PraisonAI 4.6.58__tar.gz → 4.6.59__tar.gz

{praisonai-4.6.58 → praisonai-4.6.59}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: PraisonAI
-Version: 4.6.58
+Version: 4.6.59
 Summary: PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.
 Author: Mervin Praison
 License: MIT
@@ -11,7 +11,7 @@ Description-Content-Type: text/markdown
 Requires-Dist: rich>=13.7
 Requires-Dist: markdown>=3.5
 Requires-Dist: pyparsing>=3.0.0
-Requires-Dist: praisonaiagents>=1.6.58
+Requires-Dist: praisonaiagents>=1.6.59
 Requires-Dist: python-dotenv>=0.19.0
 Requires-Dist: litellm<2,>=1.83.14
 Requires-Dist: PyYAML>=6.0

{praisonai-4.6.58 → praisonai-4.6.59}/PraisonAI.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: PraisonAI
-Version: 4.6.58
+Version: 4.6.59
 Summary: PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.
 Author: Mervin Praison
 License: MIT
@@ -11,7 +11,7 @@ Description-Content-Type: text/markdown
 Requires-Dist: rich>=13.7
 Requires-Dist: markdown>=3.5
 Requires-Dist: pyparsing>=3.0.0
-Requires-Dist: praisonaiagents>=1.6.58
+Requires-Dist: praisonaiagents>=1.6.59
 Requires-Dist: python-dotenv>=0.19.0
 Requires-Dist: litellm<2,>=1.83.14
 Requires-Dist: PyYAML>=6.0

{praisonai-4.6.58 → praisonai-4.6.59}/PraisonAI.egg-info/SOURCES.txt

@@ -97,6 +97,7 @@ praisonai/bots/linear.py
 praisonai/bots/media.py
 praisonai/bots/slack.py
 praisonai/bots/telegram.py
+praisonai/bots/webhook_security.py
 praisonai/bots/whatsapp.py
 praisonai/browser/__init__.py
 praisonai/browser/agent.py
@@ -447,6 +448,7 @@ praisonai/code/utils/file_utils.py
 praisonai/code/utils/ignore_utils.py
 praisonai/code/utils/text_utils.py
 praisonai/context/__init__.py
+praisonai/context/_storage_path.py
 praisonai/context/artifact_store.py
 praisonai/context/config.py
 praisonai/context/history_store.py
@@ -571,6 +573,7 @@ praisonai/integrations/compute/modal_compute.py
 praisonai/jobs/__init__.py
 praisonai/jobs/executor.py
 praisonai/jobs/models.py
+praisonai/jobs/path_validation.py
 praisonai/jobs/router.py
 praisonai/jobs/server.py
 praisonai/jobs/store.py

{praisonai-4.6.58 → praisonai-4.6.59}/PraisonAI.egg-info/requires.txt

@@ -1,7 +1,7 @@
 rich>=13.7
 markdown>=3.5
 pyparsing>=3.0.0
-praisonaiagents>=1.6.58
+praisonaiagents>=1.6.59
 python-dotenv>=0.19.0
 litellm<2,>=1.83.14
 PyYAML>=6.0

{praisonai-4.6.58 → praisonai-4.6.59}/praisonai/app/agentos.py

@@ -7,6 +7,8 @@ It creates a FastAPI-based web service for deploying agents.
 
 from typing import Any, Dict, List, Optional, Union
 
+import os
+
 from praisonaiagents import AgentOSConfig, AgentOSProtocol
 
 
@@ -112,6 +114,25 @@ class AgentOS:
         
         # Register routes
         self._register_routes(app)
+
+        launch_token = self.config.api_key or os.environ.get("PRAISONAI_AGENTOS_API_KEY")
+        if launch_token:
+            from starlette.middleware.base import BaseHTTPMiddleware
+            from starlette.responses import JSONResponse
+
+            expected = launch_token
+
+            class _AgentOSAuthMiddleware(BaseHTTPMiddleware):
+                async def dispatch(self, request, call_next):
+                    if request.url.path in ("/health", "/"):
+                        return await call_next(request)
+                    auth = request.headers.get("Authorization", "")
+                    token = auth[7:] if auth.startswith("Bearer ") else request.headers.get("X-API-Key", "")
+                    if token != expected:
+                        return JSONResponse({"error": "Unauthorized"}, status_code=401)
+                    return await call_next(request)
+
+            app.add_middleware(_AgentOSAuthMiddleware)
         
         return app
     

{praisonai-4.6.58 → praisonai-4.6.59}/praisonai/bots/_discord_approval.py

@@ -253,6 +253,11 @@ class DiscordApproval:
                     if author.get("bot"):
                         continue
 
+                    # Only accept replies to the approval message
+                    ref = msg.get("message_reference") or {}
+                    if ref.get("message_id") != message_id:
+                        continue
+
                     text = msg.get("content", "").strip()
                     user_id = author.get("id", "unknown")
                     username = author.get("username", user_id)

{praisonai-4.6.58 → praisonai-4.6.59}/praisonai/bots/_http_approval.py

@@ -131,17 +131,20 @@ class HTTPApproval:
 
     def _build_html(self, request_id: str, info: Dict[str, Any]) -> str:
         """Build a minimal approval page."""
-        tool_name = info.get("tool_name", "unknown")
-        risk_level = info.get("risk_level", "unknown")
-        agent_name = info.get("agent_name", "")
+        import html as html_module
+
+        tool_name = html_module.escape(str(info.get("tool_name", "unknown")))
+        risk_level = html_module.escape(str(info.get("risk_level", "unknown")))
+        agent_name = html_module.escape(str(info.get("agent_name", "")))
         arguments = info.get("arguments", {})
 
         args_html = ""
         for k, v in arguments.items():
-            val_str = str(v)
+            val_str = html_module.escape(str(v))
             if len(val_str) > 200:
                 val_str = val_str[:197] + "..."
-            args_html += f"<tr><td><code>{k}</code></td><td><code>{val_str}</code></td></tr>"
+            key_str = html_module.escape(str(k))
+            args_html += f"<tr><td><code>{key_str}</code></td><td><code>{val_str}</code></td></tr>"
 
         risk_colors = {
             "critical": "#FF0000", "high": "#FF8C00",

{praisonai-4.6.58 → praisonai-4.6.59}/praisonai/bots/linear.py

@@ -240,12 +240,16 @@ class LinearBot(ChatCommandMixin, MessageHookMixin):
             # Read raw body for signature verification
             raw_body = await request.read()
             
-            # Verify signature if secret is configured
+            from praisonai.bots.webhook_security import webhooks_require_verification
+
             if self._signing_secret:
                 signature = request.headers.get("Linear-Signature", "")
                 if not self._verify_signature(raw_body, signature):
                     logger.warning("Invalid webhook signature")
                     return web.Response(status=401, text="Invalid signature")
+            elif webhooks_require_verification():
+                logger.warning("Webhook rejected: signing secret not configured")
+                return web.Response(status=401, text="Webhook verification not configured")
             
             # Parse JSON body
             try:

{praisonai-4.6.58 → praisonai-4.6.59}/praisonai/bots/slack.py

@@ -309,6 +309,21 @@ class SlackBot(ChatCommandMixin, MessageHookMixin):
         async def handle_mention(event, say):
             if event.get("bot_id"):
                 return
+
+            bot_message = self._convert_event_to_message(event)
+            bot_message._channel_type = "slack"
+
+            if not self.config.is_channel_allowed(
+                bot_message.channel.channel_id if bot_message.channel else ""
+            ):
+                return
+
+            user_id = bot_message.sender.user_id if bot_message.sender else ""
+            is_explicitly_allowed = bool(self.config.allowed_users) and self.config.is_user_allowed(user_id)
+            if not is_explicitly_allowed:
+                user_allowed = await UnknownUserHandler.handle(bot_message, self._bot_context)
+                if not user_allowed:
+                    return
             
             text = event.get("text", "")
             if self._bot_user:

praisonai-4.6.59/praisonai/bots/webhook_security.py

@@ -0,0 +1,14 @@
+"""Shared webhook verification helpers for bot integrations."""
+
+from __future__ import annotations
+
+import os
+
+
+def webhooks_require_verification() -> bool:
+    """Return True unless explicit dev override disables signature checks."""
+    return os.environ.get("PRAISONAI_INSECURE_WEBHOOKS", "").lower() not in (
+        "true",
+        "1",
+        "yes",
+    )

{praisonai-4.6.58 → praisonai-4.6.59}/praisonai/bots/whatsapp.py

@@ -585,12 +585,16 @@ class WhatsAppBot(ChatCommandMixin, MessageHookMixin):
         try:
             body = await request.read()
 
-            # Verify signature if app_secret is configured
+            from praisonai.bots.webhook_security import webhooks_require_verification
+
             if self._app_secret:
                 signature = request.headers.get("X-Hub-Signature-256", "")
                 if not self._verify_signature(body, signature):
                     logger.warning("Invalid webhook signature")
                     return web.Response(status=403, text="Invalid signature")
+            elif webhooks_require_verification():
+                logger.warning("Webhook rejected: app secret not configured")
+                return web.Response(status=403, text="Webhook verification not configured")
 
             data = json.loads(body)
         except Exception as e:

{praisonai-4.6.58 → praisonai-4.6.59}/praisonai/cli/commands/recipe.py

@@ -562,6 +562,15 @@ def recipe_serve(
         print(f"   Auth: API Key enabled")
     if workers > 1:
         print(f"   Workers: {workers}")
+
+    auth_mode = serve_config.get("auth", "none")
+    if host not in ("127.0.0.1", "localhost") and auth_mode == "none" and not api_key:
+        print(
+            "\n\033[91mError:\033[0m Auth required for non-localhost binding. "
+            "Use --api-key or --auth api-key",
+            file=sys.stderr,
+        )
+        raise typer.Exit(1)
     
     try:
         from praisonai.recipe.serve import serve, load_config

{praisonai-4.6.58 → praisonai-4.6.59}/praisonai/cli/commands/ui.py

@@ -111,7 +111,7 @@ def _launch_aiui_app(
 def ui(
     ctx: typer.Context,
     port: int = typer.Option(8081, "--port", "-p", help="Port to run chat UI on"),
-    host: str = typer.Option("0.0.0.0", "--host", help="Host to bind to"),
+    host: str = typer.Option("127.0.0.1", "--host", help="Host to bind to"),
     app_file: Optional[str] = typer.Option(
         None, "--app", "-a", help="Custom app.py file (default: ~/.praisonai/ui/app.py)"
     ),
@@ -183,7 +183,7 @@ def ui(
 @app.command()
 def agents(
     port: int = typer.Option(8083, "--port", "-p", help="Port to run agents UI on"),
-    host: str = typer.Option("0.0.0.0", "--host", help="Host to bind to"),
+    host: str = typer.Option("127.0.0.1", "--host", help="Host to bind to"),
     app_file: Optional[str] = typer.Option(
         None, "--app", "-a", help="Custom app.py file"
     ),
@@ -201,7 +201,7 @@ def agents(
 @app.command()
 def bot(
     port: int = typer.Option(8084, "--port", "-p", help="Port to run bot UI on"),
-    host: str = typer.Option("0.0.0.0", "--host", help="Host to bind to"),
+    host: str = typer.Option("127.0.0.1", "--host", help="Host to bind to"),
     app_file: Optional[str] = typer.Option(
         None, "--app", "-a", help="Custom app.py file"
     ),
@@ -219,7 +219,7 @@ def bot(
 @app.command()
 def realtime(
     port: int = typer.Option(8085, "--port", "-p", help="Port to run realtime UI on"),
-    host: str = typer.Option("0.0.0.0", "--host", help="Host to bind to"),
+    host: str = typer.Option("127.0.0.1", "--host", help="Host to bind to"),
     app_file: Optional[str] = typer.Option(
         None, "--app", "-a", help="Custom app.py file"
     ),

{praisonai-4.6.58 → praisonai-4.6.59}/praisonai/code/tools/read_file.py

@@ -52,21 +52,21 @@ def read_file(
         >>> if result['success']:
         ...     print(result['content'])
     """
-    # Resolve path
+    # Resolve path — default workspace to cwd when unset (fail-closed boundary)
+    effective_workspace = workspace if workspace is not None else os.getcwd()
     if workspace and not os.path.isabs(path):
-        abs_path = os.path.abspath(os.path.join(workspace, path))
+        abs_path = os.path.abspath(os.path.join(effective_workspace, path))
     else:
         abs_path = os.path.abspath(path)
     
-    # Security check - ensure path is within workspace if specified
-    if workspace:
-        if not is_path_within_directory(abs_path, workspace):
-            return {
-                'success': False,
-                'error': f"Path '{path}' is outside the workspace",
-                'content': None,
-                'total_lines': 0,
-            }
+    # Security check - ensure path is within workspace
+    if not is_path_within_directory(abs_path, effective_workspace):
+        return {
+            'success': False,
+            'error': f"Path '{path}' is outside the workspace",
+            'content': None,
+            'total_lines': 0,
+        }
     
     # Check if file exists
     if not file_exists(abs_path):

praisonai-4.6.59/praisonai/context/_storage_path.py

@@ -0,0 +1,12 @@
+"""Path helpers for dynamic-context storage (no traversal in run/agent ids)."""
+
+from __future__ import annotations
+
+
+def safe_storage_id(value: str, label: str = "id") -> str:
+    """Reject path separators and parent-directory segments in storage keys."""
+    if not value or value in (".", ".."):
+        raise ValueError(f"Invalid {label}")
+    if ".." in value or "/" in value or "\\" in value:
+        raise ValueError(f"Invalid {label}: path separators not allowed")
+    return value

{praisonai-4.6.58 → praisonai-4.6.59}/praisonai/context/artifact_store.py

@@ -77,9 +77,22 @@ class FileSystemArtifactStore:
     
     def _get_artifact_dir(self, run_id: str, agent_id: str) -> Path:
         """Get the directory for storing artifacts."""
+        from ._storage_path import safe_storage_id
+
+        safe_storage_id(run_id, "run_id")
+        safe_storage_id(agent_id, "agent_id")
         artifact_dir = self.base_dir / run_id / "artifacts" / agent_id
         artifact_dir.mkdir(parents=True, exist_ok=True)
         return artifact_dir
+
+    def _resolve_artifact_path(self, ref_path: str) -> Path:
+        """Ensure artifact reads stay under the configured base directory."""
+        file_path = Path(ref_path).expanduser().resolve()
+        try:
+            file_path.relative_to(self.base_dir)
+        except ValueError as exc:
+            raise FileNotFoundError(f"Artifact outside storage: {ref_path}") from exc
+        return file_path
     
     def _detect_mime_type(self, content: Any) -> str:
         """Detect MIME type from content."""
@@ -221,7 +234,7 @@ class FileSystemArtifactStore:
         Returns:
             The deserialized content
         """
-        file_path = Path(ref.path)
+        file_path = self._resolve_artifact_path(ref.path)
         if not file_path.exists():
             raise FileNotFoundError(f"Artifact not found: {ref.path}")
         
@@ -246,7 +259,7 @@ class FileSystemArtifactStore:
         Returns:
             String containing the last N lines
         """
-        file_path = Path(ref.path)
+        file_path = self._resolve_artifact_path(ref.path)
         if not file_path.exists():
             raise FileNotFoundError(f"Artifact not found: {ref.path}")
         
@@ -290,7 +303,7 @@ class FileSystemArtifactStore:
         Returns:
             String containing the first N lines
         """
-        file_path = Path(ref.path)
+        file_path = self._resolve_artifact_path(ref.path)
         if not file_path.exists():
             raise FileNotFoundError(f"Artifact not found: {ref.path}")
         
@@ -322,7 +335,7 @@ class FileSystemArtifactStore:
         Returns:
             List of GrepMatch objects
         """
-        file_path = Path(ref.path)
+        file_path = self._resolve_artifact_path(ref.path)
         if not file_path.exists():
             raise FileNotFoundError(f"Artifact not found: {ref.path}")
         
@@ -372,7 +385,7 @@ class FileSystemArtifactStore:
         Returns:
             String containing the requested lines
         """
-        file_path = Path(ref.path)
+        file_path = self._resolve_artifact_path(ref.path)
         if not file_path.exists():
             raise FileNotFoundError(f"Artifact not found: {ref.path}")
         
@@ -397,7 +410,7 @@ class FileSystemArtifactStore:
         Returns:
             True if deleted successfully
         """
-        file_path = Path(ref.path)
+        file_path = self._resolve_artifact_path(ref.path)
         meta_path = file_path.with_suffix(file_path.suffix + ".meta")
         
         deleted = False

{praisonai-4.6.58 → praisonai-4.6.59}/praisonai/context/history_store.py

@@ -63,6 +63,10 @@ class HistoryStore:
     
     def _get_history_path(self, run_id: str, agent_id: str) -> Path:
         """Get the path to the history file."""
+        from ._storage_path import safe_storage_id
+
+        safe_storage_id(run_id, "run_id")
+        safe_storage_id(agent_id, "agent_id")
         history_dir = self.base_dir / run_id / "history"
         history_dir.mkdir(parents=True, exist_ok=True)
         return history_dir / f"{agent_id}.jsonl"

{praisonai-4.6.58 → praisonai-4.6.59}/praisonai/context/terminal_logger.py

@@ -72,6 +72,10 @@ class TerminalLogger:
     
     def _get_log_path(self, run_id: str, agent_id: str) -> Path:
         """Get the path to the terminal log file."""
+        from ._storage_path import safe_storage_id
+
+        safe_storage_id(run_id, "run_id")
+        safe_storage_id(agent_id, "agent_id")
         terminal_dir = self.base_dir / run_id / "terminal"
         terminal_dir.mkdir(parents=True, exist_ok=True)
         return terminal_dir / f"{agent_id}.log"

{praisonai-4.6.58 → praisonai-4.6.59}/praisonai/integrations/managed_local.py

@@ -404,22 +404,21 @@ class LocalManagedAgent:
             filepath = args[0] if args else kwargs.get("filepath", "")
             if not filepath:
                 return "Error: No filepath specified"
-            
-            command = f'cat "{filepath}"'
+            import shlex
+            command = f"cat {shlex.quote(filepath)}"
             
         elif tool_name == "write_file":
             filepath = args[0] if args else kwargs.get("filepath", "")
             content = args[1] if len(args) > 1 else kwargs.get("content", "")
             if not filepath:
                 return "Error: No filepath specified"
-            
-            # Escape content for shell
             import shlex
-            command = f'cat > "{filepath}" << "EOF"\n{content}\nEOF'
+            command = f'cat > {shlex.quote(filepath)} << "EOF"\n{content}\nEOF'
             
         elif tool_name == "list_files":
             directory = args[0] if args else kwargs.get("directory", ".")
-            command = f'ls -la "{directory}"'
+            import shlex
+            command = f"ls -la {shlex.quote(directory)}"
             
         else:
             return f"Error: Unsupported bridged tool: {tool_name}"

praisonai-4.6.59/praisonai/jobs/path_validation.py

@@ -0,0 +1,24 @@
+"""Path validation for async jobs agent file references."""
+
+from __future__ import annotations
+
+import os
+from typing import Optional
+
+
+def validate_agent_file_path(agent_file: Optional[str]) -> Optional[str]:
+    """Restrict agent_file to PRAISONAI_JOBS_AGENT_ROOT when that env var is set."""
+    if not agent_file:
+        return agent_file
+
+    root = os.environ.get("PRAISONAI_JOBS_AGENT_ROOT")
+    if not root:
+        return agent_file
+
+    resolved = os.path.realpath(os.path.abspath(agent_file))
+    root_resolved = os.path.realpath(os.path.abspath(root))
+    if resolved != root_resolved and not resolved.startswith(root_resolved + os.sep):
+        raise ValueError(
+            f"agent_file must be within PRAISONAI_JOBS_AGENT_ROOT ({root_resolved})"
+        )
+    return agent_file

{praisonai-4.6.58 → praisonai-4.6.59}/praisonai/jobs/router.py

@@ -23,6 +23,7 @@ from .models import (
 )
 from .store import JobStore
 from .executor import JobExecutor
+from .path_validation import validate_agent_file_path
 
 logger = logging.getLogger(__name__)
 
@@ -77,9 +78,14 @@ def create_router(store: JobStore, executor: JobExecutor) -> APIRouter:
                 )
         
         # Create new job
+        try:
+            agent_file = validate_agent_file_path(body.agent_file)
+        except ValueError as exc:
+            raise HTTPException(status_code=400, detail=str(exc)) from exc
+
         job = Job(
             prompt=body.prompt,
-            agent_file=body.agent_file,
+            agent_file=agent_file,
             agent_yaml=body.agent_yaml,
             framework=body.framework or "praisonai",
             config=body.config or {},

{praisonai-4.6.58 → praisonai-4.6.59}/praisonai/recipe/core.py

@@ -490,6 +490,15 @@ def run_stream(
                     },
                 )
                 return
+
+        if not options.get("allow_dangerous_tools", False):
+            policy_error = _check_tool_policy(recipe_config)
+            if policy_error:
+                yield RecipeEvent(
+                    event_type="error",
+                    data={"code": "policy_denied", "message": policy_error},
+                )
+                return
         
         # Dry run
         if options.get("dry_run", False):

{praisonai-4.6.58 → praisonai-4.6.59}/praisonai/templates/cache.py

@@ -111,6 +111,12 @@ class TemplateCache:
     def _ensure_cache_dir(self) -> None:
         """Ensure the cache directory exists."""
         self.cache_dir.mkdir(parents=True, exist_ok=True)
+
+    @staticmethod
+    def _safe_segment(value: str) -> str:
+        if not value or ".." in value or "/" in value or "\\" in value:
+            raise ValueError(f"Invalid cache path segment: {value!r}")
+        return value
     
     def _get_cache_path(self, resolved: ResolvedTemplate) -> Path:
         """Get the cache path for a resolved template."""
@@ -124,11 +130,11 @@ class TemplateCache:
         
         elif resolved.source == TemplateSource.GITHUB:
             # github/owner/repo/template/ref
-            ref = resolved.ref or "main"
+            ref = self._safe_segment(resolved.ref or "main")
             return (
                 self.cache_dir / "github" / 
-                resolved.owner / resolved.repo / 
-                resolved.path / ref
+                self._safe_segment(resolved.owner) / self._safe_segment(resolved.repo) / 
+                self._safe_segment(resolved.path) / ref
             )
         
         elif resolved.source == TemplateSource.HTTP:

praisonai-4.6.59/praisonai/version.py

@@ -0,0 +1 @@
+__version__ = "4.6.59"

{praisonai-4.6.58 → praisonai-4.6.59}/pyproject.toml

@@ -12,7 +12,7 @@ dependencies = [
     "rich>=13.7",
     "markdown>=3.5",
     "pyparsing>=3.0.0",
-    "praisonaiagents>=1.6.58",
+    "praisonaiagents>=1.6.59",
     "python-dotenv>=0.19.0",
     "litellm>=1.83.14,<2",
     "PyYAML>=6.0",

praisonai-4.6.58/praisonai/version.py

@@ -1 +0,0 @@
-__version__ = "4.6.58"