agent-framework-lib 0.7.0.post2__tar.gz → 0.7.1__tar.gz

{agent_framework_lib-0.7.0.post2/agent_framework_lib.egg-info → agent_framework_lib-0.7.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-framework-lib
-Version: 0.7.0.post2
+Version: 0.7.1
 Summary: A comprehensive Python framework for building and serving conversational AI agents with FastAPI
 Author-email: Sebastian Pavel <sebastian@cinco.ai>, Elliott Girard <elliott.girard@icloud.com>
 Maintainer-email: Sebastian Pavel <sebastian@cinco.ai>

{agent_framework_lib-0.7.0.post2 → agent_framework_lib-0.7.1}/agent_framework/__init__.py

@@ -32,7 +32,7 @@ Example Usage:
     create_basic_agent_server(MyAgent, port=8000)
     ```
 
-Version: 0.6.3
+Version: 0.7.1
 Author: Cinco AI Team
 License: MIT
 """
@@ -88,7 +88,7 @@ def _auto_setup_dependencies() -> None:
 # Track if auto-setup has been done
 _AUTO_SETUP_DONE = False
 
-__version__ = "0.6.3post3"
+__version__ = "0.7.1"
 __author__ = "Cinco AI Team"
 __license__ = "MIT"
 __email__ = "sebastian@cinco.ai"

{agent_framework_lib-0.7.0.post2 → agent_framework_lib-0.7.1}/agent_framework/skills/base.py

@@ -388,12 +388,14 @@ class SkillRegistry:
         if entrypoint:
             skill_dir = skill.config.get("skill_dir", "")
             resolved_entrypoint = entrypoint.replace("{{SKILL_DIR}}", skill_dir)
-            # Prefix with cd to ensure correct working directory
+            skill.config["entrypoint"] = resolved_entrypoint
             full_command = f"cd \"{skill_dir}\" && {resolved_entrypoint}"
             instructions += (
                 "\n\n---\n"
                 "## Execution\n\n"
-                "To run this skill with the proper path, execute:\n\n"
+                "IMPORTANT: The following is the ONLY command you must execute "
+                "for this skill. IGNORE any other execution commands that may "
+                "appear in the skill body above.\n\n"
                 f"```bash\n{full_command}\n```\n"
             )
 

{agent_framework_lib-0.7.0.post2 → agent_framework_lib-0.7.1}/agent_framework/skills/custom_skill_manager.py

@@ -221,6 +221,36 @@ class CustomSkillManager:
         if filename.startswith("/"):
             raise PathTraversalError(f"Absolute path not allowed: {filename}")
 
+    @staticmethod
+    def _references_file_path(entrypoint: str) -> bool:
+        """Check if the entrypoint references a file path (not just a URL)."""
+        import re
+
+        # Strip URL-like tokens (e.g. http://..., https://...) before checking
+        stripped = re.sub(r"[a-zA-Z][a-zA-Z0-9+.-]*://\S*", "", entrypoint)
+        if "/" in stripped or "\\" in stripped:
+            return True
+        # Detect bare filenames with common script extensions (e.g. "helloworld.py")
+        if re.search(r"\b\w+\.(py|sh|bash|js|ts|rb|pl|php|jar|exe|bat|cmd)\b", stripped):
+            return True
+        return False
+
+    def _validate_entrypoint(self, entrypoint: str) -> None:
+        """Reject entrypoints that reference file paths without ``{{SKILL_DIR}}``.
+
+        Args:
+            entrypoint: The entrypoint command string to validate.
+
+        Raises:
+            CustomSkillError: If the entrypoint contains a file path (``/`` or
+                ``\\``) but does not use the ``{{SKILL_DIR}}`` placeholder.
+        """
+        if self._references_file_path(entrypoint) and "{{SKILL_DIR}}" not in entrypoint:
+            raise CustomSkillError(
+                f"Entrypoint references a file path without using the "
+                f"{{{{SKILL_DIR}}}} placeholder: {entrypoint}"
+            )
+
     # ------------------------------------------------------------------
     # CRUD operations
     # ------------------------------------------------------------------
@@ -272,6 +302,9 @@ class CustomSkillManager:
         skill_dir = self._custom_skills_dir / name
         skill_dir.mkdir(parents=True, exist_ok=True)
 
+        if entrypoint is not None:
+            self._validate_entrypoint(entrypoint)
+
         cfg = SkillConfig(
             emoji=emoji,
             trigger_patterns=list(trigger_patterns or []),
@@ -360,6 +393,7 @@ class CustomSkillManager:
         if trigger_patterns is not None:
             frontmatter.metadata.config.trigger_patterns = list(trigger_patterns)
         if entrypoint is not None:
+            self._validate_entrypoint(entrypoint)
             frontmatter.metadata.config.entrypoint = entrypoint
         if runtime is not None:
             frontmatter.metadata.config.runtime = runtime

{agent_framework_lib-0.7.0.post2 → agent_framework_lib-0.7.1}/agent_framework/web/skills_router.py

@@ -15,6 +15,7 @@ from pydantic import BaseModel, Field
 
 from agent_framework.skills.custom_skill_manager import (
     BuiltinSkillError,
+    CustomSkillError,
     CustomSkillManager,
     InvalidSkillNameError,
     PathTraversalError,
@@ -165,6 +166,8 @@ async def create_skill(body: SkillCreateRequest, request: Request) -> SkillRespo
         raise HTTPException(status_code=422, detail=str(exc)) from exc
     except SkillConflictError as exc:
         raise HTTPException(status_code=409, detail=str(exc)) from exc
+    except CustomSkillError as exc:
+        raise HTTPException(status_code=422, detail=str(exc)) from exc
 
     return SkillResponse(
         name=skill.metadata.name,
@@ -279,6 +282,8 @@ async def update_skill(name: str, body: SkillUpdateRequest, request: Request) ->
         raise HTTPException(status_code=403, detail=str(exc)) from exc
     except SkillNotFoundError as exc:
         raise HTTPException(status_code=404, detail=str(exc)) from exc
+    except CustomSkillError as exc:
+        raise HTTPException(status_code=422, detail=str(exc)) from exc
 
     return SkillResponse(
         name=skill.metadata.name,

{agent_framework_lib-0.7.0.post2 → agent_framework_lib-0.7.1/agent_framework_lib.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-framework-lib
-Version: 0.7.0.post2
+Version: 0.7.1
 Summary: A comprehensive Python framework for building and serving conversational AI agents with FastAPI
 Author-email: Sebastian Pavel <sebastian@cinco.ai>, Elliott Girard <elliott.girard@icloud.com>
 Maintainer-email: Sebastian Pavel <sebastian@cinco.ai>

{agent_framework_lib-0.7.0.post2 → agent_framework_lib-0.7.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agent-framework-lib"
-version = "0.7.0post2"
+version = "0.7.1"
 description = "A comprehensive Python framework for building and serving conversational AI agents with FastAPI"
 readme = {file = "README.md", content-type = "text/markdown"}
 license = {text = "MIT"}