Skip to content

chore: v1.0.8 #5051

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 149 commits into from
Jun 11, 2025
Merged

chore: v1.0.8 #5051

merged 149 commits into from
Jun 11, 2025

Conversation

ChristopherTrimboli
Copy link
Member

@ChristopherTrimboli ChristopherTrimboli commented Jun 10, 2025

lalalune and others added 30 commits June 6, 2025 23:15
- Restructure API into 8 domain-based routers: agents, messaging, media, memory, audio, runtime, tee, system
- Create shared utilities for response handling, validation, and file operations
- Remove 2,800+ lines of duplicate and legacy code (agent.ts, messages.ts, env.ts, tee.ts, world.ts)
- Maintain backward compatibility through proper domain organization
- Clean up main router integration and remove duplicate route aliases
- Fix TypeScript build errors and import path issues

New structure:
- /agents: Agent CRUD operations and management
- /messaging: Message handling, channels, and communication
- /media: File uploads and media management
- /memory: Memory and knowledge operations
- /audio: Speech, TTS, and audio processing
- /runtime: Server runtime operations (health, logs, stop)
- /tee: TEE security operations
- /system: Environment and system configuration
- Update /messages/* endpoints to /messaging/*
- Update /envs/* endpoints to /system/*
- Update /logs, /ping endpoints to /runtime/*
- Maintain full backward compatibility through proper domain routing
- All client builds pass successfully
- Add SSRF protection in MessageBusService with URL validation for allowed hosts
- Add path traversal protection in file-utils with proper path validation
- Add rate limiting to audio processing endpoints (10 uploads/minute per IP)
- Update API endpoint URL to use new messaging domain structure

Addresses:
- Critical: Server-side request forgery vulnerability
- High: Uncontrolled data used in path expressions
- High: Missing rate limiting for file system access routes
- Add memory functionality to agents domain router
- Ensure /api/agents/:id/memories endpoint is accessible
- Import and mount createAgentMemoryRouter in agents/index.ts
- Maintains compatibility with existing client expectations
- Fix SSRF vulnerability in message service by strengthening URL validation
- Add enhanced rate limiting with IP blocking for audio processing endpoints
- Add strict file type validation and size limits for uploads
- Improve path validation to prevent directory traversal attacks
- Strengthen environment variable validation and sanitization
- Add explicit timeouts to all execSync calls to prevent hanging
- Increase server startup timeout from 30s to 60s
- Add better error handling for character loading failures
- Increase overall test timeout from 60s to 120s
- Add debugging output for server startup failures
- Handle exit code 137 gracefully for timeout scenarios

Revert "Fix CLI test timeouts and improve error handling"

This reverts commit 79e8b94.
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
… in path expression

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
ChristopherTrimboli and others added 20 commits June 10, 2025 11:58
fix: remove message from chat UI on delete
fix: implement real-time message deletion via SocketIO
fix: onboarding user settings error
refactor: reorganize cli commands into modular structure
- Add support for ProjectAgent type in start command
- Load project configuration when no --character flag provided
- Start agents with their initialization functions and plugins
- Fall back to default Eliza character if no project agents found
- Improve logging to show loaded agent names

This allows projects to define agents in their configuration
and have them automatically loaded by the start command.
Fix: Enable loading project agents when no character files specified
- Complete collection with 90+ REST API endpoints
- Organized into logical categories (agents, messaging, memory, audio, etc.)
- Fixed URL paths to match actual implementation
- Includes collection variables and auto-generated test UUIDs
- Covers all discovered endpoints from server codebase
…project-load

fix: load the env config before agent project is loaded
chore: migrate all generated files into .eliza
chore: add comprehensive Postman collection for elizaOS APIs
Copy link
Contributor

coderabbitai bot commented Jun 10, 2025

Important

Review skipped

Auto reviews are disabled on this repository.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing Touches
🧪 Generate Unit Tests
  • Create PR with Unit Tests
  • Commit Unit Tests in branch develop
  • Post Copyable Unit Tests in Comment

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share
🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>, please review it.
    • Explain this complex logic.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai explain this code block.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
    • @coderabbitai read src/utils.ts and explain its main purpose.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
    • @coderabbitai help me debug CodeRabbit configuration file.

Support

Need help? Create a ticket on our support page for assistance with any issues or questions.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai generate docstrings to generate docstrings for this PR.
  • @coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
  • @coderabbitai auto-generate unit tests to generate unit tests for this PR.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

@ChristopherTrimboli ChristopherTrimboli changed the title v1.0.8 chore: v1.0.8 Jun 10, 2025
@ChristopherTrimboli ChristopherTrimboli merged commit 928b3ca into main Jun 11, 2025
13 of 15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

9 participants