empathy-framework 3.9.0__tar.gz → 3.9.1__tar.gz

{empathy_framework-3.9.0 → empathy_framework-3.9.1}/CHANGELOG.md

@@ -5,6 +5,15 @@ All notable changes to the Empathy Framework will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.9.1] - 2026-01-07
+
+### Fixed
+
+- **README.md**: Corrected PyPI package description to highlight v3.9.0 security features
+  - Was showing "What's New in v3.8.3 (Current Release)" on PyPI
+  - Now correctly shows v3.9.0 security hardening as current release
+  - Highlights Pattern 6 implementation (6 modules, 174 tests, +1143% increase)
+
 ## [3.9.0] - 2026-01-07
 
 ### Added

{empathy_framework-3.9.0 → empathy_framework-3.9.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: empathy-framework
-Version: 3.9.0
+Version: 3.9.1
 Summary: AI collaboration framework with intelligent caching (up to 57% cache hit rate), tier routing (34-86% cost savings depending on task complexity), XML-enhanced prompts, persistent memory, CrewAI integration, and multi-agent orchestration. Includes HIPAA-compliant healthcare wizards.
 Author-email: Patrick Roebuck <admin@smartaimemory.com>
 Maintainer-email: Smart-AI-Memory <admin@smartaimemory.com>
@@ -368,7 +368,48 @@ Dynamic: license-file
 pip install empathy-framework[developer]  # Lightweight for individual developers
 ```
 
-## What's New in v3.8.3 (Current Release)
+## What's New in v3.9.0 (Current Release)
+
+### 🔒 **Security Hardening: 174 Security Tests (Up from 14)**
+
+**Production-ready security with comprehensive file path validation across the entire framework.**
+
+- ✅ **6 modules secured** with Pattern 6 (File Path Validation)
+- ✅ **13 file write operations** validated to prevent path traversal (CWE-22)
+- ✅ **174 security tests** (100% passing) - up from 14 tests (+1143% increase)
+- ✅ **Zero blind exception handlers** - all errors now properly typed and logged
+
+```python
+# All file writes now validated for security
+from empathy_os.config import EmpathyConfig
+
+config = EmpathyConfig(user_id="alice")
+config.to_yaml("/etc/passwd")  # ❌ ValueError: Cannot write to system directory
+config.to_yaml("./empathy.yml")  # ✅ Safe write
+```
+
+**Attack vectors blocked:**
+
+- Path traversal: `../../../etc/passwd` → `ValueError`
+- Null byte injection: `config\x00.json` → `ValueError`
+- System directory writes: `/etc`, `/sys`, `/proc`, `/dev` → All blocked
+
+See [SECURITY.md](https://github.com/Smart-AI-Memory/empathy-framework/blob/main/SECURITY.md) for complete security documentation.
+
+### 🛡️ **Exception Handling Improvements**
+
+**Better error messages with graceful degradation.**
+
+- Fixed 8 blind `except Exception:` handlers in workflow base
+- Specific exception types for better debugging
+- Enhanced error logging while maintaining graceful degradation
+- All intentional broad catches documented with design rationale
+
+---
+
+### Previous Releases
+
+#### v3.8.3
 
 ### 🎯 **Transparent Cost Claims: Honest Role-Based Savings (34-86%)**
 
@@ -413,7 +454,7 @@ empathy telemetry export --format csv --output usage.csv
 
 ---
 
-### Previous Release: v3.7.0
+#### v3.7.0
 
 #### 🚀 **XML-Enhanced Prompting: 15-35% Token Reduction + Graceful Validation**
 

{empathy_framework-3.9.0 → empathy_framework-3.9.1}/README.md

@@ -13,7 +13,48 @@
 pip install empathy-framework[developer]  # Lightweight for individual developers
 ```
 
-## What's New in v3.8.3 (Current Release)
+## What's New in v3.9.0 (Current Release)
+
+### 🔒 **Security Hardening: 174 Security Tests (Up from 14)**
+
+**Production-ready security with comprehensive file path validation across the entire framework.**
+
+- ✅ **6 modules secured** with Pattern 6 (File Path Validation)
+- ✅ **13 file write operations** validated to prevent path traversal (CWE-22)
+- ✅ **174 security tests** (100% passing) - up from 14 tests (+1143% increase)
+- ✅ **Zero blind exception handlers** - all errors now properly typed and logged
+
+```python
+# All file writes now validated for security
+from empathy_os.config import EmpathyConfig
+
+config = EmpathyConfig(user_id="alice")
+config.to_yaml("/etc/passwd")  # ❌ ValueError: Cannot write to system directory
+config.to_yaml("./empathy.yml")  # ✅ Safe write
+```
+
+**Attack vectors blocked:**
+
+- Path traversal: `../../../etc/passwd` → `ValueError`
+- Null byte injection: `config\x00.json` → `ValueError`
+- System directory writes: `/etc`, `/sys`, `/proc`, `/dev` → All blocked
+
+See [SECURITY.md](https://github.com/Smart-AI-Memory/empathy-framework/blob/main/SECURITY.md) for complete security documentation.
+
+### 🛡️ **Exception Handling Improvements**
+
+**Better error messages with graceful degradation.**
+
+- Fixed 8 blind `except Exception:` handlers in workflow base
+- Specific exception types for better debugging
+- Enhanced error logging while maintaining graceful degradation
+- All intentional broad catches documented with design rationale
+
+---
+
+### Previous Releases
+
+#### v3.8.3
 
 ### 🎯 **Transparent Cost Claims: Honest Role-Based Savings (34-86%)**
 
@@ -58,7 +99,7 @@ empathy telemetry export --format csv --output usage.csv
 
 ---
 
-### Previous Release: v3.7.0
+#### v3.7.0
 
 #### 🚀 **XML-Enhanced Prompting: 15-35% Token Reduction + Graceful Validation**
 

{empathy_framework-3.9.0 → empathy_framework-3.9.1}/docs/index.md

@@ -78,6 +78,26 @@ Webhooks for Slack, GitHub, JIRA, Datadog, and custom services.
 
 ---
 
+## Security Hardening (v3.9.0)
+
+**Production-ready security with comprehensive file path validation.**
+
+The Empathy Framework underwent extensive security hardening in v3.9.0:
+
+- ✅ **6 modules secured** with Pattern 6 (File Path Validation)
+- ✅ **13 file write operations** validated to prevent path traversal (CWE-22)
+- ✅ **174 security tests** (100% passing) - up from 14 tests (+1143% increase)
+- ✅ **Zero blind exception handlers** - all errors properly typed and logged
+
+**Attack vectors blocked:**
+- Path traversal: `../../../etc/passwd` → `ValueError`
+- Null byte injection: `config\x00.json` → `ValueError`
+- System directory writes: `/etc`, `/sys`, `/proc`, `/dev` → All blocked
+
+See [SECURITY.md](https://github.com/Smart-AI-Memory/empathy-framework/blob/main/SECURITY.md) for complete documentation.
+
+---
+
 ## Use Cases
 
 === "Software Development"

{empathy_framework-3.9.0 → empathy_framework-3.9.1}/empathy_framework.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: empathy-framework
-Version: 3.9.0
+Version: 3.9.1
 Summary: AI collaboration framework with intelligent caching (up to 57% cache hit rate), tier routing (34-86% cost savings depending on task complexity), XML-enhanced prompts, persistent memory, CrewAI integration, and multi-agent orchestration. Includes HIPAA-compliant healthcare wizards.
 Author-email: Patrick Roebuck <admin@smartaimemory.com>
 Maintainer-email: Smart-AI-Memory <admin@smartaimemory.com>
@@ -368,7 +368,48 @@ Dynamic: license-file
 pip install empathy-framework[developer]  # Lightweight for individual developers
 ```
 
-## What's New in v3.8.3 (Current Release)
+## What's New in v3.9.0 (Current Release)
+
+### 🔒 **Security Hardening: 174 Security Tests (Up from 14)**
+
+**Production-ready security with comprehensive file path validation across the entire framework.**
+
+- ✅ **6 modules secured** with Pattern 6 (File Path Validation)
+- ✅ **13 file write operations** validated to prevent path traversal (CWE-22)
+- ✅ **174 security tests** (100% passing) - up from 14 tests (+1143% increase)
+- ✅ **Zero blind exception handlers** - all errors now properly typed and logged
+
+```python
+# All file writes now validated for security
+from empathy_os.config import EmpathyConfig
+
+config = EmpathyConfig(user_id="alice")
+config.to_yaml("/etc/passwd")  # ❌ ValueError: Cannot write to system directory
+config.to_yaml("./empathy.yml")  # ✅ Safe write
+```
+
+**Attack vectors blocked:**
+
+- Path traversal: `../../../etc/passwd` → `ValueError`
+- Null byte injection: `config\x00.json` → `ValueError`
+- System directory writes: `/etc`, `/sys`, `/proc`, `/dev` → All blocked
+
+See [SECURITY.md](https://github.com/Smart-AI-Memory/empathy-framework/blob/main/SECURITY.md) for complete security documentation.
+
+### 🛡️ **Exception Handling Improvements**
+
+**Better error messages with graceful degradation.**
+
+- Fixed 8 blind `except Exception:` handlers in workflow base
+- Specific exception types for better debugging
+- Enhanced error logging while maintaining graceful degradation
+- All intentional broad catches documented with design rationale
+
+---
+
+### Previous Releases
+
+#### v3.8.3
 
 ### 🎯 **Transparent Cost Claims: Honest Role-Based Savings (34-86%)**
 
@@ -413,7 +454,7 @@ empathy telemetry export --format csv --output usage.csv
 
 ---
 
-### Previous Release: v3.7.0
+#### v3.7.0
 
 #### 🚀 **XML-Enhanced Prompting: 15-35% Token Reduction + Graceful Validation**
 

{empathy_framework-3.9.0 → empathy_framework-3.9.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "empathy-framework"
-version = "3.9.0"
+version = "3.9.1"
 description = "AI collaboration framework with intelligent caching (up to 57% cache hit rate), tier routing (34-86% cost savings depending on task complexity), XML-enhanced prompts, persistent memory, CrewAI integration, and multi-agent orchestration. Includes HIPAA-compliant healthcare wizards."
 readme = {file = "README.md", content-type = "text/markdown"}
 requires-python = ">=3.10"

{empathy_framework-3.9.0 → empathy_framework-3.9.1}/src/empathy_os/test_generator/generator.py

@@ -48,6 +48,7 @@ class TestGenerator:
             loader=FileSystemLoader(str(template_dir)),
             trim_blocks=True,
             lstrip_blocks=True,
+            autoescape=True,  # Enable autoescape for security (test gen templates should be safe)
         )
 
         self.risk_analyzer = RiskAnalyzer()

{empathy_framework-3.9.0 → empathy_framework-3.9.1}/src/empathy_os/workflows/base.py

@@ -57,6 +57,7 @@ from .progress import ProgressCallback, ProgressTracker
 # Import telemetry tracking
 try:
     from empathy_os.telemetry import UsageTracker
+
     TELEMETRY_AVAILABLE = True
 except ImportError:
     TELEMETRY_AVAILABLE = False
@@ -602,7 +603,9 @@ class BaseWorkflow(ABC):
                 logger.debug(f"Cache lookup failed (malformed data): {e}, continuing with LLM call")
             except (OSError, PermissionError) as e:
                 # File system errors - continue with LLM call
-                logger.debug(f"Cache lookup failed (file system error): {e}, continuing with LLM call")
+                logger.debug(
+                    f"Cache lookup failed (file system error): {e}, continuing with LLM call"
+                )
 
         # Create a step config for this call
         step = WorkflowStepConfig(