PraisonAI 4.6.149__tar.gz → 4.6.151__tar.gz

{praisonai-4.6.149 → praisonai-4.6.151}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: PraisonAI
-Version: 4.6.149
+Version: 4.6.151
 Summary: PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.
 Author: Mervin Praison
 License: MIT
@@ -11,11 +11,12 @@ Description-Content-Type: text/markdown
 Requires-Dist: rich>=13.7
 Requires-Dist: markdown>=3.5
 Requires-Dist: pyparsing>=3.0.0
-Requires-Dist: praisonaiagents>=1.6.152
-Requires-Dist: praisonai-code>=0.0.48
-Requires-Dist: praisonai-bot>=0.0.33
-Requires-Dist: praisonai-train>=0.0.4
-Requires-Dist: praisonai-browser>=0.0.1
+Requires-Dist: praisonaiagents>=1.6.154
+Requires-Dist: praisonai-code>=0.0.50
+Requires-Dist: praisonai-bot>=0.0.35
+Requires-Dist: praisonai-train>=0.0.6
+Requires-Dist: praisonai-browser>=0.0.3
+Requires-Dist: praisonai-mcp>=0.0.3
 Requires-Dist: python-dotenv>=0.19.0
 Requires-Dist: litellm<2,>=1.83.14
 Requires-Dist: PyYAML>=6.0
@@ -86,6 +87,8 @@ Provides-Extra: train
 Requires-Dist: praisonai-train[llm]; extra == "train"
 Provides-Extra: browser
 Requires-Dist: praisonai-browser[all]; extra == "browser"
+Provides-Extra: mcp
+Requires-Dist: praisonai-mcp[all]; extra == "mcp"
 Provides-Extra: crewai
 Requires-Dist: crewai>=0.157.0; extra == "crewai"
 Requires-Dist: praisonai-tools>=0.1.0; extra == "crewai"

{praisonai-4.6.149 → praisonai-4.6.151}/PraisonAI.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: PraisonAI
-Version: 4.6.149
+Version: 4.6.151
 Summary: PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.
 Author: Mervin Praison
 License: MIT
@@ -11,11 +11,12 @@ Description-Content-Type: text/markdown
 Requires-Dist: rich>=13.7
 Requires-Dist: markdown>=3.5
 Requires-Dist: pyparsing>=3.0.0
-Requires-Dist: praisonaiagents>=1.6.152
-Requires-Dist: praisonai-code>=0.0.48
-Requires-Dist: praisonai-bot>=0.0.33
-Requires-Dist: praisonai-train>=0.0.4
-Requires-Dist: praisonai-browser>=0.0.1
+Requires-Dist: praisonaiagents>=1.6.154
+Requires-Dist: praisonai-code>=0.0.50
+Requires-Dist: praisonai-bot>=0.0.35
+Requires-Dist: praisonai-train>=0.0.6
+Requires-Dist: praisonai-browser>=0.0.3
+Requires-Dist: praisonai-mcp>=0.0.3
 Requires-Dist: python-dotenv>=0.19.0
 Requires-Dist: litellm<2,>=1.83.14
 Requires-Dist: PyYAML>=6.0
@@ -86,6 +87,8 @@ Provides-Extra: train
 Requires-Dist: praisonai-train[llm]; extra == "train"
 Provides-Extra: browser
 Requires-Dist: praisonai-browser[all]; extra == "browser"
+Provides-Extra: mcp
+Requires-Dist: praisonai-mcp[all]; extra == "mcp"
 Provides-Extra: crewai
 Requires-Dist: crewai>=0.157.0; extra == "crewai"
 Requires-Dist: praisonai-tools>=0.1.0; extra == "crewai"

{praisonai-4.6.149 → praisonai-4.6.151}/PraisonAI.egg-info/SOURCES.txt

@@ -6,7 +6,6 @@ PraisonAI.egg-info/dependency_links.txt
 PraisonAI.egg-info/entry_points.txt
 PraisonAI.egg-info/requires.txt
 PraisonAI.egg-info/top_level.txt
-praisonai/README.md
 praisonai/__init__.py
 praisonai/__main__.py
 praisonai/_approval_spec.py
@@ -372,34 +371,6 @@ praisonai/llm/env.py
 praisonai/llm/gateways.py
 praisonai/llm/registry.py
 praisonai/mcp_server/__init__.py
-praisonai/mcp_server/cli.py
-praisonai/mcp_server/elicitation.py
-praisonai/mcp_server/icons.py
-praisonai/mcp_server/recipe_adapter.py
-praisonai/mcp_server/recipe_cli.py
-praisonai/mcp_server/registry.py
-praisonai/mcp_server/sampling.py
-praisonai/mcp_server/server.py
-praisonai/mcp_server/tasks.py
-praisonai/mcp_server/tool_index.py
-praisonai/mcp_server/adapters/__init__.py
-praisonai/mcp_server/adapters/agents.py
-praisonai/mcp_server/adapters/capabilities.py
-praisonai/mcp_server/adapters/cli_tools.py
-praisonai/mcp_server/adapters/extended_capabilities.py
-praisonai/mcp_server/adapters/knowledge.py
-praisonai/mcp_server/adapters/memory.py
-praisonai/mcp_server/adapters/prompts.py
-praisonai/mcp_server/adapters/resources.py
-praisonai/mcp_server/adapters/tools_bridge.py
-praisonai/mcp_server/auth/__init__.py
-praisonai/mcp_server/auth/api_key.py
-praisonai/mcp_server/auth/oauth.py
-praisonai/mcp_server/auth/oidc.py
-praisonai/mcp_server/auth/scopes.py
-praisonai/mcp_server/transports/__init__.py
-praisonai/mcp_server/transports/http_stream.py
-praisonai/mcp_server/transports/stdio.py
 praisonai/n8n/__init__.py
 praisonai/n8n/client.py
 praisonai/n8n/converter.py
@@ -472,10 +443,6 @@ praisonai/persistence/tests/__init__.py
 praisonai/persistence/tests/test_all_backends.py
 praisonai/persistence/tests/test_registry_lazy.py
 praisonai/persistence/tests/test_valkey_backends.py
-praisonai/public/fantasy.svg
-praisonai/public/game.svg
-praisonai/public/movie.svg
-praisonai/public/thriller.svg
 praisonai/push/__init__.py
 praisonai/push/client.py
 praisonai/push/transports.py
@@ -514,7 +481,6 @@ praisonai/sandbox/modal.py
 praisonai/sandbox/sandlock.py
 praisonai/sandbox/ssh.py
 praisonai/sandbox/subprocess.py
-praisonai/scheduler/README.md
 praisonai/scheduler/__init__.py
 praisonai/scheduler/_base_scheduler.py
 praisonai/scheduler/_delivery.py
@@ -538,7 +504,6 @@ praisonai/security/injection.py
 praisonai/security/protected.py
 praisonai/setup/__init__.py
 praisonai/setup/build.py
-praisonai/setup/config.yaml
 praisonai/setup/post_install.py
 praisonai/setup/setup_conda_env.py
 praisonai/standardise/__init__.py
@@ -591,33 +556,10 @@ praisonai/tools/kanban_tools.py
 praisonai/tools/multiedit.py
 praisonai/tools/skill_manage.py
 praisonai/train/__init__.py
-praisonai/ui/README.md
 praisonai/ui/_aiui_datastore.py
 praisonai/ui/_external_agents.py
-praisonai/ui/callbacks.py
 praisonai/ui/context.py
 praisonai/ui/database_config.py
-praisonai/ui/tools.md
-praisonai/ui/components/aicoder.py
-praisonai/ui/config/chainlit.md
-praisonai/ui/config/translations/bn.json
-praisonai/ui/config/translations/en-US.json
-praisonai/ui/config/translations/gu.json
-praisonai/ui/config/translations/he-IL.json
-praisonai/ui/config/translations/hi.json
-praisonai/ui/config/translations/kn.json
-praisonai/ui/config/translations/ml.json
-praisonai/ui/config/translations/mr.json
-praisonai/ui/config/translations/ta.json
-praisonai/ui/config/translations/te.json
-praisonai/ui/config/translations/zh-CN.json
-praisonai/ui/public/fantasy.svg
-praisonai/ui/public/game.svg
-praisonai/ui/public/logo_dark.png
-praisonai/ui/public/logo_light.png
-praisonai/ui/public/movie.svg
-praisonai/ui/public/praison.css
-praisonai/ui/public/thriller.svg
 praisonai/ui_agents/__init__.py
 praisonai/ui_agents/default_app.py
 praisonai/ui_bot/__init__.py

praisonai-4.6.151/PraisonAI.egg-info/entry_points.txt

@@ -0,0 +1,9 @@
+[console_scripts]
+praisonai = praisonai.__main__:main
+praisonai-call = praisonai.api.call:main
+setup-conda-env = praisonai.setup.setup_conda_env:main
+
+[praisonai.framework_adapters]
+autogen = praisonai.framework_adapters.autogen_adapter:AutoGenFamilyAdapter
+autogen_v2 = praisonai.framework_adapters.autogen_adapter:AutoGenAdapter
+crewai = praisonai.framework_adapters.crewai_adapter:CrewAIAdapter

{praisonai-4.6.149 → praisonai-4.6.151}/PraisonAI.egg-info/requires.txt

@@ -1,11 +1,12 @@
 rich>=13.7
 markdown>=3.5
 pyparsing>=3.0.0
-praisonaiagents>=1.6.152
-praisonai-code>=0.0.48
-praisonai-bot>=0.0.33
-praisonai-train>=0.0.4
-praisonai-browser>=0.0.1
+praisonaiagents>=1.6.154
+praisonai-code>=0.0.50
+praisonai-bot>=0.0.35
+praisonai-train>=0.0.6
+praisonai-browser>=0.0.3
+praisonai-mcp>=0.0.3
 python-dotenv>=0.19.0
 litellm<2,>=1.83.14
 PyYAML>=6.0
@@ -166,6 +167,9 @@ praisonai-tools>=0.1.0
 
 [lite]
 
+[mcp]
+praisonai-mcp[all]
+
 [modal]
 modal>=0.64.0
 

{praisonai-4.6.149 → praisonai-4.6.151}/praisonai/_bootstrap.py

@@ -75,3 +75,19 @@ def ensure_praisonai_browser() -> None:
         root = str(browser_src)
         if root not in sys.path:
             sys.path.insert(0, root)
+
+
+def ensure_praisonai_mcp() -> None:
+    """Ensure ``praisonai_mcp`` can be imported in monorepo dev layouts."""
+    try:
+        import praisonai_mcp  # noqa: F401
+        return
+    except ImportError:
+        pass
+
+    wrapper_src = Path(__file__).resolve().parents[1]  # .../src/praisonai
+    mcp_src = wrapper_src.parent / "praisonai-mcp"
+    if (mcp_src / "praisonai_mcp").is_dir():
+        root = str(mcp_src)
+        if root not in sys.path:
+            sys.path.insert(0, root)

{praisonai-4.6.149 → praisonai-4.6.151}/praisonai/agents_generator.py

@@ -401,7 +401,7 @@ def _resolve_yaml_cli_backend(cli_backend_config, logger):
 
 
 class AgentsGenerator:
-    def __init__(self, agent_file, framework, config_list, log_level=None, agent_callback=None, task_callback=None, agent_yaml=None, tools=None, cli_config=None, adapter_registry=None, tool_timeout_executor=None):
+    def __init__(self, agent_file, framework, config_list, log_level=None, agent_callback=None, task_callback=None, agent_yaml=None, tools=None, cli_config=None, adapter_registry=None, tool_timeout_executor=None, tool_resolver=None):
         """
         Initialize the AgentsGenerator object.
 
@@ -416,6 +416,7 @@ class AgentsGenerator:
             tools (dict, optional): A dictionary containing the tools to be used for the agents. Defaults to None.
             cli_config (dict, optional): CLI configuration to override YAML settings. Defaults to None.
             adapter_registry (FrameworkAdapterRegistry, optional): Registry for framework adapters. Defaults to process default.
+            tool_resolver (ToolResolver, optional): Canonical tool resolver. Defaults to the shared context-local resolver so discovery runs once per run.
 
         Attributes:
             agent_file (str): The path to the agent file.
@@ -448,9 +449,14 @@ class AgentsGenerator:
         elif os.environ.get('LOGLEVEL'):
             self.logger.setLevel(getattr(logging, os.environ.get('LOGLEVEL', 'INFO').upper(), logging.INFO))
         
-        # Initialize tool resolver (single source of truth for tool resolution)
-        from .tool_resolver import ToolResolver
-        self.tool_resolver = ToolResolver()
+        # Initialize tool resolver (single source of truth for tool resolution).
+        # DI-friendly: callers (e.g. AutoGenerator hand-off, tests) may pass a
+        # resolver; otherwise share the context-local default so tool discovery
+        # runs once per run instead of once per generator construction.
+        if tool_resolver is None:
+            from .tool_resolver import _get_default_resolver
+            tool_resolver = _get_default_resolver()
+        self.tool_resolver = tool_resolver
         
         # DI-friendly: tests/multi-tenant runtimes pass their own registry;
         # CLI users get the process default.

{praisonai-4.6.149 → praisonai-4.6.151}/praisonai/api/agent_invoke.py

@@ -168,6 +168,109 @@ def list_registered_agents() -> list:
     return list(_agent_registry.keys())
 
 
+def _is_real_agent(agent: Any) -> bool:
+    """Return True when ``agent`` is a genuine ``praisonaiagents`` ``Agent``.
+
+    Uses ``isinstance`` against the real ``Agent`` class so **subclasses defined
+    in application code** are recognised too (they inherit the per-session
+    machinery and ``clone_for_channel``). Plain mocks / lightweight callables are
+    not ``Agent`` instances, so they fall back to the shared instance for
+    backward compatibility. If ``praisonaiagents`` cannot be imported we treat
+    the object as non-isolatable.
+    """
+    try:
+        from praisonaiagents import Agent
+    except Exception:
+        return False
+    return isinstance(agent, Agent)
+
+
+def _supports_session_isolation(agent: Any) -> bool:
+    """Return True when ``agent`` can be safely cloned per session.
+
+    A real ``Agent`` (or any subclass) exposes the per-session machinery
+    (``_session_id`` binding, ``chat_history`` and a safe clone path). Plain
+    mocks / lightweight callables do not, so they stay on the shared instance to
+    preserve backward compatibility.
+    """
+    if not _is_real_agent(agent):
+        return False
+    if not hasattr(agent, "_session_id"):
+        return False
+    if not hasattr(agent, "chat_history"):
+        return False
+    return callable(getattr(agent, "clone_for_channel", None))
+
+
+def _clone_agent(agent: Any) -> Any:
+    """Create an independent copy of a real ``Agent``.
+
+    Prefers ``clone_for_channel`` (purpose-built for multi-channel isolation
+    with fresh locks), falling back to ``deepcopy``.
+    """
+    clone_for_channel = getattr(agent, "clone_for_channel", None)
+    if callable(clone_for_channel):
+        return clone_for_channel()
+    import copy as _copy
+
+    return _copy.deepcopy(agent)
+
+
+def resolve_session_agent(agent_id: str, session_id: Optional[str]) -> Any:
+    """Resolve an isolated, session-scoped agent for a single request.
+
+    The registry holds a *template* agent, not a live conversation. Every
+    request gets its own clone so concurrent callers never share mutable
+    ``chat_history``:
+
+    - With a ``session_id``: the clone is bound to that session so its history
+      is loaded from (and persisted to) the shared, file-locked session store —
+      giving continuity across requests and isolation between sessions.
+    - Without a ``session_id``: the clone is ephemeral (no session binding), so
+      no global state is mutated.
+
+    Agents that don't support cloning/session binding (e.g. plain mocks) fall
+    back to the shared registry instance for backward compatibility.
+    """
+    template = get_agent(agent_id)
+    if template is None:
+        return None
+
+    if not _supports_session_isolation(template):
+        return template
+
+    try:
+        agent = _clone_agent(template)
+    except Exception as e:
+        # A clone failure must never silently fall back to the shared template:
+        # doing so would leak one session's chat_history into another. Fail the
+        # request instead so isolation is guaranteed.
+        logger.error(
+            f"Failed to clone agent '{agent_id}' for session isolation: {e}"
+        )
+        raise RuntimeError(
+            f"Failed to isolate agent '{agent_id}' for session: {e}"
+        ) from e
+
+    # Reset per-request conversation state so the clone starts clean and
+    # (re)loads the requested session's history lazily on first chat.
+    try:
+        agent.chat_history = []
+    except Exception:
+        pass
+    if hasattr(agent, "_session_store_initialized"):
+        agent._session_store_initialized = False
+    if session_id:
+        agent._session_id = session_id
+        if hasattr(agent, "_history_session_id"):
+            agent._history_session_id = session_id
+    else:
+        agent._session_id = None
+        if hasattr(agent, "_history_session_id"):
+            agent._history_session_id = None
+    return agent
+
+
 def _supports_async_start(agent: Any) -> bool:
     """Return True if agent.astart is a coroutine function."""
     astart = getattr(agent, "astart", None)
@@ -218,8 +321,17 @@ if FASTAPI_AVAILABLE and APIRouter is not None:
         }
         ```
         """
-        # Get agent from registry
-        agent = get_agent(agent_id)
+        # Resolve a per-session isolated agent view so concurrent callers never
+        # share mutable chat_history. A provided session_id gives continuity via
+        # the shared session store; its absence yields an ephemeral conversation.
+        try:
+            agent = resolve_session_agent(agent_id, request.session_id)
+        except Exception as e:
+            logger.error(f"Failed to isolate agent {agent_id}: {e}")
+            raise HTTPException(
+                status_code=500,
+                detail=f"Agent execution failed: {str(e)}"
+            )
         if not agent:
             logger.error(f"Agent not found: {agent_id}")
             raise HTTPException(
@@ -228,7 +340,7 @@ if FASTAPI_AVAILABLE and APIRouter is not None:
             )
         
         try:
-            # Set session ID if provided
+            # Session ID echoed back to the caller
             session_id = request.session_id or "default"
             
             # Apply agent config overrides if provided
@@ -362,15 +474,19 @@ async def invoke_agent_standalone(
     This can be used in environments where FastAPI is not available
     or when integrating with other web frameworks.
     """
-    agent = get_agent(agent_id)
-    if not agent:
+    if get_agent(agent_id) is None:
         return {
             "error": f"Agent '{agent_id}' not found",
             "status": "error",
             "available_agents": list_registered_agents()
         }
-    
+
     try:
+        # Per-session isolated agent view (see resolve_session_agent). Done
+        # inside the try so a clone/isolation failure returns a clean error
+        # rather than leaking one session's history into another.
+        agent = resolve_session_agent(agent_id, session_id)
+
         # Apply config if provided
         if agent_config:
             logger.debug(f"Agent config provided: {agent_config}")

{praisonai-4.6.149 → praisonai-4.6.151}/praisonai/auto.py

@@ -733,10 +733,50 @@ class BaseAutoGenerator:
             raise error[0]
         return result[0]
 
-    @staticmethod
-    def get_available_tools() -> List[str]:
-        """Return list of available tools for agent assignment."""
-        return AVAILABLE_TOOLS.copy()
+    def _get_tool_resolver(self):
+        """Lazily construct the canonical ToolResolver (single source of truth).
+
+        Uses the shared context-local resolver so every generator in a run
+        (auto phase + AgentsGenerator + workflow/job generators) reuses one
+        warm cache instead of repeating full tool discovery. Kept lazy so
+        importing auto.py stays cheap and so a resolver-construction failure
+        never blocks generation — callers fall back to keyword/legacy hints.
+        """
+        resolver = getattr(self, "_tool_resolver", None)
+        if resolver is None:
+            try:
+                from .tool_resolver import _get_default_resolver
+                resolver = _get_default_resolver()
+            except Exception as e:  # pragma: no cover - defensive
+                logger.debug("ToolResolver unavailable (%s); using keyword hints only.", e)
+                resolver = False  # sentinel: attempted, not available
+            self._tool_resolver = resolver
+        return resolver or None
+
+    def _available_tools(self) -> List[str]:
+        """Return the real, installed tool names from the canonical ToolResolver.
+
+        This is the single source of truth shared with AgentsGenerator. Returns
+        an empty list if the resolver is unavailable so callers can fall back.
+        """
+        resolver = self._get_tool_resolver()
+        if resolver is None:
+            return []
+        try:
+            return sorted(resolver.list_available().keys())
+        except Exception as e:  # pragma: no cover - defensive
+            logger.debug("ToolResolver.list_available() failed (%s).", e)
+            return []
+
+    def get_available_tools(self) -> List[str]:
+        """Return list of available tools for agent assignment.
+
+        Routes through the canonical ToolResolver (single source of truth) so
+        the LLM is shown only tools that are actually installed. Falls back to
+        the frozen ``AVAILABLE_TOOLS`` list solely when the resolver is
+        unavailable or returns nothing.
+        """
+        return self._available_tools() or AVAILABLE_TOOLS.copy()
     
     @staticmethod
     def analyze_complexity(topic: str) -> str:
@@ -1103,38 +1143,6 @@ class AutoGenerator(BaseAutoGenerator):
         
         return merged_data
 
-    def _get_tool_resolver(self):
-        """Lazily construct the canonical ToolResolver (single source of truth).
-
-        Kept lazy so importing auto.py stays cheap and so a resolver-construction
-        failure never blocks generation — callers fall back to keyword hints.
-        """
-        resolver = getattr(self, "_tool_resolver", None)
-        if resolver is None:
-            try:
-                from .tool_resolver import ToolResolver
-                resolver = ToolResolver()
-            except Exception as e:  # pragma: no cover - defensive
-                logger.debug("ToolResolver unavailable (%s); using keyword hints only.", e)
-                resolver = False  # sentinel: attempted, not available
-            self._tool_resolver = resolver
-        return resolver or None
-
-    def _available_tools(self) -> List[str]:
-        """Return the real, installed tool names from the canonical ToolResolver.
-
-        This is the single source of truth shared with AgentsGenerator. Returns
-        an empty list if the resolver is unavailable so callers can fall back.
-        """
-        resolver = self._get_tool_resolver()
-        if resolver is None:
-            return []
-        try:
-            return sorted(resolver.list_available().keys())
-        except Exception as e:  # pragma: no cover - defensive
-            logger.debug("ToolResolver.list_available() failed (%s).", e)
-            return []
-
     def discover_tools_for_topic(self) -> List[str]:
         """
         Discover appropriate tools for the topic.

praisonai-4.6.151/praisonai/cli/commands/mcp.py

@@ -0,0 +1,11 @@
+"""C12 shim: implementation moved to ``praisonai_mcp.cli.commands.mcp``."""
+
+import sys as _sys
+
+from praisonai._bootstrap import ensure_praisonai_mcp
+
+ensure_praisonai_mcp()
+
+import praisonai_mcp.cli.commands.mcp as _impl
+
+_sys.modules[__name__] = _impl

{praisonai-4.6.149 → praisonai-4.6.151}/praisonai/code/tools/apply_diff.py

@@ -71,9 +71,10 @@ def apply_diff(
         ... '''
         >>> result = apply_diff("src/main.py", diff)
     """
-    # Resolve path
-    if workspace and not os.path.isabs(path):
-        abs_path = os.path.abspath(os.path.join(workspace, path))
+    # Resolve path — default workspace is cwd so relative paths cannot escape
+    effective_workspace = workspace or os.getcwd()
+    if not os.path.isabs(path):
+        abs_path = os.path.abspath(os.path.join(effective_workspace, path))
     else:
         abs_path = os.path.abspath(path)
     
@@ -87,15 +88,14 @@ def apply_diff(
             'applied_count': 0,
         }
 
-    # Security check
-    if workspace:
-        if not is_path_within_directory(abs_path, workspace):
-            return {
-                'success': False,
-                'error': f"Path '{path}' is outside the workspace",
-                'path': path,
-                'applied_count': 0,
-            }
+    # Security check — confinement always enforced against the workspace
+    if not is_path_within_directory(abs_path, effective_workspace):
+        return {
+            'success': False,
+            'error': f"Path '{path}' is outside the workspace",
+            'path': path,
+            'applied_count': 0,
+        }
     
     # Check if file exists
     if not file_exists(abs_path):

{praisonai-4.6.149 → praisonai-4.6.151}/praisonai/code/tools/search_replace.py

@@ -56,9 +56,10 @@ def search_replace(
         ... ]
         >>> result = search_replace("src/main.py", operations)
     """
-    # Resolve path
-    if workspace and not os.path.isabs(path):
-        abs_path = os.path.abspath(os.path.join(workspace, path))
+    # Resolve path — default workspace is cwd so relative paths cannot escape
+    effective_workspace = workspace or os.getcwd()
+    if not os.path.isabs(path):
+        abs_path = os.path.abspath(os.path.join(effective_workspace, path))
     else:
         abs_path = os.path.abspath(path)
     
@@ -73,16 +74,15 @@ def search_replace(
             'total_replacements': 0,
         }
     
-    # Security check
-    if workspace:
-        if not is_path_within_directory(abs_path, workspace):
-            return {
-                'success': False,
-                'error': f"Path '{path}' is outside the workspace",
-                'path': path,
-                'operations_applied': 0,
-                'total_replacements': 0,
-            }
+    # Security check — confinement always enforced against the workspace
+    if not is_path_within_directory(abs_path, effective_workspace):
+        return {
+            'success': False,
+            'error': f"Path '{path}' is outside the workspace",
+            'path': path,
+            'operations_applied': 0,
+            'total_replacements': 0,
+        }
     
     # Check if file exists
     if not file_exists(abs_path):

{praisonai-4.6.149 → praisonai-4.6.151}/praisonai/code/tools/write_file.py

@@ -177,9 +177,10 @@ def append_to_file(
     Returns:
         Dictionary with success status and details
     """
-    # Resolve path
-    if workspace and not os.path.isabs(path):
-        abs_path = os.path.abspath(os.path.join(workspace, path))
+    # Resolve path — default workspace is cwd so relative paths cannot escape
+    effective_workspace = workspace or os.getcwd()
+    if not os.path.isabs(path):
+        abs_path = os.path.abspath(os.path.join(effective_workspace, path))
     else:
         abs_path = os.path.abspath(path)
     
@@ -192,14 +193,13 @@ def append_to_file(
             'path': path,
         }
     
-    # Security check
-    if workspace:
-        if not is_path_within_directory(abs_path, workspace):
-            return {
-                'success': False,
-                'error': f"Path '{path}' is outside the workspace",
-                'path': path,
-            }
+    # Security check — confinement always enforced against the workspace
+    if not is_path_within_directory(abs_path, effective_workspace):
+        return {
+            'success': False,
+            'error': f"Path '{path}' is outside the workspace",
+            'path': path,
+        }
     
     file_existed = file_exists(abs_path)