rasa-pro 3.13.1a18__py3-none-any.whl → 3.13.3__py3-none-any.whl

rasa/cli/project_templates/defaults.py

@@ -1,5 +1,6 @@
 from __future__ import annotations
 
+import os
 import tempfile
 from typing import Any, Dict, List, Optional, Text
 
@@ -78,14 +79,35 @@ def _get_domain_from_importer(config: Dict[Text, Any]) -> Domain:
     Returns:
         A Domain object .
     """
-    with tempfile.NamedTemporaryFile("w+", suffix=".yml") as tmp:
-        write_yaml(config, tmp.name)
+    # We create the file with delete=False so that it can be re-opened on
+    # Windows. If delete=True, the file is opened with the _O_TEMPORARY flag
+    # which blocks any second open() call.
+    tmp = tempfile.NamedTemporaryFile("w+", suffix=".yml", delete=False)
+
+    try:
+        path = tmp.name
+
+        # write_yaml() re-opens the same path. On Windows an already-open
+        # handle keeps the file locked for further opens, so we close
+        # the first handle before we call write_yaml().
+        tmp.close()
+        write_yaml(config, path)
+
         importer = TrainingDataImporter.load_from_config(
             domain_path=FlowSyncImporter.default_pattern_path(),
-            config_path=tmp.name,
+            config_path=path,
         )
         return importer.get_domain()
 
+    finally:
+        # Because we passed delete=False above, Python will not clean the file
+        # To avoid leaving garbage in the temp directory after the tests run,
+        # we remove it explicitly.
+        try:
+            os.remove(path)
+        except FileNotFoundError:
+            pass
+
 
 def get_pattern_defaults(config: Dict[Text, Any]) -> PatternDefaults:
     """Get the default flows, responses and slots for patterns.

rasa/cli/scaffold.py

@@ -24,21 +24,10 @@ class ProjectTemplateName(Enum):
 
     DEFAULT = "default"
     TUTORIAL = "tutorial"
-    PLAIN = "plain"
-    FINANCE = "finance"
-    TELCO = "telco"
 
     def __str__(self) -> str:
         return self.value
 
-    @classmethod
-    def get_all_values(cls) -> List[str]:
-        return [name.value for name in cls]
-
-    @classmethod
-    def supported_values(cls) -> str:
-        return ", ".join(cls.get_all_values())
-
 
 template_domain_path = defaultdict(lambda: DEFAULT_DOMAIN_PATH)
 template_domain_path[ProjectTemplateName.DEFAULT] = "domain"
@@ -170,17 +159,9 @@ def create_initial_project(
     path: Text, template: ProjectTemplateName = ProjectTemplateName.DEFAULT
 ) -> None:
     """Creates directory structure and templates for initial project."""
-    import distutils.dir_util as dir_util
-
-    # clear the cache of the copy_tree function, this avoids issues if
-    # a project directory existed before and we removed folders in it
-    # with shutil.rmtree. see
-    # https://stackoverflow.com/questions/9160227/dir-util-copy-tree-fails-after-shutil-rmtree
-    if hasattr(dir_util, "_path_created"):
-        dir_util._path_created.clear()
-    else:
-        dir_util.SkipRepeatAbsolutePaths.clear()
-    dir_util.copy_tree(scaffold_path(template), path)
+    from distutils.dir_util import copy_tree
+
+    copy_tree(scaffold_path(template), path)
 
 
 def scaffold_path(template: ProjectTemplateName) -> Text:

rasa/core/actions/action.py

@@ -908,12 +908,10 @@ class RemoteAction(Action):
                 draft.setdefault("buttons", [])
                 draft["buttons"].extend(buttons)
 
+            # Avoid overwriting `draft` values with empty values
             response = {k: v for k, v in response.items() if v}
-
             response.update(draft)
-            bot_messages.append(
-                create_bot_utterance(response, tracker.current_language)
-            )
+            bot_messages.append(create_bot_utterance(response))
 
         return bot_messages
 

rasa/core/channels/studio_chat.py

@@ -42,14 +42,14 @@ if TYPE_CHECKING:
     from sanic import Sanic, Websocket  # type: ignore[attr-defined]
     from socketio import AsyncServer
 
-    from rasa.core.channels.channel import UserMessage
+    from rasa.core.channels.channel import InputChannel, UserMessage
     from rasa.shared.core.trackers import DialogueStateTracker
 
 
 structlogger = structlog.get_logger()
 
 
-def tracker_as_dump(tracker: "DialogueStateTracker") -> Dict[str, Any]:
+def tracker_as_dump(tracker: "DialogueStateTracker") -> str:
     """Create a dump of the tracker state."""
     from rasa.shared.core.trackers import get_trackers_for_conversation_sessions
 
@@ -60,9 +60,8 @@ def tracker_as_dump(tracker: "DialogueStateTracker") -> Dict[str, Any]:
     else:
         last_tracker = multiple_tracker_sessions[-1]
 
-    # TODO: this is a bug: the bridge converts this back to json, but it
-    # should be json in the first place
-    return last_tracker.current_state(EventVerbosity.AFTER_RESTART)
+    state = last_tracker.current_state(EventVerbosity.AFTER_RESTART)
+    return json.dumps(state)
 
 
 def does_need_action_prediction(tracker: "DialogueStateTracker") -> bool:
@@ -149,7 +148,6 @@ class StudioChatInput(SocketIOInput, VoiceInputChannel):
         from rasa.core.agent import Agent
 
         self.agent: Optional[Agent] = None
-        self.latest_tracker_session_id = None
 
         # Initialize the SocketIO input channel
         SocketIOInput.__init__(
@@ -181,9 +179,7 @@ class StudioChatInput(SocketIOInput, VoiceInputChannel):
         self._register_tracker_update_hook()
 
     @classmethod
-    def from_credentials(
-        cls, credentials: Optional[Dict[Text, Any]]
-    ) -> "StudioChatInput":
+    def from_credentials(cls, credentials: Optional[Dict[Text, Any]]) -> "InputChannel":
         """Creates a StudioChatInput channel from credentials."""
         credentials = credentials or {}
 
@@ -215,11 +211,6 @@ class StudioChatInput(SocketIOInput, VoiceInputChannel):
         if not self.sio:
             structlogger.error("studio_chat.on_tracker_updated.sio_not_initialized")
             return
-
-        # we need the latest session id to use it for the llm helper to get the
-        # most recent conversation the user had with the bot.
-        self.latest_tracker_session_id = sender_id
-
         await self.sio.emit("tracker", tracker_dump, room=sender_id)
 
     async def on_message_proxy(
@@ -231,14 +222,7 @@ class StudioChatInput(SocketIOInput, VoiceInputChannel):
 
         Triggers a tracker update notification after processing the message.
         """
-        try:
-            await on_new_message(message)
-        except Exception as e:
-            structlogger.exception(
-                "studio_chat.on_new_message.error",
-                error=str(e),
-                sender_id=message.sender_id,
-            )
+        await on_new_message(message)
 
         if not self.agent:
             structlogger.error("studio_chat.on_message_proxy.agent_not_initialized")
@@ -291,7 +275,7 @@ class StudioChatInput(SocketIOInput, VoiceInputChannel):
     async def collect_call_parameters(
         self, channel_websocket: "Websocket"
     ) -> Optional[CallParameters]:
-        """Voice method to collect call parameters."""
+        """Voice method to collect call parameters"""
         session_id = channel_websocket.session_id
         return CallParameters(session_id, "local", "local", stream_id=session_id)
 
@@ -321,7 +305,7 @@ class StudioChatInput(SocketIOInput, VoiceInputChannel):
     def create_output_channel(
         self, voice_websocket: "Websocket", tts_engine: TTSEngine
     ) -> VoiceOutputChannel:
-        """Create a voice output channel."""
+        """Create a voice output channel"""
         return StudioVoiceOutputChannel(
             voice_websocket,
             tts_engine,
@@ -448,16 +432,8 @@ class StudioChatInput(SocketIOInput, VoiceInputChannel):
                     ws.put_message(data)
                 return
 
-            try:
-                # Handle text messages
-                await self.handle_user_message(sid, data, on_new_message)
-            except Exception as e:
-                structlogger.exception(
-                    "studio_chat.sio.handle_message.error",
-                    error=str(e),
-                    sid=sid,
-                )
-                await self.sio.emit("error", str(e), room=sid)
+            # Handle text messages
+            await self.handle_user_message(sid, data, on_new_message)
 
         @self.sio.on("update_tracker", namespace=self.namespace)
         async def on_update_tracker(sid: Text, data: Dict) -> None:

rasa/core/channels/voice_stream/asr/asr_engine.py

@@ -26,7 +26,7 @@ logger = structlog.get_logger(__name__)
 
 @dataclass
 class ASREngineConfig(MergeableConfig):
-    pass
+    keep_alive_interval: int = 5  # seconds
 
 
 class ASREngine(Generic[T]):
@@ -93,3 +93,7 @@ class ASREngine(Generic[T]):
     def get_default_config() -> T:
         """Get the default config for this component."""
         raise NotImplementedError
+
+    async def send_keep_alive(self) -> None:
+        """Send a keep-alive message to the ASR system if supported."""
+        pass

rasa/core/channels/voice_stream/asr/deepgram.py

@@ -145,3 +145,8 @@ class DeepgramASR(ASREngine[DeepgramASRConfig]):
     def concatenate_transcripts(t1: str, t2: str) -> str:
         """Concatenate two transcripts making sure there is a space between them."""
         return (t1.strip() + " " + t2.strip()).strip()
+
+    async def send_keep_alive(self) -> None:
+        """Send a keep-alive message to the Deepgram websocket connection."""
+        if self.asr_socket is not None:
+            await self.asr_socket.send(json.dumps({"type": "KeepAlive"}))

rasa/core/channels/voice_stream/audiocodes.py

@@ -81,6 +81,12 @@ class AudiocodesVoiceOutputChannel(VoiceOutputChannel):
         logger.debug("Sending start marker", stream_id=self._get_stream_id())
         await self.voice_websocket.send(media_message)
 
+        # This should be set when the bot actually starts speaking
+        # however, Audiocodes does not have an event to indicate that.
+        # This is an approximation, as the bot will be sent the audio chunks next
+        # which are played to the user immediately.
+        call_state.is_bot_speaking = True  # type: ignore[attr-defined]
+
     async def send_intermediate_marker(self, recipient_id: str) -> None:
         """Audiocodes doesn't need intermediate markers, so do nothing."""
         pass
@@ -170,21 +176,20 @@ class AudiocodesVoiceInputChannel(VoiceInputChannel):
         if data["type"] == "activities":
             activities = data["activities"]
             for activity in activities:
-                logger.debug("audiocodes_stream.activity", data=activity)
                 if activity["name"] == "start":
-                    # already handled in collect_call_parameters
+                    # handled in collect_call_parameters
                     pass
                 elif activity["name"] == "dtmf":
-                    # TODO: handle DTMF input
+                    logger.info("audiocodes_stream.dtmf_ignored", data=activity)
                     pass
                 elif activity["name"] == "playFinished":
                     logger.debug("audiocodes_stream.playFinished", data=activity)
+                    call_state.is_bot_speaking = False  # type: ignore[attr-defined]
                     if call_state.should_hangup:
                         logger.info("audiocodes_stream.hangup")
                         self._send_hangup(ws, data)
                         # the conversation should continue until
                         # we receive a end message from audiocodes
-                    pass
                 else:
                     logger.warning("audiocodes_stream.unknown_activity", data=activity)
         elif data["type"] == "userStream.start":

rasa/core/channels/voice_stream/jambonz.py

@@ -31,7 +31,7 @@ from rasa.core.channels.voice_stream.voice_channel import (
 
 logger = structlog.get_logger()
 
-JAMBONZ_STREAMS_WEBSOCKET_PATH = "webhooks/jambonz_streams/websocket"
+JAMBONZ_STREAMS_WEBSOCKET_PATH = "webhooks/jambonz_stream/websocket"
 
 
 def map_call_params(data: Dict[Text, str]) -> CallParameters:

rasa/core/channels/voice_stream/voice_channel.py

@@ -468,10 +468,17 @@ class VoiceInputChannel(InputChannel):
                     call_parameters,
                 )
 
+        async def asr_keep_alive_task() -> None:
+            interval = getattr(asr_engine.config, "keep_alive_interval", 5)
+            while True:
+                await asyncio.sleep(interval)
+                await asr_engine.send_keep_alive()
+
         tasks = [
             asyncio.create_task(consume_audio_bytes()),
             asyncio.create_task(receive_asr_events()),
             asyncio.create_task(handle_asr_events()),
+            asyncio.create_task(asr_keep_alive_task()),
         ]
         await asyncio.wait(
             tasks,

rasa/core/nlg/callback.py

@@ -19,7 +19,7 @@ def nlg_response_format_spec() -> Dict[Text, Any]:
     return {
         "type": "object",
         "properties": {
-            "text": {"type": "string"},
+            "text": {"type": ["string", "null"]},
             "id": {"type": ["string", "null"]},
             "buttons": {"type": ["array", "null"], "items": {"type": "object"}},
             "elements": {"type": ["array", "null"], "items": {"type": "object"}},

rasa/core/policies/enterprise_search_policy.py

@@ -679,7 +679,7 @@ class EnterpriseSearchPolicy(LLMHealthCheckMixin, EmbeddingsHealthCheckMixin, Po
         answer_relevant = not _ENTERPRISE_SEARCH_ANSWER_NOT_RELEVANT_PATTERN.search(
             llm_answer
         )
-        structlogger.debug("")
+
         return _RelevancyCheckResponse(
             answer=llm_answer if answer_relevant else None,
             relevant=answer_relevant,
@@ -784,19 +784,17 @@ class EnterpriseSearchPolicy(LLMHealthCheckMixin, EmbeddingsHealthCheckMixin, Po
         if not os.path.exists(docs_folder) or not os.path.isdir(docs_folder):
             error_message = (
                 f"Document source directory does not exist or is not a "
-                f"directory: '{os.path.abspath(docs_folder)}'. "
+                f"directory: '{docs_folder}'. "
                 "Please specify a valid path to the documents source directory in the "
                 "vector_store configuration."
             )
             structlogger.error(
                 "enterprise_search_policy.train.faiss.invalid_source_directory",
                 message=error_message,
-                docs_folder={os.path.abspath(docs_folder)},
-                configuration_value=docs_folder,
             )
             print_error_and_exit(error_message)
 
-        docs = glob.glob(os.path.join(docs_folder, "**/*.txt"), recursive=True)
+        docs = glob.glob(os.path.join(docs_folder, "*.txt"), recursive=True)
         if not docs or len(docs) < 1:
             error_message = (
                 f"Document source directory is empty: '{docs_folder}'. "
@@ -1135,7 +1133,8 @@ class EnterpriseSearchPolicy(LLMHealthCheckMixin, EmbeddingsHealthCheckMixin, Po
         embeddings_config: Dict[Text, Any],
         log_source_method: str,
     ) -> None:
-        """Perform the health checks using resolved LLM and embeddings configurations.
+        """
+        Perform the health checks using resolved LLM and embeddings configurations.
         Resolved means the configuration is either:
         - A reference to a model group that has already been expanded into
           its corresponding configuration using the information from
@@ -1164,7 +1163,8 @@ class EnterpriseSearchPolicy(LLMHealthCheckMixin, EmbeddingsHealthCheckMixin, Po
 
     @classmethod
     def get_system_default_prompt_based_on_config(cls, config: Dict[str, Any]) -> str:
-        """Resolves the default prompt template for Enterprise Search Policy based on
+        """
+        Resolves the default prompt template for Enterprise Search Policy based on
         the component's configuration.
 
         - The old prompt is selected when both citation and relevancy check are either
@@ -1195,7 +1195,8 @@ class EnterpriseSearchPolicy(LLMHealthCheckMixin, EmbeddingsHealthCheckMixin, Po
         relevancy_check_enabled: bool,
         citation_enabled: bool,
     ) -> str:
-        """Returns the appropriate default prompt template based on the feature flags.
+        """
+        Returns the appropriate default prompt template based on the feature flags.
 
         The selection follows this priority:
         1. If relevancy check is enabled, return the prompt that includes both relevancy

rasa/core/policies/flows/flow_executor.py

@@ -740,14 +740,7 @@ def _run_action_step(
             # do not log about non-existing validation actions of collect steps
             utter_action_name = render_template_variables("{{context.utter}}", context)
             if utter_action_name not in available_actions:
-                structlogger.warning(
-                    "flow.step.run.action.unknown",
-                    action=action_name,
-                    event_info=(
-                        f"The action '{action_name}' is not defined in the domain but "
-                        f"getting triggered by the flow '{step.flow_id}'."
-                    ),
-                )
+                structlogger.warning("flow.step.run.action.unknown", action=action_name)
         return ContinueFlowWithNextStep(events=initial_events)
 
 

rasa/dialogue_understanding/commands/correct_slots_command.py

@@ -232,16 +232,6 @@ class CorrectSlotsCommand(Command):
             proposed_slots, all_flows, tracker
         )
 
-        if not earliest_collect and not is_reset_only:
-            # if we could not find any step in the flow, where the slots were
-            # previously set, and we also don't want to reset the slots, do
-            # not correct the slots.
-            structlogger.debug(
-                "correct_slots_command.skip_correction",
-                is_reset_only=is_reset_only,
-            )
-            return None
-
         return CorrectionPatternFlowStackFrame(
             is_reset_only=is_reset_only,
             corrected_slots=proposed_slots,

rasa/dialogue_understanding/generator/command_generator.py

@@ -114,7 +114,7 @@ class CommandGenerator:
             # slot asked by the active collect step.
             # Or return a CannotHandleCommand if no matching command is found.
             commands = self._filter_commands_during_force_slot_filling(
-                commands, available_flows, tracker
+                commands, flows, tracker
             )
 
             commands_dicts = [command.as_dict() for command in commands]
@@ -385,14 +385,14 @@ class CommandGenerator:
     @staticmethod
     def _filter_commands_during_force_slot_filling(
         commands: List[Command],
-        available_flows: FlowsList,
+        flows: FlowsList,
         tracker: Optional[DialogueStateTracker] = None,
     ) -> List[Command]:
         """Filter commands during a collect step that has set `force_slot_filling`.
 
         Args:
             commands: The commands to filter.
-            available_flows: The available flows.
+            flows: All flows.
             tracker: The tracker.
 
         Returns:
@@ -409,7 +409,7 @@ class CommandGenerator:
             )
             return commands
 
-        updated_flows = find_updated_flows(tracker, available_flows)
+        updated_flows = find_updated_flows(tracker, flows)
         if updated_flows:
             structlogger.debug(
                 "command_generator.filter_commands_during_force_slot_filling.running_flows_were_updated",
@@ -418,7 +418,7 @@ class CommandGenerator:
             return [HandleCodeChangeCommand()]
 
         stack = tracker.stack
-        step = get_current_collect_step(stack, available_flows)
+        step = get_current_collect_step(stack, flows)
 
         if step is None or not step.force_slot_filling:
             return commands

rasa/dialogue_understanding/generator/flow_retrieval.py

@@ -219,6 +219,11 @@ class FlowRetrieval(EmbeddingsHealthCheckMixin):
         if self.vector_store is not None:
             with self._model_storage.write_to(self._resource) as model_path:
                 self.vector_store.save_local(model_path)
+        else:
+            structlogger.warning(
+                "flow_retrieval.persist_vector_store.not_initialized",
+                event_info="Vector store is None, not persisted.",
+            )
 
     def _persist_config(self) -> None:
         with self._model_storage.write_to(self._resource) as path:
@@ -244,16 +249,6 @@ class FlowRetrieval(EmbeddingsHealthCheckMixin):
         )
 
         flows_to_embedd = flows.exclude_link_only_flows()
-
-        if not flows_to_embedd:
-            structlogger.debug(
-                "flow_retrieval.populate_vector_store.no_flows_to_embed",
-                event_info=(
-                    "No flows to embed in the vector store, skipping population."
-                ),
-            )
-            return
-
         embeddings = self._create_embedder(self.config)
         documents = self._generate_flow_documents(flows_to_embedd, domain)
         try:
@@ -425,6 +420,10 @@ class FlowRetrieval(EmbeddingsHealthCheckMixin):
             The top k documents with similarity scores.
         """
         if self.vector_store is None:
+            structlogger.error(
+                "flow_retrieval.query_vector_store.vector_store_not_configured",
+                event_info="Vector store is not configured",
+            )
             return []
         try:
             documents_with_scores = (

rasa/dialogue_understanding/processor/command_processor.py

@@ -398,7 +398,12 @@ def clean_up_commands(
     """
     domain = domain if domain else Domain.empty()
 
-    slots_so_far, active_flow = filled_slots_for_active_flow(tracker, all_flows)
+    slots_so_far, _ = filled_slots_for_active_flow(tracker, all_flows)
+
+    # update the slots so far with the slots that were set in the tracker
+    slots_so_far.update(
+        {event.key for event in tracker.events if isinstance(event, SlotSet)}
+    )
 
     clean_commands: List[Command] = []
 

rasa/model_manager/model_api.py

@@ -39,9 +39,11 @@ from rasa.model_manager.trainer_service import (
     update_training_status,
 )
 from rasa.model_manager.utils import (
+    InvalidPathException,
     get_logs_content,
     logs_base_path,
     models_base_path,
+    subpath,
 )
 from rasa.model_manager.warm_rasa_process import (
     initialize_warm_rasa_process,
@@ -51,7 +53,6 @@ from rasa.server import ErrorResponse
 from rasa.shared.exceptions import InvalidConfigException
 from rasa.shared.utils.yaml import dump_obj_as_yaml_to_string
 from rasa.studio.upload import build_calm_import_parts
-from rasa.utils.io import InvalidPathException, subpath
 
 dotenv.load_dotenv()
 
@@ -104,7 +105,7 @@ async def update_status_of_all_bots() -> None:
         await update_bot_status(bot)
 
 
-def base_server_url(request: Optional[Request]) -> str:
+def base_server_url(request: Request) -> str:
     """Return the base URL of the server."""
     if SERVER_BASE_URL:
         return SERVER_BASE_URL.rstrip("/")

rasa/model_manager/runner_service.py

@@ -15,11 +15,11 @@ from rasa.model_manager import config
 from rasa.model_manager.utils import (
     logs_path,
     models_base_path,
+    subpath,
     write_encoded_data_to_file,
 )
 from rasa.model_manager.warm_rasa_process import start_rasa_process
 from rasa.studio.prompts import handle_prompts
-from rasa.utils.io import subpath
 
 structlogger = structlog.get_logger()
 

rasa/model_manager/trainer_service.py

@@ -14,6 +14,7 @@ from rasa.model_manager.utils import (
     ensure_base_directory_exists,
     logs_path,
     models_base_path,
+    subpath,
     write_encoded_data_to_file,
 )
 from rasa.model_manager.warm_rasa_process import (
@@ -21,7 +22,6 @@ from rasa.model_manager.warm_rasa_process import (
 )
 from rasa.model_training import generate_random_model_name
 from rasa.studio.prompts import handle_prompts
-from rasa.utils.io import subpath
 
 structlogger = structlog.get_logger()
 
@@ -53,15 +53,6 @@ class TrainingSession(BaseModel):
         """Check if the training is running."""
         return self.status == TrainingSessionStatus.RUNNING
 
-    def has_just_finished(self) -> bool:
-        if not self.is_status_indicating_alive():
-            # skip if the training is not running
-            return False
-        if self.process.poll() is None:
-            # process is still running
-            return False
-        return True
-
     def model_path(self) -> str:
         """Return the path to the model."""
         return subpath(models_base_path(), f"{self.model_name}.tar.gz")
@@ -98,8 +89,14 @@ def terminate_training(training: TrainingSession) -> None:
 
 
 def update_training_status(training: TrainingSession) -> None:
-    if training.has_just_finished():
-        complete_training(training)
+    if not training.is_status_indicating_alive():
+        # skip if the training is not running
+        return
+    if training.process.poll() is None:
+        # process is still running
+        return
+
+    complete_training(training)
 
 
 def complete_training(training: TrainingSession) -> None:

rasa/model_manager/utils.py

@@ -5,11 +5,15 @@ from typing import Optional
 import structlog
 
 from rasa.model_manager import config
-from rasa.utils.io import subpath
+from rasa.shared.exceptions import RasaException
 
 structlogger = structlog.get_logger()
 
 
+class InvalidPathException(RasaException):
+    """Raised if a path is invalid - e.g. path traversal is detected."""
+
+
 def write_encoded_data_to_file(encoded_data: bytes, file: str) -> None:
     """Write base64 encoded data to a file."""
     # create the directory if it does not exist of the parent directory
@@ -49,6 +53,30 @@ def logs_path(action_id: str) -> str:
     return subpath(logs_base_path(), f"{action_id}.txt")
 
 
+def subpath(parent: str, child: str) -> str:
+    """Return the path to the child directory of the parent directory.
+
+    Ensures, that child doesn't navigate to parent directories. Prevents
+    path traversal. Raises an InvalidPathException if the path is invalid.
+
+    Based on Snyk's directory traversal mitigation:
+    https://learn.snyk.io/lesson/directory-traversal/
+    """
+    safe_path = os.path.abspath(os.path.join(parent, child))
+    parent = os.path.abspath(parent)
+
+    common_base = os.path.commonpath([parent, safe_path])
+    if common_base != parent:
+        raise InvalidPathException(f"Invalid path: {safe_path}")
+
+    if os.path.basename(safe_path) != child:
+        raise InvalidPathException(
+            f"Invalid path - path traversal detected: {safe_path}"
+        )
+
+    return safe_path
+
+
 def get_logs_content(action_id: str) -> Optional[str]:
     """Return the content of the log file for a given action id."""
     try: