
+    except ValueError as exc:  # pydantic's ValidationError is a ValueError
         # The type check of the section and lib_log_rich's own range checks (which also see the
         # LOG_* variables) both refuse here; neither has started the runtime.
+        _start_default_logging()
+        lib_log_rich.runtime.attach_std_logging()
         raise InvalidLoggingConfigError(_problems(exc)) from exc
     lib_log_rich.runtime.attach_std_logging()
 
@@ -237,4 +284,5 @@ __all__ = [
     "InvalidLoggingConfigError",
     "LoggingConfigModel",
     "init_logging",
+    "log_variables_hidden",
 ]

{bitranox_template_py_cli-2.0.1 → bitranox_template_py_cli-2.1.1}/src/bitranox_template_py_cli/adapters/memory/logging.py

@@ -12,6 +12,7 @@ import lib_log_rich.runtime
 from lib_log_rich.domain import LogLevel
 
 from bitranox_template_py_cli import __init__conf__
+from bitranox_template_py_cli.adapters.logging.setup import log_variables_hidden
 
 if TYPE_CHECKING:
     from lib_layered_config import Config
@@ -29,7 +30,10 @@ def init_logging_in_memory(config: Config, *, dotenv_path: str | None = None) ->
     double has no business writing to a system log, and a queue is a background thread the
     test run would have to reap. The console level is ERROR so ordinary INFO logging cannot
     land in the output a test asserts on. Unlike the production initializer this never loads
-    a ``.env`` file, so a test run does not pick up the developer's own environment.
+    a ``.env`` file, and it starts with every ``LOG_*`` variable hidden (each is put back
+    afterwards): lib_log_rich reads them on every init, so a developer's own
+    ``LOG_CONSOLE_LEVEL`` would otherwise change the test runtime, and a value lib_log_rich
+    refuses would fail every command run under ``build_testing()``.
 
     Args:
         config: Layered configuration object. Unused: the test runtime is fixed, and the
@@ -45,17 +49,18 @@ def init_logging_in_memory(config: Config, *, dotenv_path: str | None = None) ->
     """
     if lib_log_rich.runtime.is_initialised():
         return
-    lib_log_rich.runtime.init(
-        lib_log_rich.runtime.RuntimeConfig(
-            service=f"{__init__conf__.name}-test",
-            environment="test",
-            console_level=LogLevel.ERROR,
-            enable_journald=False,
-            enable_eventlog=False,
-            enable_graylog=False,
-            queue_enabled=False,
+    with log_variables_hidden():
+        lib_log_rich.runtime.init(
+            lib_log_rich.runtime.RuntimeConfig(
+                service=f"{__init__conf__.name}-test",
+                environment="test",
+                console_level=LogLevel.ERROR,
+                enable_journald=False,
+                enable_eventlog=False,
+                enable_graylog=False,
+                queue_enabled=False,
+            )
         )
-    )
 
 
 __all__ = ["init_logging_in_memory"]

{bitranox_template_py_cli-2.0.1 → bitranox_template_py_cli-2.1.1}/src/bitranox_template_py_cli/application/ports.py

@@ -102,6 +102,8 @@ class InitLogging(Protocol):
     """Initialize lib_log_rich runtime with the provided configuration.
 
     ``dotenv_path`` is the ``.env`` the configuration was loaded with, or None for the nearest one.
+    A refused logging setting raises ``InvalidLoggingConfigError`` only after logging has been
+    started with its defaults, so the caller never has to start it a second time.
     """
 
     def __call__(self, config: Config, *, dotenv_path: str | None = None) -> None: ...