empathy-framework 3.9.0__tar.gz → 3.9.2__tar.gz

{empathy_framework-3.9.0 → empathy_framework-3.9.2}/CHANGELOG.md

@@ -5,6 +5,15 @@ All notable changes to the Empathy Framework will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.9.1] - 2026-01-07
+
+### Fixed
+
+- **README.md**: Corrected PyPI package description to highlight v3.9.0 security features
+  - Was showing "What's New in v3.8.3 (Current Release)" on PyPI
+  - Now correctly shows v3.9.0 security hardening as current release
+  - Highlights Pattern 6 implementation (6 modules, 174 tests, +1143% increase)
+
 ## [3.9.0] - 2026-01-07
 
 ### Added

{empathy_framework-3.9.0 → empathy_framework-3.9.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: empathy-framework
-Version: 3.9.0
+Version: 3.9.2
 Summary: AI collaboration framework with intelligent caching (up to 57% cache hit rate), tier routing (34-86% cost savings depending on task complexity), XML-enhanced prompts, persistent memory, CrewAI integration, and multi-agent orchestration. Includes HIPAA-compliant healthcare wizards.
 Author-email: Patrick Roebuck <admin@smartaimemory.com>
 Maintainer-email: Smart-AI-Memory <admin@smartaimemory.com>
@@ -368,7 +368,48 @@ Dynamic: license-file
 pip install empathy-framework[developer]  # Lightweight for individual developers
 ```
 
-## What's New in v3.8.3 (Current Release)
+## What's New in v3.9.0 (Current Release)
+
+### 🔒 **Security Hardening: 174 Security Tests (Up from 14)**
+
+**Production-ready security with comprehensive file path validation across the entire framework.**
+
+- ✅ **6 modules secured** with Pattern 6 (File Path Validation)
+- ✅ **13 file write operations** validated to prevent path traversal (CWE-22)
+- ✅ **174 security tests** (100% passing) - up from 14 tests (+1143% increase)
+- ✅ **Zero blind exception handlers** - all errors now properly typed and logged
+
+```python
+# All file writes now validated for security
+from empathy_os.config import EmpathyConfig
+
+config = EmpathyConfig(user_id="alice")
+config.to_yaml("/etc/passwd")  # ❌ ValueError: Cannot write to system directory
+config.to_yaml("./empathy.yml")  # ✅ Safe write
+```
+
+**Attack vectors blocked:**
+
+- Path traversal: `../../../etc/passwd` → `ValueError`
+- Null byte injection: `config\x00.json` → `ValueError`
+- System directory writes: `/etc`, `/sys`, `/proc`, `/dev` → All blocked
+
+See [SECURITY.md](https://github.com/Smart-AI-Memory/empathy-framework/blob/main/SECURITY.md) for complete security documentation.
+
+### 🛡️ **Exception Handling Improvements**
+
+**Better error messages with graceful degradation.**
+
+- Fixed 8 blind `except Exception:` handlers in workflow base
+- Specific exception types for better debugging
+- Enhanced error logging while maintaining graceful degradation
+- All intentional broad catches documented with design rationale
+
+---
+
+### Previous Releases
+
+#### v3.8.3
 
 ### 🎯 **Transparent Cost Claims: Honest Role-Based Savings (34-86%)**
 
@@ -413,7 +454,7 @@ empathy telemetry export --format csv --output usage.csv
 
 ---
 
-### Previous Release: v3.7.0
+#### v3.7.0
 
 #### 🚀 **XML-Enhanced Prompting: 15-35% Token Reduction + Graceful Validation**
 

{empathy_framework-3.9.0 → empathy_framework-3.9.2}/README.md

@@ -13,7 +13,48 @@
 pip install empathy-framework[developer]  # Lightweight for individual developers
 ```
 
-## What's New in v3.8.3 (Current Release)
+## What's New in v3.9.0 (Current Release)
+
+### 🔒 **Security Hardening: 174 Security Tests (Up from 14)**
+
+**Production-ready security with comprehensive file path validation across the entire framework.**
+
+- ✅ **6 modules secured** with Pattern 6 (File Path Validation)
+- ✅ **13 file write operations** validated to prevent path traversal (CWE-22)
+- ✅ **174 security tests** (100% passing) - up from 14 tests (+1143% increase)
+- ✅ **Zero blind exception handlers** - all errors now properly typed and logged
+
+```python
+# All file writes now validated for security
+from empathy_os.config import EmpathyConfig
+
+config = EmpathyConfig(user_id="alice")
+config.to_yaml("/etc/passwd")  # ❌ ValueError: Cannot write to system directory
+config.to_yaml("./empathy.yml")  # ✅ Safe write
+```
+
+**Attack vectors blocked:**
+
+- Path traversal: `../../../etc/passwd` → `ValueError`
+- Null byte injection: `config\x00.json` → `ValueError`
+- System directory writes: `/etc`, `/sys`, `/proc`, `/dev` → All blocked
+
+See [SECURITY.md](https://github.com/Smart-AI-Memory/empathy-framework/blob/main/SECURITY.md) for complete security documentation.
+
+### 🛡️ **Exception Handling Improvements**
+
+**Better error messages with graceful degradation.**
+
+- Fixed 8 blind `except Exception:` handlers in workflow base
+- Specific exception types for better debugging
+- Enhanced error logging while maintaining graceful degradation
+- All intentional broad catches documented with design rationale
+
+---
+
+### Previous Releases
+
+#### v3.8.3
 
 ### 🎯 **Transparent Cost Claims: Honest Role-Based Savings (34-86%)**
 
@@ -58,7 +99,7 @@ empathy telemetry export --format csv --output usage.csv
 
 ---
 
-### Previous Release: v3.7.0
+#### v3.7.0
 
 #### 🚀 **XML-Enhanced Prompting: 15-35% Token Reduction + Graceful Validation**
 

{empathy_framework-3.9.0 → empathy_framework-3.9.2}/SECURITY.md

@@ -6,9 +6,9 @@ We release patches for security vulnerabilities in the following versions:
 
 | Version | Supported          |
 | ------- | ------------------ |
-| 3.8.x   | :white_check_mark: |
-| 3.7.x   | :x:                |
-| < 3.7   | :x:                |
+| 3.9.x   | :white_check_mark: |
+| 3.8.x   | :x:                |
+| < 3.8   | :x:                |
 
 ## Reporting a Vulnerability