PraisonAI 4.6.37__tar.gz → 4.6.39__tar.gz

{praisonai-4.6.37 → praisonai-4.6.39}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: PraisonAI
-Version: 4.6.37
+Version: 4.6.39
 Summary: PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.
 Author: Mervin Praison
 License: MIT
@@ -11,9 +11,9 @@ Description-Content-Type: text/markdown
 Requires-Dist: rich>=13.7
 Requires-Dist: markdown>=3.5
 Requires-Dist: pyparsing>=3.0.0
-Requires-Dist: praisonaiagents>=1.6.37
+Requires-Dist: praisonaiagents>=1.6.39
 Requires-Dist: python-dotenv>=0.19.0
-Requires-Dist: litellm<=1.82.6,>=1.81.0
+Requires-Dist: litellm<2,>=1.83.14
 Requires-Dist: PyYAML>=6.0
 Requires-Dist: mcp>=1.20.0
 Requires-Dist: typer>=0.9.0
@@ -474,8 +474,35 @@ def search(query: str) -> str:
 
 @tool
 def calculate(expression: str) -> float:
-    """Evaluate a math expression."""
-    return eval(expression)
+    """Safely evaluate a numeric arithmetic expression."""
+    import ast
+    import operator
+    
+    # Define allowed operations
+    _OPS = {
+        ast.Add: operator.add,
+        ast.Sub: operator.sub,
+        ast.Mult: operator.mul,
+        ast.Div: operator.truediv,
+        ast.Pow: operator.pow,
+        ast.USub: operator.neg,
+        ast.UAdd: operator.pos,
+    }
+    
+    def _safe_eval(node):
+        if isinstance(node, ast.Constant) and isinstance(node.value, (int, float)):
+            return node.value
+        elif isinstance(node, ast.BinOp) and type(node.op) in _OPS:
+            return _OPS[type(node.op)](_safe_eval(node.left), _safe_eval(node.right))
+        elif isinstance(node, ast.UnaryOp) and type(node.op) in _OPS:
+            return _OPS[type(node.op)](_safe_eval(node.operand))
+        else:
+            raise ValueError("Unsupported expression")
+    
+    try:
+        return _safe_eval(ast.parse(expression, mode="eval").body)
+    except (ValueError, SyntaxError, TypeError, ZeroDivisionError, OverflowError):
+        raise ValueError("Invalid arithmetic expression")
 
 agent = Agent(
     instructions="You are a helpful assistant",
@@ -484,6 +511,7 @@ agent = Agent(
 agent.start("Search for AI news and calculate 15*4")
 ```
 
+> ⚠️ **Security Note:** Never use `eval()`, `exec()`, or `subprocess` in tool functions that process LLM-generated or user-supplied input. Always validate and sanitize inputs to prevent code injection attacks.
 > 📖 [Full tools docs](https://docs.praison.ai/docs/tools/tools) — BaseTool, tool packages, 100+ built-in tools
 
 ### 5. Persistence (Databases)
@@ -510,6 +538,15 @@ pip install "praisonai[claw]"
 praisonai claw
 ```
 
+#### Required Environment Variables
+
+Copy `.env.example` to `.env` and configure the following variables:
+
+| Variable | Required | Description |
+|----------|----------|-------------|
+| `OPENAI_API_KEY` | Yes | OpenAI API key for all LLM calls |
+| `TAVILY_API_KEY` | Yes (Claw) | Tavily key for the built-in web-search tool. Get one free at https://app.tavily.com |
+
 Open **http://localhost:8082** — the dashboard comes with 13 built-in pages: Chat, Agents, Memory, Knowledge, Channels, Guardrails, Cron, and more. Add messaging channels directly from the UI.
 
 > 📖 [Full Claw docs](https://docs.praison.ai/docs/concepts/claw) — platform tokens, CLI options, Docker, and YAML agent mode

{praisonai-4.6.37 → praisonai-4.6.39}/PraisonAI.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: PraisonAI
-Version: 4.6.37
+Version: 4.6.39
 Summary: PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.
 Author: Mervin Praison
 License: MIT
@@ -11,9 +11,9 @@ Description-Content-Type: text/markdown
 Requires-Dist: rich>=13.7
 Requires-Dist: markdown>=3.5
 Requires-Dist: pyparsing>=3.0.0
-Requires-Dist: praisonaiagents>=1.6.37
+Requires-Dist: praisonaiagents>=1.6.39
 Requires-Dist: python-dotenv>=0.19.0
-Requires-Dist: litellm<=1.82.6,>=1.81.0
+Requires-Dist: litellm<2,>=1.83.14
 Requires-Dist: PyYAML>=6.0
 Requires-Dist: mcp>=1.20.0
 Requires-Dist: typer>=0.9.0
@@ -474,8 +474,35 @@ def search(query: str) -> str:
 
 @tool
 def calculate(expression: str) -> float:
-    """Evaluate a math expression."""
-    return eval(expression)
+    """Safely evaluate a numeric arithmetic expression."""
+    import ast
+    import operator
+    
+    # Define allowed operations
+    _OPS = {
+        ast.Add: operator.add,
+        ast.Sub: operator.sub,
+        ast.Mult: operator.mul,
+        ast.Div: operator.truediv,
+        ast.Pow: operator.pow,
+        ast.USub: operator.neg,
+        ast.UAdd: operator.pos,
+    }
+    
+    def _safe_eval(node):
+        if isinstance(node, ast.Constant) and isinstance(node.value, (int, float)):
+            return node.value
+        elif isinstance(node, ast.BinOp) and type(node.op) in _OPS:
+            return _OPS[type(node.op)](_safe_eval(node.left), _safe_eval(node.right))
+        elif isinstance(node, ast.UnaryOp) and type(node.op) in _OPS:
+            return _OPS[type(node.op)](_safe_eval(node.operand))
+        else:
+            raise ValueError("Unsupported expression")
+    
+    try:
+        return _safe_eval(ast.parse(expression, mode="eval").body)
+    except (ValueError, SyntaxError, TypeError, ZeroDivisionError, OverflowError):
+        raise ValueError("Invalid arithmetic expression")
 
 agent = Agent(
     instructions="You are a helpful assistant",
@@ -484,6 +511,7 @@ agent = Agent(
 agent.start("Search for AI news and calculate 15*4")
 ```
 
+> ⚠️ **Security Note:** Never use `eval()`, `exec()`, or `subprocess` in tool functions that process LLM-generated or user-supplied input. Always validate and sanitize inputs to prevent code injection attacks.
 > 📖 [Full tools docs](https://docs.praison.ai/docs/tools/tools) — BaseTool, tool packages, 100+ built-in tools
 
 ### 5. Persistence (Databases)
@@ -510,6 +538,15 @@ pip install "praisonai[claw]"
 praisonai claw
 ```
 
+#### Required Environment Variables
+
+Copy `.env.example` to `.env` and configure the following variables:
+
+| Variable | Required | Description |
+|----------|----------|-------------|
+| `OPENAI_API_KEY` | Yes | OpenAI API key for all LLM calls |
+| `TAVILY_API_KEY` | Yes (Claw) | Tavily key for the built-in web-search tool. Get one free at https://app.tavily.com |
+
 Open **http://localhost:8082** — the dashboard comes with 13 built-in pages: Chat, Agents, Memory, Knowledge, Channels, Guardrails, Cron, and more. Add messaging channels directly from the UI.
 
 > 📖 [Full Claw docs](https://docs.praison.ai/docs/concepts/claw) — platform tokens, CLI options, Docker, and YAML agent mode

{praisonai-4.6.37 → praisonai-4.6.39}/PraisonAI.egg-info/SOURCES.txt

@@ -11,6 +11,7 @@ praisonai/__main__.py
 praisonai/_approval_spec.py
 praisonai/_async_bridge.py
 praisonai/_logging.py
+praisonai/_registry.py
 praisonai/_safe_loader.py
 praisonai/agent.py
 praisonai/agent_scheduler.py
@@ -68,8 +69,10 @@ praisonai/bots/_config_schema.py
 praisonai/bots/_debounce.py
 praisonai/bots/_defaults.py
 praisonai/bots/_discord_approval.py
+praisonai/bots/_dlq.py
 praisonai/bots/_email_utils.py
 praisonai/bots/_http_approval.py
+praisonai/bots/_mirror.py
 praisonai/bots/_pairing_ui.py
 praisonai/bots/_protocol_mixin.py
 praisonai/bots/_rate_limit.py
@@ -86,6 +89,7 @@ praisonai/bots/bot.py
 praisonai/bots/botos.py
 praisonai/bots/discord.py
 praisonai/bots/email.py
+praisonai/bots/linear.py
 praisonai/bots/media.py
 praisonai/bots/slack.py
 praisonai/bots/telegram.py
@@ -492,6 +496,7 @@ praisonai/framework_adapters/base.py
 praisonai/framework_adapters/crewai_adapter.py
 praisonai/framework_adapters/praisonai_adapter.py
 praisonai/framework_adapters/registry.py
+praisonai/framework_adapters/validators.py
 praisonai/gateway/__init__.py
 praisonai/gateway/auth.py
 praisonai/gateway/cookie_auth.py
@@ -542,6 +547,7 @@ praisonai/jobs/router.py
 praisonai/jobs/server.py
 praisonai/jobs/store.py
 praisonai/llm/__init__.py
+praisonai/llm/env.py
 praisonai/llm/registry.py
 praisonai/mcp_server/__init__.py
 praisonai/mcp_server/cli.py
@@ -661,6 +667,8 @@ praisonai/replay/reader.py
 praisonai/replay/storage.py
 praisonai/replay/writer.py
 praisonai/sandbox/__init__.py
+praisonai/sandbox/_compat.py
+praisonai/sandbox/_shell.py
 praisonai/sandbox/daytona.py
 praisonai/sandbox/docker.py
 praisonai/sandbox/modal.py

{praisonai-4.6.37 → praisonai-4.6.39}/PraisonAI.egg-info/requires.txt

@@ -1,9 +1,9 @@
 rich>=13.7
 markdown>=3.5
 pyparsing>=3.0.0
-praisonaiagents>=1.6.37
+praisonaiagents>=1.6.39
 python-dotenv>=0.19.0
-litellm<=1.82.6,>=1.81.0
+litellm<2,>=1.83.14
 PyYAML>=6.0
 mcp>=1.20.0
 typer>=0.9.0

{praisonai-4.6.37 → praisonai-4.6.39}/README.md

@@ -294,8 +294,35 @@ def search(query: str) -> str:
 
 @tool
 def calculate(expression: str) -> float:
-    """Evaluate a math expression."""
-    return eval(expression)
+    """Safely evaluate a numeric arithmetic expression."""
+    import ast
+    import operator
+    
+    # Define allowed operations
+    _OPS = {
+        ast.Add: operator.add,
+        ast.Sub: operator.sub,
+        ast.Mult: operator.mul,
+        ast.Div: operator.truediv,
+        ast.Pow: operator.pow,
+        ast.USub: operator.neg,
+        ast.UAdd: operator.pos,
+    }
+    
+    def _safe_eval(node):
+        if isinstance(node, ast.Constant) and isinstance(node.value, (int, float)):
+            return node.value
+        elif isinstance(node, ast.BinOp) and type(node.op) in _OPS:
+            return _OPS[type(node.op)](_safe_eval(node.left), _safe_eval(node.right))
+        elif isinstance(node, ast.UnaryOp) and type(node.op) in _OPS:
+            return _OPS[type(node.op)](_safe_eval(node.operand))
+        else:
+            raise ValueError("Unsupported expression")
+    
+    try:
+        return _safe_eval(ast.parse(expression, mode="eval").body)
+    except (ValueError, SyntaxError, TypeError, ZeroDivisionError, OverflowError):
+        raise ValueError("Invalid arithmetic expression")
 
 agent = Agent(
     instructions="You are a helpful assistant",
@@ -304,6 +331,7 @@ agent = Agent(
 agent.start("Search for AI news and calculate 15*4")
 ```
 
+> ⚠️ **Security Note:** Never use `eval()`, `exec()`, or `subprocess` in tool functions that process LLM-generated or user-supplied input. Always validate and sanitize inputs to prevent code injection attacks.
 > 📖 [Full tools docs](https://docs.praison.ai/docs/tools/tools) — BaseTool, tool packages, 100+ built-in tools
 
 ### 5. Persistence (Databases)
@@ -330,6 +358,15 @@ pip install "praisonai[claw]"
 praisonai claw
 ```
 
+#### Required Environment Variables
+
+Copy `.env.example` to `.env` and configure the following variables:
+
+| Variable | Required | Description |
+|----------|----------|-------------|
+| `OPENAI_API_KEY` | Yes | OpenAI API key for all LLM calls |
+| `TAVILY_API_KEY` | Yes (Claw) | Tavily key for the built-in web-search tool. Get one free at https://app.tavily.com |
+
 Open **http://localhost:8082** — the dashboard comes with 13 built-in pages: Chat, Agents, Memory, Knowledge, Channels, Guardrails, Cron, and more. Add messaging channels directly from the UI.
 
 > 📖 [Full Claw docs](https://docs.praison.ai/docs/concepts/claw) — platform tokens, CLI options, Docker, and YAML agent mode

{praisonai-4.6.37 → praisonai-4.6.39}/praisonai/__init__.py

@@ -1,7 +1,4 @@
-# Suppress crewai.cli.config logger BEFORE any imports to prevent INFO log
-import logging
 import threading
-logging.getLogger('crewai.cli.config').setLevel(logging.ERROR)
 
 # Version is lightweight, import directly
 from .version import __version__
@@ -39,10 +36,34 @@ __all__ = [
 _telemetry_lock = threading.Lock()
 _telemetry_initialized = False
 
+def _get_telemetry_defaults() -> dict[str, str]:
+    """Get telemetry environment defaults without mutating os.environ.
+    
+    Returns:
+        Dict of environment variable defaults for telemetry
+    """
+    import os
+    defaults = {}
+    
+    # Respect any value the user already set
+    if "OTEL_SDK_DISABLED" not in os.environ:
+        langfuse_configured = bool(
+            os.getenv("LANGFUSE_PUBLIC_KEY")
+            or os.path.exists(os.path.expanduser("~/.praisonai/langfuse.env"))
+        )
+        defaults["OTEL_SDK_DISABLED"] = "false" if langfuse_configured else "true"
+    
+    if "EC_TELEMETRY" not in os.environ:
+        defaults["EC_TELEMETRY"] = "false"
+    
+    return defaults
+
+
 def _ensure_telemetry_defaults() -> None:
     """Apply telemetry env defaults exactly once, on first observability use.
     
     Thread-safe implementation using double-checked locking pattern.
+    DEPRECATED: Use _apply_telemetry_defaults() with explicit config instead.
     """
     global _telemetry_initialized
     if _telemetry_initialized:  # fast path, OK without lock
@@ -50,18 +71,21 @@ def _ensure_telemetry_defaults() -> None:
     with _telemetry_lock:
         if _telemetry_initialized:
             return
-        import os
-        # Respect any value the user already set
-        if "OTEL_SDK_DISABLED" not in os.environ:
-            langfuse_configured = bool(
-                os.getenv("LANGFUSE_PUBLIC_KEY")
-                or os.path.exists(os.path.expanduser("~/.praisonai/langfuse.env"))
-            )
-            os.environ["OTEL_SDK_DISABLED"] = "false" if langfuse_configured else "true"
-        os.environ.setdefault("EC_TELEMETRY", "false")  # respect user overrides
+        _apply_telemetry_defaults(_get_telemetry_defaults())
         _telemetry_initialized = True
 
 
+def _apply_telemetry_defaults(env_vars: dict[str, str]) -> None:
+    """Apply telemetry defaults to os.environ.
+    
+    Args:
+        env_vars: Dict of environment variables to set
+    """
+    import os
+    for key, value in env_vars.items():
+        os.environ.setdefault(key, value)
+
+
 # Lazy loading for heavy imports
 def __getattr__(name):
     """Lazy load heavy modules to improve import time."""

praisonai-4.6.39/praisonai/_registry.py

@@ -0,0 +1,228 @@
+"""Generic plugin registry implementation for PraisonAI.
+
+This module provides a unified registry pattern to replace the divergent singleton
+implementations across the codebase. It supports both built-in and entry-point
+based plugin discovery with thread-safe registration and dependency injection.
+"""
+
+from __future__ import annotations
+
+import threading
+from importlib.metadata import entry_points
+from typing import Callable, Dict, Generic, Optional, Type, TypeVar
+import logging
+
+T = TypeVar("T")
+logger = logging.getLogger(__name__)
+
+
+class PluginRegistry(Generic[T]):
+    """Generic plugin registry: builtins + entry points + runtime register().
+    
+    This replaces the singleton pattern with dependency injection while maintaining
+    the same functionality. Supports:
+    - Built-in plugins with lazy loading
+    - Entry points discovery
+    - Runtime registration
+    - Alias support for alternative names
+    - Thread-safe operations
+    """
+
+    def __init__(
+        self, 
+        *,
+        entry_point_group: str,
+        builtins: Optional[Dict[str, Callable[[], Type[T]]]] = None
+    ) -> None:
+        """Initialize the registry.
+        
+        Args:
+            entry_point_group: Entry points group name for plugin discovery
+            builtins: Dict of name -> loader function for built-in plugins
+        """
+        self._entry_point_group = entry_point_group
+        self._items: Dict[str, Type[T]] = {}
+        self._aliases: Dict[str, str] = {}  # alias -> canonical name
+        self._lock = threading.Lock()
+        
+        # Load built-in plugins with error handling
+        if builtins:
+            for name, loader in builtins.items():
+                try:
+                    self._items[name] = loader()
+                except ImportError:
+                    # Built-in plugin dependencies not available, skip
+                    pass
+                except Exception:
+                    # Log other errors but don't crash initialization
+                    logger.warning("Failed to load built-in plugin %r", name, exc_info=True)
+        
+        self._load_entry_points()
+
+    def _load_entry_points(self) -> None:
+        """Load plugins from entry points."""
+        try:
+            for ep in entry_points(group=self._entry_point_group):
+                try:
+                    plugin_class = ep.load()
+                    with self._lock:
+                        self._items[ep.name] = plugin_class
+                except Exception:
+                    # Do not break plugin dispatch because one plugin is broken
+                    logger.warning(
+                        "Failed to load plugin %r from entry point",
+                        ep.name,
+                        exc_info=True,
+                    )
+        except Exception:
+            # entry_points() might not be available in older Python versions
+            logger.debug("Entry points not available for group %s", self._entry_point_group)
+
+    def register(
+        self, 
+        name: str, 
+        cls: Type[T], 
+        *, 
+        aliases: Optional[list[str]] = None
+    ) -> None:
+        """Register a plugin at runtime.
+        
+        Args:
+            name: Plugin name
+            cls: Plugin class
+            aliases: Optional list of alias names for this plugin
+        """
+        with self._lock:
+            canonical_name = name.lower()
+            self._items[canonical_name] = cls
+            
+            # Register aliases
+            if aliases:
+                for alias in aliases:
+                    normalized_alias = alias.lower()
+                    self._aliases[normalized_alias] = canonical_name
+
+    def unregister(self, name: str) -> bool:
+        """Unregister a plugin.
+        
+        Args:
+            name: Plugin name
+            
+        Returns:
+            True if plugin was found and removed, False otherwise
+        """
+        with self._lock:
+            normalized_name = name.lower()
+            
+            # Check if it's an alias
+            if normalized_name in self._aliases:
+                del self._aliases[normalized_name]
+                return True
+            
+            # Check if it's a canonical name
+            if normalized_name in self._items:
+                # Remove all aliases pointing to this plugin
+                aliases_to_remove = [
+                    alias for alias, canonical in self._aliases.items()
+                    if canonical == normalized_name
+                ]
+                for alias in aliases_to_remove:
+                    del self._aliases[alias]
+                
+                del self._items[normalized_name]
+                return True
+            
+            return False
+
+    def resolve(self, name: str) -> Type[T]:
+        """Resolve a plugin name to its class.
+        
+        Args:
+            name: Plugin name
+            
+        Returns:
+            Plugin class
+            
+        Raises:
+            ValueError: If plugin is not found
+        """
+        with self._lock:
+            normalized_name = name.lower()
+            
+            # Resolve alias to canonical name
+            canonical_name = self._aliases.get(normalized_name, normalized_name)
+            cls = self._items.get(canonical_name)
+            
+            # Capture available plugins snapshot while holding lock
+            # to avoid race condition between check and error message
+            if cls is None:
+                available_plugins = sorted(self._items.keys())
+                available_aliases = sorted(self._aliases.keys())
+                available_snapshot = available_plugins + available_aliases
+            else:
+                available_snapshot = None
+        
+        if cls is None:
+            raise ValueError(
+                f"Unknown {self._entry_point_group} plugin: {name!r}. "
+                f"Available: {available_snapshot}"
+            )
+        return cls
+
+    def create(self, name: str, *args, **kwargs) -> T:
+        """Create an instance of the specified plugin.
+        
+        Args:
+            name: Plugin name
+            *args, **kwargs: Arguments to pass to plugin constructor
+            
+        Returns:
+            Plugin instance
+            
+        Raises:
+            ValueError: If plugin is not found
+        """
+        cls = self.resolve(name)
+        return cls(*args, **kwargs)
+
+    def list_names(self) -> list[str]:
+        """List all registered plugin names.
+        
+        Returns:
+            Sorted list of plugin names
+        """
+        with self._lock:
+            return sorted(self._items.keys())
+
+    def is_available(self, name: str) -> bool:
+        """Check if a plugin is available.
+        
+        Args:
+            name: Plugin name
+            
+        Returns:
+            True if plugin exists and can be created
+        """
+        try:
+            self.resolve(name)
+            return True
+        except ValueError:
+            return False
+
+    def list_aliases(self) -> Dict[str, str]:
+        """List all aliases and their target plugins.
+        
+        Returns:
+            Dict mapping alias -> canonical name
+        """
+        with self._lock:
+            return dict(self._aliases)
+
+    def list_all_names(self) -> list[str]:
+        """List all names including aliases.
+        
+        Returns:
+            Sorted list of all registered names and aliases
+        """
+        with self._lock:
+            return sorted(list(self._items.keys()) + list(self._aliases.keys()))