ouroboros-ai 0.31.2.dev29__tar.gz → 0.31.2.dev31__tar.gz

{ouroboros_ai-0.31.2.dev29 → ouroboros_ai-0.31.2.dev31}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ouroboros-ai
-Version: 0.31.2.dev29
+Version: 0.31.2.dev31
 Summary: Specification-first workflow engine for AI coding agents. Works with Claude Code and Codex CLI.
 Author-email: Q00 <jqyu.lee@gmail.com>
 License-File: LICENSE

{ouroboros_ai-0.31.2.dev29 → ouroboros_ai-0.31.2.dev31}/src/ouroboros/_version.py

@@ -18,7 +18,7 @@ version_tuple: tuple[int | str, ...]
 commit_id: str | None
 __commit_id__: str | None
 
-__version__ = version = '0.31.2.dev29'
-__version_tuple__ = version_tuple = (0, 31, 2, 'dev29')
+__version__ = version = '0.31.2.dev31'
+__version_tuple__ = version_tuple = (0, 31, 2, 'dev31')
 
 __commit_id__ = commit_id = None

{ouroboros_ai-0.31.2.dev29 → ouroboros_ai-0.31.2.dev31}/src/ouroboros/events/io.py

@@ -36,6 +36,7 @@ from __future__ import annotations
 
 from enum import StrEnum
 import hashlib
+import logging
 import os
 import re
 import secrets
@@ -44,6 +45,9 @@ from typing import Any, Final
 
 from ouroboros.events.base import BaseEvent
 
+logger = logging.getLogger(__name__)
+_WARNED_INVALID_PRIVACY_VALUES: set[str] = set()
+
 # ---------------------------------------------------------------------------
 # Constants
 # ---------------------------------------------------------------------------
@@ -94,15 +98,29 @@ class PrivacyMode(StrEnum):
 def get_privacy_mode() -> PrivacyMode:
     """Resolve the active privacy mode from the environment.
 
-    Unknown values fall back to :attr:`PrivacyMode.ON`. The env var is
-    read on every call so tests can flip it without restarting the
-    process; this is fine because the read is `os.environ.get`-cheap.
+    Unset values preserve the cooperative-trust default
+    (:attr:`PrivacyMode.ON`). Explicit but unknown values fail closed to
+    :attr:`PrivacyMode.OFF` so a typo never preserves raw previews. The
+    env var is read on every call so tests can flip it without
+    restarting the process; this is fine because the read is
+    `os.environ.get`-cheap.
     """
-    raw = os.environ.get(PRIVACY_ENV_VAR, PrivacyMode.ON.value).lower()
+    configured = os.environ.get(PRIVACY_ENV_VAR)
+    if configured is None:
+        return PrivacyMode.ON
+    raw = configured.strip().lower()
     try:
         return PrivacyMode(raw)
     except ValueError:
-        return PrivacyMode.ON
+        if raw not in _WARNED_INVALID_PRIVACY_VALUES:
+            _WARNED_INVALID_PRIVACY_VALUES.add(raw)
+            logger.warning(
+                "Invalid %s=%r; falling back to %s to avoid preserving I/O previews",
+                PRIVACY_ENV_VAR,
+                configured,
+                PrivacyMode.OFF.value,
+            )
+        return PrivacyMode.OFF
 
 
 # ---------------------------------------------------------------------------

{ouroboros_ai-0.31.2.dev29 → ouroboros_ai-0.31.2.dev31}/tests/unit/events/test_io_events.py

@@ -108,10 +108,41 @@ class TestPrivacyMode:
             assert get_privacy_mode() is mode
         monkeypatch.setenv(PRIVACY_ENV_VAR, "OFF")
         assert get_privacy_mode() is PrivacyMode.OFF
-
-    def test_unknown_value_falls_back_to_on(self, monkeypatch: pytest.MonkeyPatch) -> None:
+        monkeypatch.setenv(PRIVACY_ENV_VAR, " redacted ")
+        assert get_privacy_mode() is PrivacyMode.REDACTED
+
+    def test_unknown_value_fails_closed_to_off(
+        self,
+        monkeypatch: pytest.MonkeyPatch,
+        caplog: pytest.LogCaptureFixture,
+    ) -> None:
         monkeypatch.setenv(PRIVACY_ENV_VAR, "loud")
-        assert get_privacy_mode() is PrivacyMode.ON
+        assert get_privacy_mode() is PrivacyMode.OFF
+        assert PRIVACY_ENV_VAR in caplog.text
+
+    def test_invalid_env_value_does_not_preserve_preview(
+        self, monkeypatch: pytest.MonkeyPatch
+    ) -> None:
+        monkeypatch.setenv(PRIVACY_ENV_VAR, "of")
+        assert shape_preview("SECRET prompt") is None
+
+    def test_invalid_value_warns_once_per_normalised_value(
+        self,
+        monkeypatch: pytest.MonkeyPatch,
+        caplog: pytest.LogCaptureFixture,
+    ) -> None:
+        monkeypatch.setenv(PRIVACY_ENV_VAR, " noisy ")
+        assert get_privacy_mode() is PrivacyMode.OFF
+        assert get_privacy_mode() is PrivacyMode.OFF
+        monkeypatch.setenv(PRIVACY_ENV_VAR, "NOISY")
+        assert get_privacy_mode() is PrivacyMode.OFF
+
+        warnings = [
+            record
+            for record in caplog.records
+            if "Invalid OUROBOROS_IO_JOURNAL_PREVIEWS" in record.message
+        ]
+        assert len(warnings) == 1
 
 
 class TestTruncatePreview: