sediment-api 0.4.0__tar.gz → 0.5.0__tar.gz

{sediment_api-0.4.0 → sediment_api-0.5.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: sediment-api
-Version: 0.4.0
+Version: 0.5.0
 Summary: Sediment ingest API: facts in through three doors
 Project-URL: Source, https://github.com/sediment-ai/sediment
 Project-URL: Documentation, https://github.com/sediment-ai/sediment/tree/main/docs
@@ -13,8 +13,8 @@ Requires-Dist: anyio>=4.15.1
 Requires-Dist: fastapi>=0.141.1
 Requires-Dist: httpx>=0.27
 Requires-Dist: pydantic-settings>=2.15.0
-Requires-Dist: sediment-capture==0.4.0
-Requires-Dist: sediment-core==0.4.0
-Requires-Dist: sediment-derive==0.4.0
-Requires-Dist: sediment-export==0.4.0
+Requires-Dist: sediment-capture==0.5.0
+Requires-Dist: sediment-core==0.5.0
+Requires-Dist: sediment-derive==0.5.0
+Requires-Dist: sediment-export==0.5.0
 Requires-Dist: uvicorn>=0.54.0

{sediment_api-0.4.0 → sediment_api-0.5.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "sediment-api"
-version = "0.4.0"
+version = "0.5.0"
 description = "Sediment ingest API: facts in through three doors"
 requires-python = ">=3.12"
 license = "AGPL-3.0-or-later"
@@ -12,10 +12,10 @@ dependencies = [
     "httpx>=0.27",
     "uvicorn>=0.54.0",
     "pydantic-settings>=2.15.0",
-    "sediment-core==0.4.0",
-    "sediment-capture==0.4.0",
-    "sediment-derive==0.4.0",
-    "sediment-export==0.4.0",
+    "sediment-core==0.5.0",
+    "sediment-capture==0.5.0",
+    "sediment-derive==0.5.0",
+    "sediment-export==0.5.0",
 ]
 
 [project.urls]

{sediment_api-0.4.0 → sediment_api-0.5.0}/sediment_api/__init__.py

@@ -3,4 +3,4 @@
 
 # Single source for the API version string — FastAPI's ``app.version``
 # (reported by /health) and GET /v1/me both read it, so the two cannot drift.
-__version__ = "0.4.0"
+__version__ = "0.5.0"

{sediment_api-0.4.0 → sediment_api-0.5.0}/tests/test_e2e_smoke.py

@@ -194,6 +194,65 @@ def test_otlp_fixtures_to_decision_facts(client: TestClient) -> None:
     assert len(_store().read_decisions(settings.org_id)) == expected
 
 
+def test_claude_code_account_identity_removed_before_storage(
+    client: TestClient,
+) -> None:
+    from sediment_core import REDACTION_MARKER
+
+    payload = _fixture("otlp/claude_code/tool_decision_acceptedits_edit.json")
+    records = payload["resourceLogs"][0]["scopeLogs"][0]["logRecords"]
+    tool_input = {
+        "file_path": "/home/dev/project/target.txt",
+        "old_string": "original text",
+        "new_string": "Bearer synthetic-credential-1234567890",
+    }
+    for record in records:
+        attrs = record["attributes"]
+        attrs.extend(
+            [
+                {"key": "user.email", "value": {"stringValue": "account@example.test"}},
+                {"key": "user.account_id", "value": {"stringValue": "account-123"}},
+                {
+                    "key": "user.account_uuid",
+                    "value": {"stringValue": "22222222-2222-4222-8222-222222222222"},
+                },
+            ]
+        )
+        if any(
+            attr["key"] == "tool_name" and attr["value"].get("stringValue") == "Edit"
+            for attr in attrs
+        ):
+            for attr in attrs:
+                if attr["key"] == "tool_input":
+                    attr["value"] = {"stringValue": json.dumps(tool_input)}
+
+    response = client.post("/v1/logs", json=payload, headers=_auth())
+
+    assert response.status_code == 200
+    assert response.json() == {}
+    [decision] = _store().read_decisions(settings.org_id)
+    assert "account@example.test" not in decision.model_dump_json()
+    assert "account-123" not in decision.model_dump_json()
+    assert "22222222-2222-4222-8222-222222222222" not in decision.model_dump_json()
+    stored_input = next(
+        attr["value"]["stringValue"]
+        for attr in decision.raw["result"]["attributes"]
+        if attr["key"] == "tool_input"
+    )
+    assert json.loads(stored_input) == {
+        **tool_input,
+        "new_string": f"Bearer {REDACTION_MARKER}",
+    }
+    assert decision.file_path == tool_input["file_path"]
+    assert decision.call_id == "toolu_0000000000000002"
+    assert decision.session_id == "11111111-1111-1111-1111-111111111111"
+    assert decision.user_id == "spike-dev"
+    assert decision.accepted is True
+    assert decision.explicit is False
+    assert client.post("/v1/logs", json=payload, headers=_auth()).status_code == 200
+    assert _store().read_decisions(settings.org_id) == [decision]
+
+
 def test_otlp_chunked_transfer_body(client: TestClient) -> None:
     # Real OTLP exporters stream chunked (no Content-Length); the route must
     # still assemble and parse the body.

{sediment_api-0.4.0 → sediment_api-0.5.0}/tests/test_v1.py

@@ -101,7 +101,7 @@ def test_me_happy_path(client: TestClient) -> None:
     assert resp.status_code == 200
     assert resp.json() == {
         "org_id": ORG,
-        "version": "0.4.0",
+        "version": "0.5.0",
         "authority": "operator",
         "client_id": "operator",
     }