ouroboros-ai 0.25.2.dev2__tar.gz → 0.25.2.dev4__tar.gz

{ouroboros_ai-0.25.2.dev2 → ouroboros_ai-0.25.2.dev4}/.github/workflows/dev-publish.yml

@@ -43,15 +43,22 @@ jobs:
 
       - name: Build package
         if: steps.check.outputs.skip == 'false'
+        id: build
         run: |
           uv build
-          echo "Built package:"
-          ls -la dist/
+          VERSION=$(python -c "
+          import re, pathlib
+          for f in pathlib.Path('dist').iterdir():
+              if f.suffix == '.whl':
+                  m = re.match(r'[^-]+-([^-]+)-', f.name)
+                  if m: print(m.group(1))
+          ")
+          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+          echo "::notice::📦 Dev version: $VERSION"
 
       - name: Smoke test
         if: steps.check.outputs.skip == 'false'
         run: |
-          # Install the built wheel and verify runtime version
           uv pip install dist/*.whl --system
           python -c "
           import ouroboros
@@ -66,3 +73,5 @@ jobs:
           UV_PUBLISH_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
         run: |
           uv publish --check-url https://pypi.org/simple/ dist/*
+          echo "::notice::✅ Published ouroboros-ai==${{ steps.build.outputs.version }} to PyPI"
+          echo "::notice::Install: pip install ouroboros-ai==${{ steps.build.outputs.version }}"

{ouroboros_ai-0.25.2.dev2 → ouroboros_ai-0.25.2.dev4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ouroboros-ai
-Version: 0.25.2.dev2
+Version: 0.25.2.dev4
 Summary: Self-Improving AI Workflow System
 Author-email: Q00 <jqyu.lee@gmail.com>
 License-File: LICENSE
@@ -11,7 +11,6 @@ Requires-Dist: cachetools>=5.0.0
 Requires-Dist: claude-agent-sdk>=0.1.0
 Requires-Dist: filelock>=3.13.0
 Requires-Dist: httpx>=0.27.0
-Requires-Dist: litellm>=1.80.0
 Requires-Dist: mcp>=1.26.0
 Requires-Dist: prompt-toolkit>=3.0.0
 Requires-Dist: pydantic>=2.0.0
@@ -68,6 +67,10 @@ Description-Content-Type: text/markdown
 
 ---
 
+> **⚠️ Security Notice**: LiteLLM multi-provider support has been temporarily removed due to a [PyPI supply chain attack](https://github.com/Q00/ouroboros/issues/195) affecting litellm 1.82.7/1.82.8. If you installed ouroboros recently, please check the issue for remediation steps. The core plugin functionality (Claude Code / Codex) is **not affected**.
+
+---
+
 > *AI can build anything. The hard part is knowing what to build.*
 
 Ouroboros is a **specification-first AI development system**. It applies Socratic questioning and ontological analysis to expose your hidden assumptions — before a single line of code is written.

{ouroboros_ai-0.25.2.dev2 → ouroboros_ai-0.25.2.dev4}/README.md

@@ -37,6 +37,10 @@
 
 ---
 
+> **⚠️ Security Notice**: LiteLLM multi-provider support has been temporarily removed due to a [PyPI supply chain attack](https://github.com/Q00/ouroboros/issues/195) affecting litellm 1.82.7/1.82.8. If you installed ouroboros recently, please check the issue for remediation steps. The core plugin functionality (Claude Code / Codex) is **not affected**.
+
+---
+
 > *AI can build anything. The hard part is knowing what to build.*
 
 Ouroboros is a **specification-first AI development system**. It applies Socratic questioning and ontological analysis to expose your hidden assumptions — before a single line of code is written.

{ouroboros_ai-0.25.2.dev2 → ouroboros_ai-0.25.2.dev4}/docs/guides/quick-start.md

@@ -6,7 +6,9 @@ Get Ouroboros running and execute your first AI workflow in under 10 minutes.
 
 - Python 3.14+
 - [uv](https://github.com/astral-sh/uv) package manager
-- An LLM API key (Anthropic, OpenAI, or any [LiteLLM-supported provider](https://docs.litellm.ai/docs/providers))
+- An LLM API key (Anthropic recommended)
+
+> **Note**: LiteLLM multi-provider support is temporarily unavailable due to a [PyPI supply chain incident](https://github.com/Q00/ouroboros/issues/195). Use Anthropic API or Claude Code plugin mode instead.
 
 ## 1. Install
 

{ouroboros_ai-0.25.2.dev2 → ouroboros_ai-0.25.2.dev4}/pyproject.toml

@@ -14,7 +14,7 @@ dependencies = [
     "claude-agent-sdk>=0.1.0",
     "filelock>=3.13.0",
     "httpx>=0.27.0",
-    "litellm>=1.80.0",
+    # "litellm>=1.80.0",  # Removed: PyPI supply chain attack (issue #195)
     "mcp>=1.26.0",
     "prompt-toolkit>=3.0.0",
     "pydantic>=2.0.0",

{ouroboros_ai-0.25.2.dev2 → ouroboros_ai-0.25.2.dev4}/src/ouroboros/_version.py

@@ -28,7 +28,7 @@ version_tuple: VERSION_TUPLE
 commit_id: COMMIT_ID
 __commit_id__: COMMIT_ID
 
-__version__ = version = '0.25.2.dev2'
-__version_tuple__ = version_tuple = (0, 25, 2, 'dev2')
+__version__ = version = '0.25.2.dev4'
+__version_tuple__ = version_tuple = (0, 25, 2, 'dev4')
 
 __commit_id__ = commit_id = None

{ouroboros_ai-0.25.2.dev2 → ouroboros_ai-0.25.2.dev4}/src/ouroboros/bigbang/ambiguity.py

@@ -21,7 +21,11 @@ from ouroboros.bigbang.interview import InterviewState
 from ouroboros.core.errors import ProviderError
 from ouroboros.core.types import Result
 from ouroboros.providers.base import CompletionConfig, Message, MessageRole
-from ouroboros.providers.litellm_adapter import LiteLLMAdapter
+
+try:
+    from ouroboros.providers.litellm_adapter import LiteLLMAdapter
+except ImportError:
+    LiteLLMAdapter = None  # type: ignore[assignment,misc]
 
 log = structlog.get_logger()
 

{ouroboros_ai-0.25.2.dev2 → ouroboros_ai-0.25.2.dev4}/src/ouroboros/cli/commands/init.py

@@ -28,7 +28,11 @@ from ouroboros.cli.formatters import console
 from ouroboros.cli.formatters.panels import print_error, print_info, print_success, print_warning
 from ouroboros.observability import LoggingConfig, configure_logging
 from ouroboros.providers.base import LLMAdapter
-from ouroboros.providers.litellm_adapter import LiteLLMAdapter
+
+try:
+    from ouroboros.providers.litellm_adapter import LiteLLMAdapter
+except ImportError:
+    LiteLLMAdapter = None  # type: ignore[assignment,misc]
 
 
 class SeedGenerationResult(Enum):

{ouroboros_ai-0.25.2.dev2 → ouroboros_ai-0.25.2.dev4}/src/ouroboros/core/context.py

@@ -17,13 +17,21 @@ from dataclasses import dataclass, field
 from datetime import UTC, datetime
 from typing import Any
 
-import litellm
 import structlog
 
 from ouroboros.core.errors import ProviderError
 from ouroboros.core.types import Result
 from ouroboros.providers.base import CompletionConfig, Message, MessageRole
-from ouroboros.providers.litellm_adapter import LiteLLMAdapter
+
+try:
+    import litellm
+except ImportError:
+    litellm = None  # type: ignore[assignment]
+
+try:
+    from ouroboros.providers.litellm_adapter import LiteLLMAdapter
+except ImportError:
+    LiteLLMAdapter = None  # type: ignore[assignment,misc]
 
 log = structlog.get_logger()
 
@@ -158,6 +166,9 @@ def count_tokens(text: str, model: str = "gpt-4") -> int:
     Returns:
         The number of tokens in the text.
     """
+    if litellm is None:
+        return len(text) // 4
+
     try:
         return litellm.token_counter(model=model, text=text)
     except Exception as e:

{ouroboros_ai-0.25.2.dev2 → ouroboros_ai-0.25.2.dev4}/src/ouroboros/evaluation/consensus.py

@@ -41,7 +41,11 @@ from ouroboros.events.evaluation import (
     create_stage3_started_event,
 )
 from ouroboros.providers.base import CompletionConfig, LLMAdapter, Message, MessageRole
-from ouroboros.providers.litellm_adapter import LiteLLMAdapter
+
+try:
+    from ouroboros.providers.litellm_adapter import LiteLLMAdapter
+except ImportError:
+    LiteLLMAdapter = None  # type: ignore[assignment,misc]
 from ouroboros.strategies.devil_advocate import ConsensusContext, DevilAdvocateStrategy
 
 # Default models for consensus voting (Frontier tier)

{ouroboros_ai-0.25.2.dev2 → ouroboros_ai-0.25.2.dev4}/src/ouroboros/providers/__init__.py

@@ -14,7 +14,11 @@ from ouroboros.providers.base import (
     MessageRole,
     UsageInfo,
 )
-from ouroboros.providers.litellm_adapter import LiteLLMAdapter
+
+try:
+    from ouroboros.providers.litellm_adapter import LiteLLMAdapter
+except ImportError:
+    LiteLLMAdapter = None  # type: ignore[assignment,misc]
 
 __all__ = [
     # Protocol

{ouroboros_ai-0.25.2.dev2 → ouroboros_ai-0.25.2.dev4}/tests/unit/cli/test_main.py

@@ -240,10 +240,11 @@ class TestShorthandCommands:
 
     def test_init_list_subcommand_still_works(self) -> None:
         """Test backward compat: 'ouroboros init list' still routes to list."""
-        with patch("ouroboros.cli.commands.init.asyncio.run") as mock_run:
-            mock_run.return_value = []
-            result = runner.invoke(app, ["init", "list"])
-            assert result.exit_code == 0
+        with patch("ouroboros.cli.commands.init.LiteLLMAdapter"):
+            with patch("ouroboros.cli.commands.init.asyncio.run") as mock_run:
+                mock_run.return_value = []
+                result = runner.invoke(app, ["init", "list"])
+                assert result.exit_code == 0
 
     def test_monitor_top_level_alias(self) -> None:
         """Test that 'ouroboros monitor' is a shorthand for 'ouroboros tui monitor'."""

{ouroboros_ai-0.25.2.dev2 → ouroboros_ai-0.25.2.dev4}/tests/unit/core/test_context.py

@@ -26,7 +26,11 @@ from ouroboros.providers.base import (
     CompletionResponse,
     UsageInfo,
 )
-from ouroboros.providers.litellm_adapter import LiteLLMAdapter
+
+try:
+    from ouroboros.providers.litellm_adapter import LiteLLMAdapter
+except ImportError:
+    LiteLLMAdapter = None  # type: ignore[assignment,misc]
 
 
 class TestTokenCounting:
@@ -192,6 +196,7 @@ class TestWorkflowContext:
         assert restored.metadata == original.metadata
 
 
+@pytest.mark.skipif(LiteLLMAdapter is None, reason="litellm not installed")
 class TestLLMCompression:
     """Tests for LLM-based compression."""
 
@@ -242,6 +247,7 @@ class TestLLMCompression:
         assert result.error.status_code == 429
 
 
+@pytest.mark.skipif(LiteLLMAdapter is None, reason="litellm not installed")
 class TestContextCompression:
     """Tests for full context compression."""
 
@@ -461,6 +467,7 @@ class TestFilteredContext:
         assert len(filtered.relevant_facts) < len(full_context.key_facts)
 
 
+@pytest.mark.skipif(LiteLLMAdapter is None, reason="litellm not installed")
 class TestEdgeCases:
     """Tests for edge cases and error conditions."""
 

{ouroboros_ai-0.25.2.dev2 → ouroboros_ai-0.25.2.dev4}/tests/unit/providers/test_litellm_adapter.py

@@ -3,15 +3,17 @@
 from typing import Any
 from unittest.mock import AsyncMock, MagicMock, patch
 
-import litellm
+import pytest
 
-from ouroboros.core.errors import ProviderError
-from ouroboros.providers.base import (
+litellm = pytest.importorskip("litellm", reason="litellm not installed")
+
+from ouroboros.core.errors import ProviderError  # noqa: E402
+from ouroboros.providers.base import (  # noqa: E402
     CompletionConfig,
     Message,
     MessageRole,
 )
-from ouroboros.providers.litellm_adapter import LiteLLMAdapter
+from ouroboros.providers.litellm_adapter import LiteLLMAdapter  # noqa: E402
 
 
 def create_mock_response(

{ouroboros_ai-0.25.2.dev2 → ouroboros_ai-0.25.2.dev4}/tests/unit/test_dependencies_configured.py

@@ -21,7 +21,7 @@ def test_runtime_dependencies_configured():
         "httpx",
         "pydantic",
         "structlog",
-        "litellm",
+        # "litellm",  # Removed: PyPI supply chain attack (issue #195)
         "sqlalchemy",
         "aiosqlite",
         "stamina",