PraisonAI 4.6.59__tar.gz → 4.6.62__tar.gz

{praisonai-4.6.59 → praisonai-4.6.62}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: PraisonAI
-Version: 4.6.59
+Version: 4.6.62
 Summary: PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.
 Author: Mervin Praison
 License: MIT
@@ -11,7 +11,7 @@ Description-Content-Type: text/markdown
 Requires-Dist: rich>=13.7
 Requires-Dist: markdown>=3.5
 Requires-Dist: pyparsing>=3.0.0
-Requires-Dist: praisonaiagents>=1.6.59
+Requires-Dist: praisonaiagents>=1.6.62
 Requires-Dist: python-dotenv>=0.19.0
 Requires-Dist: litellm<2,>=1.83.14
 Requires-Dist: PyYAML>=6.0
@@ -952,11 +952,11 @@ agent.start('Write a movie script about a robot in Mars');
 
 ## ⚡ Performance
 
-PraisonAI is built for speed, with agent instantiation in under 4μs. This reduces overhead, improves responsiveness, and helps multi-agent systems scale efficiently in real-world production workloads.
+PraisonAI is built for speed, with agent instantiation in around 14μs. This reduces overhead, improves responsiveness, and helps multi-agent systems scale efficiently in real-world production workloads.
 
 | Performance Metric | PraisonAI |
 |--------------------|-----------|
-| Avg Instantiation Time | **3.77 μs** |
+| Avg Instantiation Time | **14 μs** |
 
 ---
 

{praisonai-4.6.59 → praisonai-4.6.62}/PraisonAI.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: PraisonAI
-Version: 4.6.59
+Version: 4.6.62
 Summary: PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent collaboration.
 Author: Mervin Praison
 License: MIT
@@ -11,7 +11,7 @@ Description-Content-Type: text/markdown
 Requires-Dist: rich>=13.7
 Requires-Dist: markdown>=3.5
 Requires-Dist: pyparsing>=3.0.0
-Requires-Dist: praisonaiagents>=1.6.59
+Requires-Dist: praisonaiagents>=1.6.62
 Requires-Dist: python-dotenv>=0.19.0
 Requires-Dist: litellm<2,>=1.83.14
 Requires-Dist: PyYAML>=6.0
@@ -952,11 +952,11 @@ agent.start('Write a movie script about a robot in Mars');
 
 ## ⚡ Performance
 
-PraisonAI is built for speed, with agent instantiation in under 4μs. This reduces overhead, improves responsiveness, and helps multi-agent systems scale efficiently in real-world production workloads.
+PraisonAI is built for speed, with agent instantiation in around 14μs. This reduces overhead, improves responsiveness, and helps multi-agent systems scale efficiently in real-world production workloads.
 
 | Performance Metric | PraisonAI |
 |--------------------|-----------|
-| Avg Instantiation Time | **3.77 μs** |
+| Avg Instantiation Time | **14 μs** |
 
 ---
 

{praisonai-4.6.59 → praisonai-4.6.62}/PraisonAI.egg-info/requires.txt

@@ -1,7 +1,7 @@
 rich>=13.7
 markdown>=3.5
 pyparsing>=3.0.0
-praisonaiagents>=1.6.59
+praisonaiagents>=1.6.62
 python-dotenv>=0.19.0
 litellm<2,>=1.83.14
 PyYAML>=6.0

{praisonai-4.6.59 → praisonai-4.6.62}/README.md

@@ -770,11 +770,11 @@ agent.start('Write a movie script about a robot in Mars');
 
 ## ⚡ Performance
 
-PraisonAI is built for speed, with agent instantiation in under 4μs. This reduces overhead, improves responsiveness, and helps multi-agent systems scale efficiently in real-world production workloads.
+PraisonAI is built for speed, with agent instantiation in around 14μs. This reduces overhead, improves responsiveness, and helps multi-agent systems scale efficiently in real-world production workloads.
 
 | Performance Metric | PraisonAI |
 |--------------------|-----------|
-| Avg Instantiation Time | **3.77 μs** |
+| Avg Instantiation Time | **14 μs** |
 
 ---
 

{praisonai-4.6.59 → praisonai-4.6.62}/praisonai/api/agent_invoke.py

@@ -28,8 +28,19 @@ logger = logging.getLogger(__name__)
 
 # Authentication
 import os
+import warnings
+
 CALL_SERVER_TOKEN = os.getenv('CALL_SERVER_TOKEN')
-_CALL_AUTH_DISABLED = os.getenv('PRAISONAI_CALL_AUTH', '').lower() == 'disabled'
+_LOCALHOST_HOSTS = frozenset({'127.0.0.1', 'localhost', '::1'})
+
+
+def _call_auth_disabled() -> bool:
+    return os.getenv('PRAISONAI_CALL_AUTH', '').lower() == 'disabled'
+
+
+def _bind_host_from_request(request: Request) -> str:
+    host = getattr(getattr(request, 'url', None), 'hostname', None)
+    return host or os.getenv('PRAISONAI_CALL_BIND_HOST', '127.0.0.1')
 
 
 async def verify_token(
@@ -39,15 +50,24 @@ async def verify_token(
     """Verify API token for authentication."""
     if not FASTAPI_AVAILABLE:
         return
-    if _CALL_AUTH_DISABLED:
+    if _call_auth_disabled():
+        bind_host = _bind_host_from_request(request)
+        if bind_host not in _LOCALHOST_HOSTS:
+            raise HTTPException(
+                status_code=503,
+                detail="PRAISONAI_CALL_AUTH=disabled is only permitted for localhost binding",
+            )
+        warnings.warn(
+            "PRAISONAI_CALL_AUTH=disabled bypasses authentication; "
+            "set CALL_SERVER_TOKEN for production use",
+            DeprecationWarning,
+            stacklevel=2,
+        )
         return
     if not CALL_SERVER_TOKEN:
         raise HTTPException(
             status_code=503,
-            detail=(
-                "CALL_SERVER_TOKEN is not configured. Set CALL_SERVER_TOKEN or "
-                "PRAISONAI_CALL_AUTH=disabled to run without authentication."
-            ),
+            detail="CALL_SERVER_TOKEN is not configured. Set CALL_SERVER_TOKEN to enable authentication.",
         )
         
     token = None

{praisonai-4.6.59 → praisonai-4.6.62}/praisonai/api/call.py

@@ -134,24 +134,28 @@ from fastapi import HTTPException, status
 @app.api_route("/", methods=["GET", "POST"])
 async def handle_incoming_call(request: Request):
     """Handle incoming call and return TwiML response to connect to Media Stream."""
-    if CALL_SERVER_TOKEN:
-        token = request.query_params.get("token")
-        if not token:
-            auth = request.headers.get("Authorization", "")
-            if auth.startswith("Bearer "):
-                token = auth.split(" ")[1]
-            elif auth.startswith("Basic "):
-                try:
-                    import base64
-                    decoded = base64.b64decode(auth[6:]).decode("utf-8")
-                    if ":" in decoded:
-                        token = decoded.split(":", 1)[1]  # Use Password as token
-                    else:
-                        token = decoded
-                except Exception:
-                    pass
-        if token != CALL_SERVER_TOKEN:
-            raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED, detail="Unauthorized")
+    if not CALL_SERVER_TOKEN:
+        raise HTTPException(
+            status_code=status.HTTP_503_SERVICE_UNAVAILABLE,
+            detail="CALL_SERVER_TOKEN is not configured",
+        )
+    token = request.query_params.get("token")
+    if not token:
+        auth = request.headers.get("Authorization", "")
+        if auth.startswith("Bearer "):
+            token = auth.split(" ")[1]
+        elif auth.startswith("Basic "):
+            try:
+                import base64
+                decoded = base64.b64decode(auth[6:]).decode("utf-8")
+                if ":" in decoded:
+                    token = decoded.split(":", 1)[1]
+                else:
+                    token = decoded
+            except Exception:
+                pass
+    if token != CALL_SERVER_TOKEN:
+        raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED, detail="Unauthorized")
 
     response = VoiceResponse()
     response.say("")
@@ -174,11 +178,13 @@ async def handle_media_stream(websocket: WebSocket):
     global active_connections
     
     # 1. Authentication
-    if CALL_SERVER_TOKEN:
-        token = websocket.query_params.get("token")
-        if token != CALL_SERVER_TOKEN:
-            await websocket.close(code=4003, reason="Unauthorized")
-            return
+    if not CALL_SERVER_TOKEN:
+        await websocket.close(code=4003, reason="CALL_SERVER_TOKEN not configured")
+        return
+    token = websocket.query_params.get("token")
+    if token != CALL_SERVER_TOKEN:
+        await websocket.close(code=4003, reason="Unauthorized")
+        return
             
     # 2. Rate Limiting Request Rate
     client_ip = websocket.client.host if websocket.client else "unknown"

{praisonai-4.6.59 → praisonai-4.6.62}/praisonai/cli/features/recipe.py

@@ -724,9 +724,10 @@ class RecipeHandler:
         options = {
             "dry_run": parsed["dry_run"] or parsed["explain"],
             "verbose": parsed["verbose"],
-            "output": output_mode,  # New: output mode (status, trace, verbose, etc.)
+            "output": output_mode,
             "timeout_sec": int(parsed["timeout"]),
             "mode": parsed["mode"],
+            "policy": parsed.get("policy"),
             "offline": parsed["offline"],
             "force": parsed["force"],
             "allow_dangerous_tools": parsed["allow_dangerous_tools"],

{praisonai-4.6.59 → praisonai-4.6.62}/praisonai/cli/features/serve.py

@@ -801,11 +801,19 @@ Launch PraisonAI servers with unified discovery support.
     
     def cmd_a2u(self, args: List[str]) -> int:
         """Launch A2U event stream server."""
+        import os
         spec = {
             "host": {"default": self.DEFAULT_HOST},
             "port": {"default": 8083, "type": "int"},
         }
         parsed = self._parse_args(args, spec)
+        host = parsed["host"]
+        if host not in ("127.0.0.1", "localhost", "::1") and not os.environ.get("A2U_AUTH_TOKEN"):
+            self._print_error(
+                "A2U_AUTH_TOKEN required for non-localhost binding. "
+                "Set A2U_AUTH_TOKEN or bind to 127.0.0.1"
+            )
+            return 4  # POLICY_DENIED
         
         try:
             self._print_success(f"Starting A2U server on {parsed['host']}:{parsed['port']}")

{praisonai-4.6.59 → praisonai-4.6.62}/praisonai/recipe/core.py

@@ -242,7 +242,7 @@ def run(
         
         # Check tool permissions
         if not options.get("allow_dangerous_tools", False):
-            policy_error = _check_tool_policy(recipe_config)
+            policy_error = _check_tool_policy(recipe_config, options)
             if policy_error:
                 return RecipeResult(
                     run_id=run_id,
@@ -492,7 +492,7 @@ def run_stream(
                 return
 
         if not options.get("allow_dangerous_tools", False):
-            policy_error = _check_tool_policy(recipe_config)
+            policy_error = _check_tool_policy(recipe_config, options)
             if policy_error:
                 yield RecipeEvent(
                     event_type="error",
@@ -874,19 +874,59 @@ def _format_missing_deps(dep_result: Dict[str, Any]) -> List[str]:
     return missing
 
 
-def _check_tool_policy(recipe_config: RecipeConfig) -> Optional[str]:
+def _load_yaml_file(path: Path) -> Dict[str, Any]:
+    """Load a YAML file if it exists."""
+    if not path.exists():
+        return {}
+    try:
+        import yaml
+        with open(path, encoding="utf-8") as f:
+            data = yaml.safe_load(f) or {}
+        return data if isinstance(data, dict) else {}
+    except Exception:
+        return {}
+
+
+def _collect_workflow_declared_tools(recipe_config: RecipeConfig) -> set:
+    """Union tools from requires, workflow agents, and approve lists."""
+    tools: set = set(recipe_config.get_required_tools())
+    if not recipe_config.path:
+        return tools
+    base = Path(recipe_config.path)
+    workflow_raw = recipe_config.raw.get("workflow", "workflow.yaml")
+    agents_raw = recipe_config.raw.get("agents", "agents.yaml")
+    workflow_file = workflow_raw if isinstance(workflow_raw, str) else "workflow.yaml"
+    for fname in (workflow_file, "agents.yaml", "workflow.yaml"):
+        data = _load_yaml_file(base / fname)
+        if not data:
+            continue
+        approve = data.get("approve", [])
+        if isinstance(approve, str):
+            tools.add(approve)
+        elif isinstance(approve, list):
+            tools.update(str(t) for t in approve)
+        agents = data.get("agents", {})
+        if isinstance(agents, dict):
+            for agent_cfg in agents.values():
+                if isinstance(agent_cfg, dict):
+                    agent_tools = agent_cfg.get("tools", [])
+                    if isinstance(agent_tools, list):
+                        tools.update(str(t) for t in agent_tools)
+    return tools
+
+
+def _check_tool_policy(recipe_config: RecipeConfig, options: Optional[Dict[str, Any]] = None) -> Optional[str]:
     """Check if recipe uses denied tools. Returns error message or None."""
+    options = options or {}
+    if options.get("allow_dangerous_tools", False):
+        return None
     allowed = set(recipe_config.get_allowed_tools())
     denied = set(recipe_config.get_denied_tools())
-    required = set(recipe_config.get_required_tools())
+    declared = _collect_workflow_declared_tools(recipe_config)
     
-    # Check if any required tools are in default denied list
-    for tool in required:
+    for tool in declared:
         if tool in DEFAULT_DENIED_TOOLS and tool not in allowed:
             return f"Tool '{tool}' is denied by default. Use allow_dangerous_tools=True to override."
-    
-    # Check explicit denials
-    for tool in required:
         if tool in denied:
             return f"Tool '{tool}' is explicitly denied by recipe policy."
     
@@ -1087,6 +1127,7 @@ def _execute_steps_workflow(
         # This handles include steps, loops, variables, tools, etc.
         parser = YAMLWorkflowParser(tool_registry=tool_registry)
         workflow = parser.parse_file(workflow_file, extra_vars=extra_vars)
+        workflow.allow_dangerous_tools = options.get("allow_dangerous_tools", False)
         return workflow.start()
     
     # Fallback: Create workflow from config dict using parser

{praisonai-4.6.59 → praisonai-4.6.62}/praisonai/sandbox/sandlock.py

@@ -64,6 +64,7 @@ class SandlockSandbox:
         self.config = config or SandboxConfig.native()
         self._is_running = False
         self._temp_dir: Optional[str] = None
+        self._used_subprocess_fallback = False
         
         # Lazy import sandlock to avoid import-time dependency
         try:
@@ -283,6 +284,17 @@ class SandlockSandbox:
                 completed_at=completed_at,
             )
 
+    def _tag_subprocess_fallback(self, result: SandboxResult) -> SandboxResult:
+        meta = dict(result.metadata or {})
+        meta.update({
+            "isolation_level": "subprocess",
+            "filesystem_isolation": False,
+            "network_isolation": False,
+            "sandlock_downgrade": True,
+        })
+        result.metadata = meta
+        return result
+
     async def execute(
         self,
         code: str,
@@ -296,11 +308,18 @@ class SandlockSandbox:
             await self.start()
         
         if not self.is_available:
-            # Fallback to subprocess sandbox if sandlock not available
-            logger.warning("Sandlock not available, falling back to subprocess")
             from .subprocess import SubprocessSandbox
             fallback = SubprocessSandbox(self.config)
-            return await fallback.execute(code, language, limits, env, working_dir)
+            if self.config.metadata.get("require_landlock"):
+                return SandboxResult(
+                    status=SandboxStatus.FAILED,
+                    error="Landlock is required but unavailable on this system",
+                    metadata={"isolation_level": "none", "sandlock_downgrade": True},
+                )
+            logger.warning("Sandlock not available, falling back to subprocess (no kernel isolation)")
+            self._used_subprocess_fallback = True
+            result = await fallback.execute(code, language, limits, env, working_dir)
+            return self._tag_subprocess_fallback(result)
         
         limits = limits or self.config.resource_limits
         execution_id = str(uuid.uuid4())
@@ -354,10 +373,18 @@ class SandlockSandbox:
             await self.start()
         
         if not self.is_available:
-            logger.warning("Sandlock not available, falling back to subprocess")
             from .subprocess import SubprocessSandbox
             fallback = SubprocessSandbox(self.config)
-            return await fallback.run_command(command, limits, env, working_dir)
+            if self.config.metadata.get("require_landlock"):
+                return SandboxResult(
+                    status=SandboxStatus.FAILED,
+                    error="Landlock is required but unavailable on this system",
+                    metadata={"isolation_level": "none", "sandlock_downgrade": True},
+                )
+            logger.warning("Sandlock not available, falling back to subprocess (no kernel isolation)")
+            self._used_subprocess_fallback = True
+            result = await fallback.run_command(command, limits, env, working_dir)
+            return self._tag_subprocess_fallback(result)
         
         limits = limits or self.config.resource_limits
         execution_id = str(uuid.uuid4())
@@ -438,16 +465,18 @@ class SandlockSandbox:
     
     def get_status(self) -> Dict[str, Any]:
         """Get sandbox status information."""
+        kernel_isolated = self.is_available and not self._used_subprocess_fallback
         return {
             "available": self.is_available,
             "type": self.sandbox_type,
             "running": self._is_running,
             "temp_dir": self._temp_dir,
             "landlock_supported": self.is_available,
+            "subprocess_fallback": self._used_subprocess_fallback,
             "features": {
-                "filesystem_isolation": True,
-                "network_isolation": True,
-                "syscall_filtering": True,
+                "filesystem_isolation": kernel_isolated,
+                "network_isolation": kernel_isolated,
+                "syscall_filtering": kernel_isolated,
                 "resource_limits": True,
             }
         }

{praisonai-4.6.59 → praisonai-4.6.62}/praisonai/tools/multiedit.py

@@ -9,11 +9,25 @@ import difflib
 import os
 from typing import Any, Dict, List, Optional
 
+from praisonai.code.utils.file_utils import is_path_within_directory
+
+
+def _resolve_safe_path(filepath: str, workspace_root: Optional[str] = None) -> Optional[str]:
+    """Resolve filepath within workspace; return None if outside boundary."""
+    if ".." in filepath.replace("\\", "/"):
+        return None
+    root = os.path.realpath(workspace_root or os.getcwd())
+    abs_path = os.path.realpath(os.path.join(root, filepath) if not os.path.isabs(filepath) else filepath)
+    if not is_path_within_directory(abs_path, root):
+        return None
+    return abs_path
+
 
 def multiedit(
     filepath: str,
     edits: List[Dict[str, Any]],
     dry_run: bool = False,
+    workspace_root: Optional[str] = None,
 ) -> Dict[str, Any]:
     """
     Apply multiple edits to a file in a single operation.
@@ -25,6 +39,7 @@ def multiedit(
             - new: The replacement text (required)
             - line: Optional line number hint for faster matching
         dry_run: If True, don't actually modify the file.
+        workspace_root: Directory boundary for filepath (defaults to cwd).
     
     Returns:
         Dict with:
@@ -51,6 +66,13 @@ def multiedit(
         "error": None,
     }
     
+    # Validate path within workspace
+    safe_path = _resolve_safe_path(filepath, workspace_root)
+    if safe_path is None:
+        result["error"] = f"Path outside workspace: {filepath}"
+        return result
+    filepath = safe_path
+
     # Validate inputs
     if not os.path.exists(filepath):
         result["error"] = f"File not found: {filepath}"

praisonai-4.6.62/praisonai/version.py

@@ -0,0 +1 @@
+__version__ = "4.6.62"

{praisonai-4.6.59 → praisonai-4.6.62}/pyproject.toml

@@ -12,7 +12,7 @@ dependencies = [
     "rich>=13.7",
     "markdown>=3.5",
     "pyparsing>=3.0.0",
-    "praisonaiagents>=1.6.59",
+    "praisonaiagents>=1.6.62",
     "python-dotenv>=0.19.0",
     "litellm>=1.83.14,<2",
     "PyYAML>=6.0",

praisonai-4.6.59/praisonai/version.py

@@ -1 +0,0 @@
-__version__ = "4.6.59"