fix(auto): escape Rich markup in persisted answer log rendering

Addresses ouroboros-agent[bot] review on #720:

- _print_status now wraps source / question / answer fields with
  rich.markup.escape() before passing them to console.print(). The
  persisted text comes straight from the interview backend and may
  legitimately contain "[" / "]" sequences. Without the escape Rich
  would interpret those as markup styles, either swallowing the text
  from the rendered output or raising a markup parse error and making
  ooo auto --resume <id> --status fail for otherwise-valid sessions.
- New regression test feeds "Use [bold]uv[/] toolchain" + "Use uv [from
  existing setup]" through the status surface and asserts both literal
  bracketed segments survive verbatim.
- Reformat tests/unit/auto/test_answer_source_log.py per repo ruff
  format policy.

Refs #639

Author: shaun0927

src/ouroboros/cli/commands/auto.py

@@ -8,6 +8,7 @@
 from pathlib import Path
 from typing import Annotated
 
+from rich.markup import escape as _rich_escape
 import typer
 
 from ouroboros.auto.adapters import (
@@ -282,9 +283,15 @@ def _print_status(state: AutoPipelineState) -> None:
         console.print(f"Recent auto answers (last {len(recent)}):")
         for entry in recent:
             round_value = entry.get("round", "?")
-            source = entry.get("source", "?")
-            question = entry.get("question", "")
-            answer = entry.get("answer", "")
+            source = _rich_escape(str(entry.get("source", "?")))
+            # Persisted question/answer text comes straight from the
+            # interview backend and may contain "[" / "]" sequences that
+            # Rich would otherwise interpret as markup, breaking the
+            # rendered text or raising a parse error. Escape both fields
+            # before printing so the status surface stays robust against
+            # arbitrary backend output.
+            question = _rich_escape(str(entry.get("question", "")))
+            answer = _rich_escape(str(entry.get("answer", "")))
             console.print(f"  round {round_value} \\[{source}] Q: {question}")
             console.print(f"    A: {answer}")
     console.print(f"Resume: [bold]ooo auto --resume {state.auto_session_id}[/]")

tests/unit/auto/test_answer_source_log.py

@@ -117,9 +117,7 @@ def test_cli_status_renders_recent_source_tagged_answers(monkeypatch, tmp_path)
 
     monkeypatch.setattr("ouroboros.cli.commands.auto.AutoStore", lambda: store)
 
-    cli_result = CliRunner().invoke(
-        app, ["auto", "--resume", state.auto_session_id, "--status"]
-    )
+    cli_result = CliRunner().invoke(app, ["auto", "--resume", state.auto_session_id, "--status"])
     output = _strip_ansi(cli_result.output)
 
     assert cli_result.exit_code == 0
@@ -131,6 +129,38 @@ def test_cli_status_renders_recent_source_tagged_answers(monkeypatch, tmp_path)
     assert "A: Local-only, no network calls" in output
 
 
+def test_cli_status_escapes_rich_markup_in_persisted_answer_text(monkeypatch, tmp_path) -> None:
+    """Backend question/answer text that contains ``[`` must not be parsed as Rich markup.
+
+    Without the escape, ``console.print`` would interpret ``[bold]`` as a
+    style and either swallow it from the output or raise a markup parse
+    error, making ``ooo auto --status`` brittle for sessions whose
+    interview text legitimately contains square brackets.
+    """
+    store = AutoStore(tmp_path)
+    state = AutoPipelineState(goal="Build a CLI", cwd="/tmp/project")
+    state.transition(AutoPhase.INTERVIEW, "asking interview round 4/12")
+    state.auto_answer_log = [
+        {
+            "round": 1,
+            "source": "repo_fact",
+            "question": "Use [bold]uv[/] toolchain or pip?",
+            "answer": "Use uv [from existing setup]",
+        },
+    ]
+    store.save(state)
+
+    monkeypatch.setattr("ouroboros.cli.commands.auto.AutoStore", lambda: store)
+
+    cli_result = CliRunner().invoke(app, ["auto", "--resume", state.auto_session_id, "--status"])
+    output = _strip_ansi(cli_result.output)
+
+    assert cli_result.exit_code == 0
+    # The literal bracketed segments must survive verbatim.
+    assert "[bold]uv[/]" in output
+    assert "[from existing setup]" in output
+
+
 def test_cli_status_omits_recent_section_when_log_empty(monkeypatch, tmp_path) -> None:
     store = AutoStore(tmp_path)
     state = AutoPipelineState(goal="Build a CLI", cwd="/tmp/project")
@@ -139,9 +169,7 @@ def test_cli_status_omits_recent_section_when_log_empty(monkeypatch, tmp_path) -
 
     monkeypatch.setattr("ouroboros.cli.commands.auto.AutoStore", lambda: store)
 
-    cli_result = CliRunner().invoke(
-        app, ["auto", "--resume", state.auto_session_id, "--status"]
-    )
+    cli_result = CliRunner().invoke(app, ["auto", "--resume", state.auto_session_id, "--status"])
     output = _strip_ansi(cli_result.output)
 
     assert cli_result.exit_code == 0