Merge pull request elizaOS#3645 from elizaOS/odi-fix-lock

chore: stablize develop

Author: shakkernerd

.github/workflows/integrationTests.yaml

@@ -14,7 +14,7 @@ jobs:
       OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
       TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
       TURBO_TEAM: ${{ vars.TURBO_TEAM }}
-      TURBO_REMOTE_ONLY: true
+      TURBO_CACHE: remote:rw
     steps:
       - uses: actions/checkout@v4
         with:
@@ -43,4 +43,4 @@ jobs:
           fi
 
       - name: Run integration tests
-        run: pnpm run integrationTests
+        run: pnpm run integrationTests

.github/workflows/smoke-tests.yml

@@ -14,7 +14,7 @@ jobs:
       OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
       TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
       TURBO_TEAM: ${{ vars.TURBO_TEAM }}
-      TURBO_REMOTE_ONLY: true
+      TURBO_CACHE: remote:rw
     steps:
       - uses: actions/checkout@v4
         with:

client/src/lib/info.json

@@ -1 +1 @@
-{"version": "0.25.7"}
+{"version": "0.25.8"}

package.json

@@ -35,6 +35,7 @@
     "husky": "9.1.7",
     "jest": "^29.7.0",
     "lerna": "8.1.5",
+    "nodemon": "3.1.7",
     "only-allow": "1.2.1",
     "turbo": "2.4.2",
     "typedoc": "0.26.11",

packages/client-direct/src/api.ts

@@ -52,7 +52,7 @@ function validateUUIDParams(
 }
 
 export function createApiRouter(
-    agents: Map<string, AgentRuntime>,
+    agents: Map<string, IAgentRuntime>,
     directClient: DirectClient
 ):Router {
     const router = express.Router();

packages/client-direct/src/index.ts

@@ -656,12 +656,16 @@ export class DirectClient {
             "/fine-tune/:assetId",
             async (req: express.Request, res: express.Response) => {
                 const assetId = req.params.assetId;
-                const downloadDir = path.join(
-                    process.cwd(),
-                    "downloads",
-                    assetId
-                );
 
+                const ROOT_DIR = path.join(process.cwd(), "downloads");
+                const downloadDir = path.resolve(ROOT_DIR, assetId);
+
+                if (!downloadDir.startsWith(ROOT_DIR)) {
+                    res.status(403).json({
+                        error: "Invalid assetId. Access denied.",
+                    });
+                    return;
+                }
                 elizaLogger.log("Download directory:", downloadDir);
 
                 try {

packages/client-direct/src/verifiable-log-api.ts

@@ -10,7 +10,7 @@ import type {
 } from "@elizaos/plugin-tee-verifiable-log";
 
 export function createVerifiableLogApiRouter(
-    agents: Map<string, AgentRuntime>
+    agents: Map<string, IAgentRuntime>
 ):Router {
     const router = express.Router();
     router.use(cors());

pnpm-lock.yaml

@@ -16,11 +16,7 @@
         },
         "@elizaos/client-direct#build": {
             "outputs": ["dist/**"],
-            "dependsOn": [
-                "@elizaos/plugin-image-generation#build",
-                "@elizaos/plugin-tee-log#build",
-                "@elizaos/plugin-tee-verifiable-log#build"
-            ]
+            "dependsOn": []
         },
         "eliza-docs#build": {
             "outputs": ["build/**"]