PraisonAI 4.6.35__tar.gz → 4.6.37__tar.gz

{praisonai-4.6.35 → praisonai-4.6.37}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: PraisonAI
-Version: 4.6.35
+Version: 4.6.37
 Summary: PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.
 Author: Mervin Praison
 License: MIT
@@ -11,7 +11,7 @@ Description-Content-Type: text/markdown
 Requires-Dist: rich>=13.7
 Requires-Dist: markdown>=3.5
 Requires-Dist: pyparsing>=3.0.0
-Requires-Dist: praisonaiagents>=1.6.35
+Requires-Dist: praisonaiagents>=1.6.37
 Requires-Dist: python-dotenv>=0.19.0
 Requires-Dist: litellm<=1.82.6,>=1.81.0
 Requires-Dist: PyYAML>=6.0

{praisonai-4.6.35 → praisonai-4.6.37}/PraisonAI.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: PraisonAI
-Version: 4.6.35
+Version: 4.6.37
 Summary: PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.
 Author: Mervin Praison
 License: MIT
@@ -11,7 +11,7 @@ Description-Content-Type: text/markdown
 Requires-Dist: rich>=13.7
 Requires-Dist: markdown>=3.5
 Requires-Dist: pyparsing>=3.0.0
-Requires-Dist: praisonaiagents>=1.6.35
+Requires-Dist: praisonaiagents>=1.6.37
 Requires-Dist: python-dotenv>=0.19.0
 Requires-Dist: litellm<=1.82.6,>=1.81.0
 Requires-Dist: PyYAML>=6.0

{praisonai-4.6.35 → praisonai-4.6.37}/PraisonAI.egg-info/requires.txt

@@ -1,7 +1,7 @@
 rich>=13.7
 markdown>=3.5
 pyparsing>=3.0.0
-praisonaiagents>=1.6.35
+praisonaiagents>=1.6.37
 python-dotenv>=0.19.0
 litellm<=1.82.6,>=1.81.0
 PyYAML>=6.0

{praisonai-4.6.35 → praisonai-4.6.37}/praisonai/deploy.py

@@ -57,7 +57,7 @@ class CloudDeployer:
             file.write("FROM python:3.11-slim\n")
             file.write("WORKDIR /app\n")
             file.write("COPY . .\n")
-            file.write("RUN pip install flask praisonai==4.6.35 gunicorn markdown\n")
+            file.write("RUN pip install flask praisonai==4.6.37 gunicorn markdown\n")
             file.write("EXPOSE 8080\n")
             file.write('CMD ["gunicorn", "-b", "0.0.0.0:8080", "api:app"]\n')
             

{praisonai-4.6.35 → praisonai-4.6.37}/praisonai/recipe/registry.py

@@ -174,8 +174,25 @@ def _safe_extractall(tar: tarfile.TarFile, dest_dir: Path) -> None:
             raise RegistryError(
                 f"Refusing to extract path escaping target directory: {member.name}"
             )
+        # Reject symlinks and hardlinks — their linkname may point outside dest_dir
+        # and would not be caught by the member.name checks above.
+        if member.issym() or member.islnk():
+            linkname = member.linkname or ""
+            if linkname.startswith("/"):
+                raise RegistryError(
+                    f"Refusing to extract link with absolute target: {member.name} -> {linkname}"
+                )
+            link_target = (dest_resolved / member_path.parent / linkname).resolve()
+            if not str(link_target).startswith(str(dest_resolved) + os.sep) and link_target != dest_resolved:
+                raise RegistryError(
+                    f"Refusing to extract link escaping target directory: {member.name} -> {linkname}"
+                )
     # All members validated — safe to extract
-    tar.extractall(dest_dir)
+    try:
+        tar.extractall(dest_dir, filter="data")
+    except TypeError:
+        # filter keyword not supported on Python < 3.12; validation above already covers safety
+        tar.extractall(dest_dir)
 
 
 def _atomic_write(file_path: Path, data: bytes) -> None:

praisonai-4.6.37/praisonai/version.py

@@ -0,0 +1 @@
+__version__ = "4.6.37"

{praisonai-4.6.35 → praisonai-4.6.37}/pyproject.toml

@@ -12,7 +12,7 @@ dependencies = [
     "rich>=13.7",
     "markdown>=3.5",
     "pyparsing>=3.0.0",
-    "praisonaiagents>=1.6.35",
+    "praisonaiagents>=1.6.37",
     "python-dotenv>=0.19.0",
     "litellm>=1.81.0,<=1.82.6",
     "PyYAML>=6.0",

praisonai-4.6.35/praisonai/version.py

@@ -1 +0,0 @@
-__version__ = "4.6.35"