@elizaos/server 1.0.12 → 1.0.14

package/dist/index.js

@@ -4,7 +4,13 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __commonJS = (cb, mod) => function __require() {
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+var __commonJS = (cb, mod) => function __require2() {
   return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
 };
 var __copyProps = (to, from, except, desc) => {
@@ -381,13 +387,11 @@ var import_cors2 = __toESM(require_lib(), 1);
 import {
   logger as logger29
 } from "@elizaos/core";
-import bodyParser2 from "body-parser";
 import express30 from "express";
-import fileUpload2 from "express-fileupload";
 import helmet2 from "helmet";
-import * as fs6 from "fs";
+import * as fs9 from "fs";
 import http from "http";
-import path6, { basename, dirname, extname, join } from "path";
+import path9, { basename, dirname, extname, join } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 
 // src/api/index.ts
@@ -499,7 +503,7 @@ function createAgentCrudRouter(agents, serverInstance) {
   });
   router.post("/", async (req, res) => {
     logger.debug("[AGENT CREATE] Creating new agent");
-    const { characterPath, characterJson } = req.body;
+    const { characterPath, characterJson, agent } = req.body;
     if (!db) {
       return sendError(res, 500, "DB_ERROR", "Database not available");
     }
@@ -511,6 +515,9 @@ function createAgentCrudRouter(agents, serverInstance) {
       } else if (characterPath) {
         logger.debug(`[AGENT CREATE] Loading character from path: ${characterPath}`);
         character = await serverInstance?.loadCharacterTryPath(characterPath);
+      } else if (agent) {
+        logger.debug("[AGENT CREATE] Parsing character from agent object");
+        character = await serverInstance?.jsonToCharacter(agent);
       } else {
         throw new Error("No character configuration provided");
       }
@@ -524,12 +531,12 @@ function createAgentCrudRouter(agents, serverInstance) {
       }
       const ensureAgentExists = async (character2) => {
         const agentId = stringToUuid(character2.name);
-        let agent = await db.getAgent(agentId);
-        if (!agent) {
+        let agent2 = await db.getAgent(agentId);
+        if (!agent2) {
           await db.createAgent({ ...character2, id: agentId });
-          agent = await db.getAgent(agentId);
+          agent2 = await db.getAgent(agentId);
         }
-        return agent;
+        return agent2;
       };
       const newAgent = await ensureAgentExists(character);
       if (!newAgent) {
@@ -1183,6 +1190,30 @@ function createAgentMemoryRouter(agents) {
       );
     }
   });
+  router.delete("/:agentId/memories/:memoryId", async (req, res) => {
+    try {
+      const agentId = validateUuid6(req.params.agentId);
+      const memoryId = validateUuid6(req.params.memoryId);
+      if (!agentId || !memoryId) {
+        return sendError(res, 400, "INVALID_ID", "Invalid agent ID or memory ID format");
+      }
+      const runtime = agents.get(agentId);
+      if (!runtime) {
+        return sendError(res, 404, "NOT_FOUND", "Agent not found");
+      }
+      await runtime.deleteMemory(memoryId);
+      sendSuccess(res, { message: "Memory deleted successfully" });
+    } catch (error) {
+      logger6.error(`[DELETE MEMORY] Error deleting memory ${req.params.memoryId}:`, error);
+      sendError(
+        res,
+        500,
+        "DELETE_ERROR",
+        "Error deleting memory",
+        error instanceof Error ? error.message : String(error)
+      );
+    }
+  });
   return router;
 }
 
@@ -1683,189 +1714,16 @@ import {
   composePromptFromState,
   ModelType,
   ChannelType as ChannelType2,
-  logger as logger14,
-  validateUuid as validateUuid13
+  logger as logger12,
+  validateUuid as validateUuid12
 } from "@elizaos/core";
 import express11 from "express";
 
-// src/upload.ts
-import fs2 from "fs";
-import path2 from "path";
-import fileUpload from "express-fileupload";
-import { validateUuid as validateUuid10, logger as logger11 } from "@elizaos/core";
-
-// src/api/shared/file-utils.ts
-import fs from "fs";
-import path from "path";
-import { logger as logger10 } from "@elizaos/core";
-function createSecureUploadDir(id, type) {
-  if (id.includes("..") || id.includes("/") || id.includes("\\") || id.includes("\0")) {
-    throw new Error(`Invalid ${type.slice(0, -1)} ID: contains illegal characters`);
-  }
-  const basePath = path.resolve(process.cwd(), ".eliza", "data", "uploads", type);
-  const targetPath = path.join(basePath, id);
-  if (!targetPath.startsWith(basePath)) {
-    throw new Error(`Invalid ${type.slice(0, -1)} ID: path traversal detected`);
-  }
-  return targetPath;
-}
-function sanitizeFilename(filename) {
-  let sanitized = filename.replace(/[\0\/\\:*?"<>|]/g, "_");
-  sanitized = sanitized.replace(/^[.\s]+/, "");
-  if (sanitized.length > 255) {
-    const ext = path.extname(sanitized);
-    const name = path.basename(sanitized, ext);
-    sanitized = name.substring(0, 255 - ext.length) + ext;
-  }
-  if (!sanitized || sanitized.trim() === "") {
-    sanitized = "file";
-  }
-  return sanitized;
-}
-var cleanupFile = (filePath) => {
-  if (!filePath) return;
-  try {
-    const resolvedPath = path.resolve(filePath);
-    const normalizedPath = path.normalize(resolvedPath);
-    if (normalizedPath.includes("..") || !normalizedPath.startsWith(process.cwd())) {
-      logger10.warn(`[SECURITY] Potentially unsafe file path blocked: ${filePath}`);
-      return;
-    }
-    if (fs.existsSync(normalizedPath)) {
-      fs.unlinkSync(normalizedPath);
-      logger10.debug(`[FILE] Successfully cleaned up file: ${normalizedPath}`);
-    }
-  } catch (error) {
-    logger10.error(`Error cleaning up file ${filePath}:`, error);
-  }
-};
-var cleanupUploadedFile = (file) => {
-  if (file.tempFilePath) {
-    cleanupFile(file.tempFilePath);
-  }
-};
-
-// src/api/shared/constants.ts
-var MAX_FILE_SIZE = 50 * 1024 * 1024;
-var MAX_FILE_SIZE_DISPLAY = "50MB";
-var ALLOWED_AUDIO_MIME_TYPES = [
-  "audio/mpeg",
-  "audio/mp3",
-  "audio/wav",
-  "audio/ogg",
-  "audio/webm",
-  "audio/mp4",
-  "audio/aac",
-  "audio/flac",
-  "audio/x-wav",
-  "audio/wave"
-];
-var ALLOWED_MEDIA_MIME_TYPES = [
-  ...ALLOWED_AUDIO_MIME_TYPES,
-  "image/jpeg",
-  "image/png",
-  "image/gif",
-  "image/webp",
-  "video/mp4",
-  "video/webm",
-  "application/pdf",
-  "text/plain"
-];
-
-// src/upload.ts
-function generateSecureFilename(originalName) {
-  const uniqueSuffix = `${Date.now()}-${Math.round(Math.random() * 1e9)}`;
-  const sanitizedName = sanitizeFilename(originalName);
-  return `${uniqueSuffix}-${sanitizedName}`;
-}
-function ensureUploadDir(id, type) {
-  if (!validateUuid10(id)) {
-    throw new Error(`Invalid ${type.slice(0, -1)} ID format`);
-  }
-  const uploadDir = createSecureUploadDir(id, type);
-  if (!fs2.existsSync(uploadDir)) {
-    fs2.mkdirSync(uploadDir, { recursive: true });
-  }
-  logger11.debug(`[UPLOAD] Secure ${type.slice(0, -1)} upload directory created: ${uploadDir}`);
-  return uploadDir;
-}
-var agentAudioUpload = () => fileUpload({
-  limits: {
-    fileSize: MAX_FILE_SIZE,
-    // 50MB max file size
-    files: 1
-    // Only allow 1 file per request
-  },
-  useTempFiles: true,
-  tempFileDir: "/tmp/",
-  parseNested: true,
-  abortOnLimit: true,
-  createParentPath: true,
-  preserveExtension: true,
-  safeFileNames: true,
-  uploadTimeout: 6e4
-  // 60 seconds timeout
-});
-var agentMediaUpload = () => fileUpload({
-  limits: {
-    fileSize: MAX_FILE_SIZE,
-    // 50MB max file size
-    files: 1
-    // Only allow 1 file per request
-  },
-  useTempFiles: true,
-  tempFileDir: "/tmp/",
-  parseNested: true,
-  abortOnLimit: true,
-  createParentPath: true,
-  preserveExtension: true,
-  safeFileNames: true,
-  uploadTimeout: 6e4
-  // 60 seconds timeout
-});
-var channelUpload = () => fileUpload({
-  limits: {
-    fileSize: MAX_FILE_SIZE,
-    // 50MB max file size
-    files: 1
-    // Only allow 1 file per request
-  },
-  useTempFiles: true,
-  tempFileDir: "/tmp/",
-  parseNested: true,
-  abortOnLimit: true,
-  createParentPath: true,
-  preserveExtension: true,
-  safeFileNames: true,
-  uploadTimeout: 6e4
-  // 60 seconds timeout
-});
-function validateAudioFile(file) {
-  return ALLOWED_AUDIO_MIME_TYPES.includes(file.mimetype);
-}
-function validateMediaFile(file) {
-  return ALLOWED_MEDIA_MIME_TYPES.includes(file.mimetype);
-}
-async function processUploadedFile(file, targetId, type) {
-  try {
-    const uploadDir = ensureUploadDir(targetId, type);
-    const filename = generateSecureFilename(file.name);
-    const finalPath = path2.join(uploadDir, filename);
-    await file.mv(finalPath);
-    const url = `/media/uploads/${type}/${targetId}/${filename}`;
-    logger11.debug(`[UPLOAD] File processed successfully: ${filename}`);
-    return { filename, path: finalPath, url };
-  } catch (error) {
-    logger11.error("[UPLOAD] Error processing uploaded file:", error);
-    throw error;
-  }
-}
-
 // src/api/shared/middleware.ts
-import { validateUuid as validateUuid12, logger as logger13 } from "@elizaos/core";
+import { validateUuid as validateUuid11, logger as logger11 } from "@elizaos/core";
 
 // src/api/shared/validation.ts
-import { validateUuid as validateUuid11, logger as logger12 } from "@elizaos/core";
+import { validateUuid as validateUuid10, logger as logger10 } from "@elizaos/core";
 var getRuntime = (agents, agentId) => {
   const runtime = agents.get(agentId);
   if (!runtime) {
@@ -1889,7 +1747,7 @@ var securityMiddleware = () => {
     const realIp = req.get("X-Real-IP");
     const clientIp = forwarded || realIp || req.ip;
     if (userAgent && (userAgent.includes("..") || userAgent.includes("<script"))) {
-      logger13.warn(`[SECURITY] Suspicious User-Agent from ${clientIp}: ${userAgent}`);
+      logger11.warn(`[SECURITY] Suspicious User-Agent from ${clientIp}: ${userAgent}`);
     }
     const url = req.originalUrl || req.url;
     const queryString = JSON.stringify(req.query);
@@ -1915,12 +1773,12 @@ var securityMiddleware = () => {
     }
     for (const indicator of suspiciousIndicators) {
       if (url.includes(indicator.pattern) || queryString.includes(indicator.pattern)) {
-        logger13.warn(`[SECURITY] ${indicator.name} detected from ${clientIp}: ${url}`);
+        logger11.warn(`[SECURITY] ${indicator.name} detected from ${clientIp}: ${url}`);
         break;
       }
     }
     if (hasSqlPattern) {
-      logger13.warn(`[SECURITY] SQL injection pattern detected from ${clientIp}: ${url}`);
+      logger11.warn(`[SECURITY] SQL injection pattern detected from ${clientIp}: ${url}`);
     }
     next();
   };
@@ -1969,7 +1827,7 @@ var createApiRateLimit = () => {
     // Disable the `X-RateLimit-*` headers
     handler: (req, res) => {
       const clientIp = req.ip || "unknown";
-      logger13.warn(`[SECURITY] Rate limit exceeded for IP: ${clientIp}`);
+      logger11.warn(`[SECURITY] Rate limit exceeded for IP: ${clientIp}`);
       res.status(429).json({
         success: false,
         error: {
@@ -1997,7 +1855,7 @@ var createFileSystemRateLimit = () => {
     legacyHeaders: false,
     handler: (req, res) => {
       const clientIp = req.ip || "unknown";
-      logger13.warn(
+      logger11.warn(
         `[SECURITY] File system rate limit exceeded for IP: ${clientIp}, endpoint: ${req.path}`
       );
       res.status(429).json({
@@ -2027,7 +1885,7 @@ var createUploadRateLimit = () => {
     legacyHeaders: false,
     handler: (req, res) => {
       const clientIp = req.ip || "unknown";
-      logger13.warn(
+      logger11.warn(
         `[SECURITY] Upload rate limit exceeded for IP: ${clientIp}, endpoint: ${req.path}`
       );
       res.status(429).json({
@@ -2041,14 +1899,73 @@ var createUploadRateLimit = () => {
   });
 };
 
+// src/api/shared/constants.ts
+var MAX_FILE_SIZE = 50 * 1024 * 1024;
+var MAX_FILE_SIZE_DISPLAY = "50MB";
+var ALLOWED_AUDIO_MIME_TYPES = [
+  "audio/mpeg",
+  "audio/mp3",
+  "audio/wav",
+  "audio/ogg",
+  "audio/webm",
+  "audio/mp4",
+  "audio/aac",
+  "audio/flac",
+  "audio/x-wav",
+  "audio/wave"
+];
+var ALLOWED_MEDIA_MIME_TYPES = [
+  ...ALLOWED_AUDIO_MIME_TYPES,
+  "image/jpeg",
+  "image/png",
+  "image/gif",
+  "image/webp",
+  "video/mp4",
+  "video/webm",
+  "application/pdf",
+  "text/plain"
+];
+
 // src/api/messaging/channels.ts
+import multer from "multer";
+import fs from "fs";
+import path from "path";
 var DEFAULT_SERVER_ID3 = "00000000-0000-0000-0000-000000000000";
+var channelStorage = multer.memoryStorage();
+var channelUploadMiddleware = multer({
+  storage: channelStorage,
+  limits: {
+    fileSize: MAX_FILE_SIZE,
+    files: 1
+  },
+  fileFilter: (req, file, cb) => {
+    if (ALLOWED_MEDIA_MIME_TYPES.includes(file.mimetype)) {
+      cb(null, true);
+    } else {
+      cb(new Error("Invalid file type"), false);
+    }
+  }
+});
+async function saveChannelUploadedFile(file, channelId) {
+  const uploadDir = path.join(process.cwd(), ".eliza/data/uploads/channels", channelId);
+  if (!fs.existsSync(uploadDir)) {
+    fs.mkdirSync(uploadDir, { recursive: true });
+  }
+  const timestamp = Date.now();
+  const random = Math.round(Math.random() * 1e9);
+  const ext = path.extname(file.originalname);
+  const filename = `${timestamp}-${random}${ext}`;
+  const filePath = path.join(uploadDir, filename);
+  fs.writeFileSync(filePath, file.buffer);
+  const url = `/media/uploads/channels/${channelId}/${filename}`;
+  return { filename, url };
+}
 function createChannelsRouter(agents, serverInstance) {
   const router = express11.Router();
   router.post(
     "/central-channels/:channelId/messages",
     async (req, res) => {
-      const channelIdParam = validateUuid13(req.params.channelId);
+      const channelIdParam = validateUuid12(req.params.channelId);
       const {
         author_id,
         // This is the GUI user's central ID
@@ -2063,40 +1980,40 @@ function createChannelsRouter(agents, serverInstance) {
         source_type
         // Should be something like 'eliza_gui'
       } = req.body;
-      const isValidServerId = server_id === DEFAULT_SERVER_ID3 || validateUuid13(server_id);
-      if (!channelIdParam || !validateUuid13(author_id) || !content || !isValidServerId) {
+      const isValidServerId = server_id === DEFAULT_SERVER_ID3 || validateUuid12(server_id);
+      if (!channelIdParam || !validateUuid12(author_id) || !content || !isValidServerId) {
         return res.status(400).json({
           success: false,
           error: "Missing required fields: channelId, server_id, author_id, content"
         });
       }
       try {
-        logger14.info(
+        logger12.info(
           `[Messages Router] Checking if channel ${channelIdParam} exists before creating message`
         );
         let channelExists = false;
         try {
           const existingChannel = await serverInstance.getChannelDetails(channelIdParam);
           channelExists = !!existingChannel;
-          logger14.info(`[Messages Router] Channel ${channelIdParam} exists: ${channelExists}`);
+          logger12.info(`[Messages Router] Channel ${channelIdParam} exists: ${channelExists}`);
         } catch (error) {
           const errorMessage = error instanceof Error ? error.message : String(error);
-          logger14.info(
+          logger12.info(
             `[Messages Router] Channel ${channelIdParam} does not exist, will create it. Error: ${errorMessage}`
           );
         }
         if (!channelExists) {
-          logger14.info(
+          logger12.info(
             `[Messages Router] Auto-creating channel ${channelIdParam} with serverId ${server_id}`
           );
           try {
             const servers = await serverInstance.getServers();
             const serverExists = servers.some((s) => s.id === server_id);
-            logger14.info(
+            logger12.info(
               `[Messages Router] Server ${server_id} exists: ${serverExists}. Available servers: ${servers.map((s) => s.id).join(", ")}`
             );
             if (!serverExists) {
-              logger14.error(
+              logger12.error(
                 `[Messages Router] Server ${server_id} does not exist, cannot create channel`
               );
               return res.status(500).json({ success: false, error: `Server ${server_id} does not exist` });
@@ -2117,38 +2034,38 @@ function createChannelsRouter(agents, serverInstance) {
                 ...metadata
               }
             };
-            logger14.info(
+            logger12.info(
               "[Messages Router] Creating channel with data:",
               JSON.stringify(channelData, null, 2)
             );
             const participants = [author_id];
             if (isDmChannel) {
               const otherParticipant = metadata?.targetUserId || metadata?.recipientId;
-              if (otherParticipant && validateUuid13(otherParticipant)) {
+              if (otherParticipant && validateUuid12(otherParticipant)) {
                 participants.push(otherParticipant);
-                logger14.info(
+                logger12.info(
                   `[Messages Router] DM channel will include participants: ${participants.join(", ")}`
                 );
               } else {
-                logger14.warn(
+                logger12.warn(
                   `[Messages Router] DM channel missing second participant, only adding author: ${author_id}`
                 );
               }
             }
             await serverInstance.createChannel(channelData, participants);
-            logger14.info(
+            logger12.info(
               `[Messages Router] Auto-created ${isDmChannel ? ChannelType2.DM : ChannelType2.GROUP} channel ${channelIdParam} for message submission with ${participants.length} participants`
             );
           } catch (createError) {
             const errorMessage = createError instanceof Error ? createError.message : String(createError);
-            logger14.error(
+            logger12.error(
               `[Messages Router] Failed to auto-create channel ${channelIdParam}:`,
               createError
             );
             return res.status(500).json({ success: false, error: `Failed to create channel: ${errorMessage}` });
           }
         } else {
-          logger14.info(
+          logger12.info(
             `[Messages Router] Channel ${channelIdParam} already exists, proceeding with message creation`
           );
         }
@@ -2156,7 +2073,7 @@ function createChannelsRouter(agents, serverInstance) {
           channelId: channelIdParam,
           authorId: author_id,
           content,
-          inReplyToRootMessageId: in_reply_to_message_id ? validateUuid13(in_reply_to_message_id) || void 0 : void 0,
+          inReplyToRootMessageId: in_reply_to_message_id ? validateUuid12(in_reply_to_message_id) || void 0 : void 0,
           rawMessage: raw_message,
           metadata,
           sourceType: source_type || "eliza_gui"
@@ -2182,7 +2099,7 @@ function createChannelsRouter(agents, serverInstance) {
           // Will be undefined here, which is fine
         };
         bus_default.emit("new_message", messageForBus);
-        logger14.info(
+        logger12.info(
           "[Messages Router /central-channels/:channelId/messages] GUI Message published to internal bus:",
           messageForBus.id
         );
@@ -2202,7 +2119,7 @@ function createChannelsRouter(agents, serverInstance) {
         }
         res.status(201).json({ success: true, data: messageForBus });
       } catch (error) {
-        logger14.error(
+        logger12.error(
           "[Messages Router /central-channels/:channelId/messages] Error processing GUI message:",
           error
         );
@@ -2213,7 +2130,7 @@ function createChannelsRouter(agents, serverInstance) {
   router.get(
     "/central-channels/:channelId/messages",
     async (req, res) => {
-      const channelId = validateUuid13(req.params.channelId);
+      const channelId = validateUuid12(req.params.channelId);
       const limit = req.query.limit ? Number.parseInt(req.query.limit, 10) : 50;
       const before = req.query.before ? Number.parseInt(req.query.before, 10) : void 0;
       const beforeDate = before ? new Date(before) : void 0;
@@ -2240,7 +2157,7 @@ function createChannelsRouter(agents, serverInstance) {
         });
         res.json({ success: true, data: { messages: messagesForGui } });
       } catch (error) {
-        logger14.error(
+        logger12.error(
           `[Messages Router /central-channels/:channelId/messages] Error fetching messages for channel ${channelId}:`,
           error
         );
@@ -2251,7 +2168,7 @@ function createChannelsRouter(agents, serverInstance) {
   router.get(
     "/central-servers/:serverId/channels",
     async (req, res) => {
-      const serverId = req.params.serverId === DEFAULT_SERVER_ID3 ? DEFAULT_SERVER_ID3 : validateUuid13(req.params.serverId);
+      const serverId = req.params.serverId === DEFAULT_SERVER_ID3 ? DEFAULT_SERVER_ID3 : validateUuid12(req.params.serverId);
       if (!serverId) {
         return res.status(400).json({ success: false, error: "Invalid serverId" });
       }
@@ -2259,7 +2176,7 @@ function createChannelsRouter(agents, serverInstance) {
         const channels = await serverInstance.getChannelsForServer(serverId);
         res.json({ success: true, data: { channels } });
       } catch (error) {
-        logger14.error(
+        logger12.error(
           `[Messages Router /central-servers/:serverId/channels] Error fetching channels for server ${serverId}:`,
           error
         );
@@ -2289,7 +2206,7 @@ function createChannelsRouter(agents, serverInstance) {
         error: "Missing required fields: type."
       });
     }
-    if (!validateUuid13(serverId)) {
+    if (!validateUuid12(serverId)) {
       return res.status(400).json({
         success: false,
         error: "Invalid serverId format"
@@ -2307,14 +2224,14 @@ function createChannelsRouter(agents, serverInstance) {
       });
       res.status(201).json({ success: true, data: { channel } });
     } catch (error) {
-      logger14.error("[Messages Router /channels] Error creating channel:", error);
+      logger12.error("[Messages Router /channels] Error creating channel:", error);
       res.status(500).json({ success: false, error: "Failed to create channel" });
     }
   });
   router.get("/dm-channel", async (req, res) => {
-    const targetUserId = validateUuid13(req.query.targetUserId);
-    const currentUserId = validateUuid13(req.query.currentUserId);
-    const providedDmServerId = req.query.dmServerId === DEFAULT_SERVER_ID3 ? DEFAULT_SERVER_ID3 : validateUuid13(req.query.dmServerId);
+    const targetUserId = validateUuid12(req.query.targetUserId);
+    const currentUserId = validateUuid12(req.query.currentUserId);
+    const providedDmServerId = req.query.dmServerId === DEFAULT_SERVER_ID3 ? DEFAULT_SERVER_ID3 : validateUuid12(req.query.dmServerId);
     if (!targetUserId || !currentUserId) {
       res.status(400).json({ success: false, error: "Missing targetUserId or currentUserId" });
       return;
@@ -2330,7 +2247,7 @@ function createChannelsRouter(agents, serverInstance) {
         if (existingServer) {
           dmServerIdToUse = providedDmServerId;
         } else {
-          logger14.warn(
+          logger12.warn(
             `Provided dmServerId ${providedDmServerId} not found, using default DM server logic.`
           );
           dmServerIdToUse = DEFAULT_SERVER_ID3;
@@ -2348,7 +2265,7 @@ function createChannelsRouter(agents, serverInstance) {
         stack: error.stack,
         originalError: error
       } : { message: String(error) };
-      logger14.error("Error finding/creating DM channel:", errorDetails);
+      logger12.error("Error finding/creating DM channel:", errorDetails);
       res.status(500).json({ success: false, error: "Failed to find or create DM channel" });
     }
   });
@@ -2360,8 +2277,8 @@ function createChannelsRouter(agents, serverInstance) {
       server_id,
       metadata
     } = req.body;
-    const isValidServerId = server_id === DEFAULT_SERVER_ID3 || validateUuid13(server_id);
-    if (!name || !isValidServerId || !Array.isArray(participantCentralUserIds) || participantCentralUserIds.some((id) => !validateUuid13(id))) {
+    const isValidServerId = server_id === DEFAULT_SERVER_ID3 || validateUuid12(server_id);
+    if (!name || !isValidServerId || !Array.isArray(participantCentralUserIds) || participantCentralUserIds.some((id) => !validateUuid12(id))) {
       return res.status(400).json({
         success: false,
         error: 'Invalid payload. Required: name, server_id (UUID or "0"), participantCentralUserIds (array of UUIDs). Optional: type, metadata.'
@@ -2384,7 +2301,7 @@ function createChannelsRouter(agents, serverInstance) {
       res.status(201).json({ success: true, data: newChannel });
     } catch (error) {
       const errorMessage = error instanceof Error ? error.message : String(error);
-      logger14.error(
+      logger12.error(
         "[Messages Router /central-channels] Error creating group channel:",
         errorMessage
       );
@@ -2394,7 +2311,7 @@ function createChannelsRouter(agents, serverInstance) {
   router.get(
     "/central-channels/:channelId/details",
     async (req, res) => {
-      const channelId = validateUuid13(req.params.channelId);
+      const channelId = validateUuid12(req.params.channelId);
       if (!channelId) {
         return res.status(400).json({ success: false, error: "Invalid channelId" });
       }
@@ -2405,7 +2322,7 @@ function createChannelsRouter(agents, serverInstance) {
         }
         res.json({ success: true, data: channelDetails });
       } catch (error) {
-        logger14.error(`[Messages Router] Error fetching details for channel ${channelId}:`, error);
+        logger12.error(`[Messages Router] Error fetching details for channel ${channelId}:`, error);
         res.status(500).json({ success: false, error: "Failed to fetch channel details" });
       }
     }
@@ -2413,7 +2330,7 @@ function createChannelsRouter(agents, serverInstance) {
   router.get(
     "/central-channels/:channelId/participants",
     async (req, res) => {
-      const channelId = validateUuid13(req.params.channelId);
+      const channelId = validateUuid12(req.params.channelId);
       if (!channelId) {
         return res.status(400).json({ success: false, error: "Invalid channelId" });
       }
@@ -2421,7 +2338,7 @@ function createChannelsRouter(agents, serverInstance) {
         const participants = await serverInstance.getChannelParticipants(channelId);
         res.json({ success: true, data: participants });
       } catch (error) {
-        logger14.error(
+        logger12.error(
           `[Messages Router] Error fetching participants for channel ${channelId}:`,
           error
         );
@@ -2432,9 +2349,9 @@ function createChannelsRouter(agents, serverInstance) {
   router.post(
     "/central-channels/:channelId/agents",
     async (req, res) => {
-      const channelId = validateUuid13(req.params.channelId);
+      const channelId = validateUuid12(req.params.channelId);
       const { agentId } = req.body;
-      if (!channelId || !validateUuid13(agentId)) {
+      if (!channelId || !validateUuid12(agentId)) {
         return res.status(400).json({
           success: false,
           error: "Invalid channelId or agentId format"
@@ -2449,7 +2366,7 @@ function createChannelsRouter(agents, serverInstance) {
           });
         }
         await serverInstance.addParticipantsToChannel(channelId, [agentId]);
-        logger14.info(`[Messages Router] Added agent ${agentId} to channel ${channelId}`);
+        logger12.info(`[Messages Router] Added agent ${agentId} to channel ${channelId}`);
         res.status(201).json({
           success: true,
           data: {
@@ -2459,7 +2376,7 @@ function createChannelsRouter(agents, serverInstance) {
           }
         });
       } catch (error) {
-        logger14.error(
+        logger12.error(
           `[Messages Router] Error adding agent ${agentId} to channel ${channelId}:`,
           error
         );
@@ -2474,8 +2391,8 @@ function createChannelsRouter(agents, serverInstance) {
   router.delete(
     "/central-channels/:channelId/agents/:agentId",
     async (req, res) => {
-      const channelId = validateUuid13(req.params.channelId);
-      const agentId = validateUuid13(req.params.agentId);
+      const channelId = validateUuid12(req.params.channelId);
+      const agentId = validateUuid12(req.params.agentId);
       if (!channelId || !agentId) {
         return res.status(400).json({
           success: false,
@@ -2501,7 +2418,7 @@ function createChannelsRouter(agents, serverInstance) {
         await serverInstance.updateChannel(channelId, {
           participantCentralUserIds: updatedParticipants
         });
-        logger14.info(`[Messages Router] Removed agent ${agentId} from channel ${channelId}`);
+        logger12.info(`[Messages Router] Removed agent ${agentId} from channel ${channelId}`);
         res.status(200).json({
           success: true,
           data: {
@@ -2511,7 +2428,7 @@ function createChannelsRouter(agents, serverInstance) {
           }
         });
       } catch (error) {
-        logger14.error(
+        logger12.error(
           `[Messages Router] Error removing agent ${agentId} from channel ${channelId}:`,
           error
         );
@@ -2526,7 +2443,7 @@ function createChannelsRouter(agents, serverInstance) {
   router.get(
     "/central-channels/:channelId/agents",
     async (req, res) => {
-      const channelId = validateUuid13(req.params.channelId);
+      const channelId = validateUuid12(req.params.channelId);
       if (!channelId) {
         return res.status(400).json({
           success: false,
@@ -2545,7 +2462,7 @@ function createChannelsRouter(agents, serverInstance) {
           }
         });
       } catch (error) {
-        logger14.error(`[Messages Router] Error fetching agents for channel ${channelId}:`, error);
+        logger12.error(`[Messages Router] Error fetching agents for channel ${channelId}:`, error);
         res.status(500).json({
           success: false,
           error: "Failed to fetch channel agents"
@@ -2556,20 +2473,20 @@ function createChannelsRouter(agents, serverInstance) {
   router.delete(
     "/central-channels/:channelId/messages/:messageId",
     async (req, res) => {
-      const channelId = validateUuid13(req.params.channelId);
-      const messageId = validateUuid13(req.params.messageId);
+      const channelId = validateUuid12(req.params.channelId);
+      const messageId = validateUuid12(req.params.messageId);
       if (!channelId || !messageId) {
         return res.status(400).json({ success: false, error: "Invalid channelId or messageId" });
       }
       try {
         await serverInstance.deleteMessage(messageId);
-        logger14.info(`[Messages Router] Deleted message ${messageId} from central database`);
+        logger12.info(`[Messages Router] Deleted message ${messageId} from central database`);
         const deletedMessagePayload = {
           messageId,
           channelId
         };
         bus_default.emit("message_deleted", deletedMessagePayload);
-        logger14.info(
+        logger12.info(
           `[Messages Router] Emitted message_deleted event to internal bus for message ${messageId}`
         );
         if (serverInstance.socketIO) {
@@ -2580,7 +2497,7 @@ function createChannelsRouter(agents, serverInstance) {
         }
         res.status(204).send();
       } catch (error) {
-        logger14.error(
+        logger12.error(
           `[Messages Router] Error deleting message ${messageId} from channel ${channelId}:`,
           error
         );
@@ -2591,7 +2508,7 @@ function createChannelsRouter(agents, serverInstance) {
   router.delete(
     "/central-channels/:channelId/messages",
     async (req, res) => {
-      const channelId = validateUuid13(req.params.channelId);
+      const channelId = validateUuid12(req.params.channelId);
       if (!channelId) {
         return res.status(400).json({ success: false, error: "Invalid channelId" });
       }
@@ -2601,7 +2518,7 @@ function createChannelsRouter(agents, serverInstance) {
           channelId
         };
         bus_default.emit("channel_cleared", channelClearedPayload);
-        logger14.info(
+        logger12.info(
           `[Messages Router] Emitted channel_cleared event to internal bus for channel ${channelId}`
         );
         if (serverInstance.socketIO) {
@@ -2611,7 +2528,7 @@ function createChannelsRouter(agents, serverInstance) {
         }
         res.status(204).send();
       } catch (error) {
-        logger14.error(`[Messages Router] Error clearing messages for channel ${channelId}:`, error);
+        logger12.error(`[Messages Router] Error clearing messages for channel ${channelId}:`, error);
         res.status(500).json({ success: false, error: "Failed to clear messages" });
       }
     }
@@ -2619,7 +2536,7 @@ function createChannelsRouter(agents, serverInstance) {
   router.patch(
     "/central-channels/:channelId",
     async (req, res) => {
-      const channelId = validateUuid13(req.params.channelId);
+      const channelId = validateUuid12(req.params.channelId);
       if (!channelId) {
         return res.status(400).json({ success: false, error: "Invalid channelId" });
       }
@@ -2638,7 +2555,7 @@ function createChannelsRouter(agents, serverInstance) {
         }
         res.json({ success: true, data: updatedChannel });
       } catch (error) {
-        logger14.error(`[Messages Router] Error updating channel ${channelId}:`, error);
+        logger12.error(`[Messages Router] Error updating channel ${channelId}:`, error);
         res.status(500).json({ success: false, error: "Failed to update channel" });
       }
     }
@@ -2646,7 +2563,7 @@ function createChannelsRouter(agents, serverInstance) {
   router.delete(
     "/central-channels/:channelId",
     async (req, res) => {
-      const channelId = validateUuid13(req.params.channelId);
+      const channelId = validateUuid12(req.params.channelId);
       if (!channelId) {
         return res.status(400).json({ success: false, error: "Invalid channelId" });
       }
@@ -2654,14 +2571,14 @@ function createChannelsRouter(agents, serverInstance) {
         const messages = await serverInstance.getMessagesForChannel(channelId);
         const messageCount = messages.length;
         await serverInstance.deleteChannel(channelId);
-        logger14.info(
+        logger12.info(
           `[Messages Router] Deleted channel ${channelId} with ${messageCount} messages from central database`
         );
         const channelClearedPayload = {
           channelId
         };
         bus_default.emit("channel_cleared", channelClearedPayload);
-        logger14.info(
+        logger12.info(
           `[Messages Router] Emitted channel_cleared event to internal bus for deleted channel ${channelId}`
         );
         if (serverInstance.socketIO) {
@@ -2671,7 +2588,7 @@ function createChannelsRouter(agents, serverInstance) {
         }
         res.status(204).send();
       } catch (error) {
-        logger14.error(`[Messages Router] Error deleting channel ${channelId}:`, error);
+        logger12.error(`[Messages Router] Error deleting channel ${channelId}:`, error);
         res.status(500).json({ success: false, error: "Failed to delete channel" });
       }
     }
@@ -2680,44 +2597,24 @@ function createChannelsRouter(agents, serverInstance) {
     "/channels/:channelId/upload-media",
     createUploadRateLimit(),
     createFileSystemRateLimit(),
-    channelUpload(),
+    channelUploadMiddleware.single("file"),
     async (req, res) => {
-      const channelId = validateUuid13(req.params.channelId);
+      const channelId = validateUuid12(req.params.channelId);
       if (!channelId) {
         res.status(400).json({ success: false, error: "Invalid channelId format" });
         return;
       }
-      let mediaFile;
-      if (req.files && !Array.isArray(req.files)) {
-        mediaFile = req.files.file;
-      } else if (Array.isArray(req.files) && req.files.length > 0) {
-        mediaFile = req.files[0];
-      } else {
-        res.status(400).json({ success: false, error: "No media file provided" });
-        return;
-      }
-      if (!mediaFile) {
+      if (!req.file) {
         res.status(400).json({ success: false, error: "No media file provided" });
         return;
       }
       try {
-        if (!validateMediaFile(mediaFile)) {
-          cleanupUploadedFile(mediaFile);
-          res.status(400).json({ success: false, error: `Invalid file type: ${mediaFile.mimetype}` });
-          return;
-        }
-        if (!mediaFile.name || mediaFile.name.includes("..") || mediaFile.name.includes("/")) {
-          cleanupUploadedFile(mediaFile);
+        if (!req.file.originalname || req.file.originalname.includes("..") || req.file.originalname.includes("/")) {
           res.status(400).json({ success: false, error: "Invalid filename detected" });
           return;
         }
-        if (mediaFile.size > MAX_FILE_SIZE) {
-          cleanupUploadedFile(mediaFile);
-          res.status(400).json({ success: false, error: "File too large" });
-          return;
-        }
-        const result = await processUploadedFile(mediaFile, channelId, "channels");
-        logger14.info(
+        const result = await saveChannelUploadedFile(req.file, channelId);
+        logger12.info(
           `[MessagesRouter /upload-media] Secure file uploaded for channel ${channelId}: ${result.filename}. URL: ${result.url}`
         );
         res.json({
@@ -2725,21 +2622,18 @@ function createChannelsRouter(agents, serverInstance) {
           data: {
             url: result.url,
             // Relative URL, client prepends server origin
-            type: mediaFile.mimetype,
+            type: req.file.mimetype,
             filename: result.filename,
-            originalName: mediaFile.name,
-            size: mediaFile.size
+            originalName: req.file.originalname,
+            size: req.file.size
           }
         });
       } catch (error) {
         const errorMessage = error instanceof Error ? error.message : String(error);
-        logger14.error(
+        logger12.error(
           `[MessagesRouter /upload-media] Error processing upload for channel ${channelId}: ${errorMessage}`,
           error
         );
-        if (mediaFile) {
-          cleanupUploadedFile(mediaFile);
-        }
         res.status(500).json({ success: false, error: "Failed to process media upload" });
       }
     }
@@ -2747,7 +2641,7 @@ function createChannelsRouter(agents, serverInstance) {
   router.post(
     "/central-channels/:channelId/generate-title",
     async (req, res) => {
-      const channelId = validateUuid13(req.params.channelId);
+      const channelId = validateUuid12(req.params.channelId);
       const { agentId } = req.body;
       if (!channelId) {
         return res.status(400).json({
@@ -2755,7 +2649,7 @@ function createChannelsRouter(agents, serverInstance) {
           error: "Invalid channel ID format"
         });
       }
-      if (!agentId || !validateUuid13(agentId)) {
+      if (!agentId || !validateUuid12(agentId)) {
         return res.status(400).json({
           success: false,
           error: "Valid agent ID is required"
@@ -2769,7 +2663,7 @@ function createChannelsRouter(agents, serverInstance) {
             error: "Agent not found or not active"
           });
         }
-        logger14.info(`[CHANNEL SUMMARIZE] Summarizing channel ${channelId}`);
+        logger12.info(`[CHANNEL SUMMARIZE] Summarizing channel ${channelId}`);
         const limit = req.query.limit ? Number.parseInt(req.query.limit, 10) : 50;
         const before = req.query.before ? Number.parseInt(req.query.before, 10) : void 0;
         const beforeDate = before ? new Date(before) : void 0;
@@ -2823,22 +2717,22 @@ Respond with just the title, nothing else.
           // Keep titles short
         });
         if (!newTitle || newTitle.trim().length === 0) {
-          logger14.warn(`[ChatTitleEvaluator] Failed to generate title for room ${channelId}`);
+          logger12.warn(`[ChatTitleEvaluator] Failed to generate title for room ${channelId}`);
           return;
         }
         const cleanTitle = newTitle.trim().replace(/^["']|["']$/g, "");
-        logger14.info(`[ChatTitleEvaluator] Generated title: "${cleanTitle}" for room ${channelId}`);
+        logger12.info(`[ChatTitleEvaluator] Generated title: "${cleanTitle}" for room ${channelId}`);
         const result = {
           title: cleanTitle,
           channelId
         };
-        logger14.success(`[CHANNEL SUMMARIZE] Successfully summarized channel ${channelId}`);
+        logger12.success(`[CHANNEL SUMMARIZE] Successfully summarized channel ${channelId}`);
         res.json({
           success: true,
           data: result
         });
       } catch (error) {
-        logger14.error("[CHANNEL SUMMARIZE] Error summarizing channel:", error);
+        logger12.error("[CHANNEL SUMMARIZE] Error summarizing channel:", error);
         res.status(500).json({
           success: false,
           error: "Failed to summarize channel",
@@ -2866,58 +2760,74 @@ function messagingRouter(agents, serverInstance) {
 import express15 from "express";
 
 // src/api/media/agents.ts
-import { validateUuid as validateUuid14, logger as logger15, getContentTypeFromMimeType } from "@elizaos/core";
+import { validateUuid as validateUuid13, logger as logger13, getContentTypeFromMimeType } from "@elizaos/core";
 import express13 from "express";
+import multer2 from "multer";
+import fs2 from "fs";
+import path2 from "path";
+var storage = multer2.memoryStorage();
+var upload = multer2({
+  storage,
+  limits: {
+    fileSize: MAX_FILE_SIZE,
+    files: 1
+  },
+  fileFilter: (req, file, cb) => {
+    if (ALLOWED_MEDIA_MIME_TYPES.includes(file.mimetype)) {
+      cb(null, true);
+    } else {
+      cb(new Error("Invalid file type"), false);
+    }
+  }
+});
+async function saveUploadedFile(file, agentId) {
+  const uploadDir = path2.join(process.cwd(), ".eliza/data/uploads/agents", agentId);
+  if (!fs2.existsSync(uploadDir)) {
+    fs2.mkdirSync(uploadDir, { recursive: true });
+  }
+  const timestamp = Date.now();
+  const random = Math.round(Math.random() * 1e9);
+  const ext = path2.extname(file.originalname);
+  const filename = `${timestamp}-${random}${ext}`;
+  const filePath = path2.join(uploadDir, filename);
+  fs2.writeFileSync(filePath, file.buffer);
+  const url = `/media/uploads/agents/${agentId}/${filename}`;
+  return { filename, url };
+}
 function createAgentMediaRouter() {
   const router = express13.Router();
-  router.post("/:agentId/upload-media", agentMediaUpload(), async (req, res) => {
-    const agentMediaReq = req;
-    logger15.debug("[MEDIA UPLOAD] Processing media upload");
-    const agentId = validateUuid14(agentMediaReq.params.agentId);
+  router.post("/:agentId/upload-media", upload.single("file"), async (req, res) => {
+    logger13.debug("[MEDIA UPLOAD] Processing media upload with multer");
+    const agentId = validateUuid13(req.params.agentId);
     if (!agentId) {
       return sendError(res, 400, "INVALID_ID", "Invalid agent ID format");
     }
-    let mediaFile;
-    if (agentMediaReq.files && !Array.isArray(agentMediaReq.files)) {
-      mediaFile = agentMediaReq.files.file;
-    } else if (Array.isArray(agentMediaReq.files) && agentMediaReq.files.length > 0) {
-      mediaFile = agentMediaReq.files[0];
-    } else {
-      return sendError(res, 400, "INVALID_REQUEST", "No media file provided");
-    }
-    if (!mediaFile) {
+    if (!req.file) {
       return sendError(res, 400, "INVALID_REQUEST", "No media file provided");
     }
-    const mimetype = mediaFile.mimetype;
-    if (!validateMediaFile(mediaFile)) {
-      cleanupUploadedFile(mediaFile);
-      return sendError(res, 400, "INVALID_FILE_TYPE", "Unsupported media file type");
-    }
-    const mediaType = getContentTypeFromMimeType(mimetype);
+    const mediaType = getContentTypeFromMimeType(req.file.mimetype);
     if (!mediaType) {
-      cleanupUploadedFile(mediaFile);
       return sendError(
         res,
         400,
         "UNSUPPORTED_MEDIA_TYPE",
-        `Unsupported media MIME type: ${mimetype}`
+        `Unsupported media MIME type: ${req.file.mimetype}`
       );
     }
     try {
-      const result = await processUploadedFile(mediaFile, agentId, "agents");
-      logger15.info(
+      const result = await saveUploadedFile(req.file, agentId);
+      logger13.info(
         `[MEDIA UPLOAD] Successfully uploaded ${mediaType}: ${result.filename}. URL: ${result.url}`
       );
       sendSuccess(res, {
         url: result.url,
         type: mediaType,
         filename: result.filename,
-        originalName: mediaFile.name,
-        size: mediaFile.size
+        originalName: req.file.originalname,
+        size: req.file.size
       });
     } catch (error) {
-      logger15.error(`[MEDIA UPLOAD] Error processing upload: ${error}`);
-      cleanupUploadedFile(mediaFile);
+      logger13.error(`[MEDIA UPLOAD] Error processing upload: ${error}`);
       sendError(
         res,
         500,
@@ -2931,9 +2841,41 @@ function createAgentMediaRouter() {
 }
 
 // src/api/media/channels.ts
-import { validateUuid as validateUuid15, logger as logger16 } from "@elizaos/core";
+import { validateUuid as validateUuid14, logger as logger14 } from "@elizaos/core";
 import express14 from "express";
 import rateLimit2 from "express-rate-limit";
+import multer3 from "multer";
+import fs3 from "fs";
+import path3 from "path";
+var storage2 = multer3.memoryStorage();
+var upload2 = multer3({
+  storage: storage2,
+  limits: {
+    fileSize: MAX_FILE_SIZE,
+    files: 1
+  },
+  fileFilter: (req, file, cb) => {
+    if (ALLOWED_MEDIA_MIME_TYPES.includes(file.mimetype)) {
+      cb(null, true);
+    } else {
+      cb(new Error("Invalid file type"), false);
+    }
+  }
+});
+async function saveUploadedFile2(file, channelId) {
+  const uploadDir = path3.join(process.cwd(), ".eliza/data/uploads/channels", channelId);
+  if (!fs3.existsSync(uploadDir)) {
+    fs3.mkdirSync(uploadDir, { recursive: true });
+  }
+  const timestamp = Date.now();
+  const random = Math.round(Math.random() * 1e9);
+  const ext = path3.extname(file.originalname);
+  const filename = `${timestamp}-${random}${ext}`;
+  const filePath = path3.join(uploadDir, filename);
+  fs3.writeFileSync(filePath, file.buffer);
+  const url = `/media/uploads/channels/${channelId}/${filename}`;
+  return { filename, url };
+}
 function createChannelMediaRouter() {
   const router = express14.Router();
   const uploadMediaRateLimiter = rateLimit2({
@@ -2947,35 +2889,20 @@ function createChannelMediaRouter() {
     "/:channelId/upload-media",
     uploadMediaRateLimiter,
     // Apply rate limiter
-    channelUpload(),
+    upload2.single("file"),
     async (req, res) => {
-      const channelMediaReq = req;
-      const channelId = validateUuid15(channelMediaReq.params.channelId);
+      const channelId = validateUuid14(req.params.channelId);
       if (!channelId) {
         res.status(400).json({ success: false, error: "Invalid channelId format" });
         return;
       }
-      let mediaFile;
-      if (channelMediaReq.files && !Array.isArray(channelMediaReq.files)) {
-        mediaFile = channelMediaReq.files.file;
-      } else if (Array.isArray(channelMediaReq.files) && channelMediaReq.files.length > 0) {
-        mediaFile = channelMediaReq.files[0];
-      } else {
+      if (!req.file) {
         res.status(400).json({ success: false, error: "No media file provided" });
         return;
       }
-      if (!mediaFile) {
-        res.status(400).json({ success: false, error: "No media file provided" });
-        return;
-      }
-      if (!validateMediaFile(mediaFile)) {
-        cleanupUploadedFile(mediaFile);
-        res.status(400).json({ success: false, error: `Invalid file type: ${mediaFile.mimetype}` });
-        return;
-      }
       try {
-        const result = await processUploadedFile(mediaFile, channelId, "channels");
-        logger16.info(
+        const result = await saveUploadedFile2(req.file, channelId);
+        logger14.info(
           `[Channel Media Upload] File uploaded for channel ${channelId}: ${result.filename}. URL: ${result.url}`
         );
         res.json({
@@ -2983,18 +2910,17 @@ function createChannelMediaRouter() {
           data: {
             url: result.url,
             // Relative URL, client prepends server origin
-            type: mediaFile.mimetype,
+            type: req.file.mimetype,
             filename: result.filename,
-            originalName: mediaFile.name,
-            size: mediaFile.size
+            originalName: req.file.originalname,
+            size: req.file.size
           }
         });
       } catch (error) {
-        logger16.error(
+        logger14.error(
           `[Channel Media Upload] Error processing upload for channel ${channelId}: ${error.message}`,
           error
         );
-        cleanupUploadedFile(mediaFile);
         res.status(500).json({ success: false, error: "Failed to process media upload" });
       }
     }
@@ -3016,6 +2942,40 @@ import express17 from "express";
 // src/api/memory/groups.ts
 import { validateUuid as validateUuid16, logger as logger17, createUniqueUuid as createUniqueUuid4, ChannelType as ChannelType3 } from "@elizaos/core";
 import express16 from "express";
+
+// src/api/shared/file-utils.ts
+import fs4 from "fs";
+import path4 from "path";
+import { logger as logger15 } from "@elizaos/core";
+var cleanupUploadedFile = (file) => {
+  logger15.debug(`[FILE] Multer file ${file.originalname} in memory, no cleanup needed`);
+};
+
+// src/upload.ts
+import fs5 from "fs";
+import path5 from "path";
+import multer4 from "multer";
+import { validateUuid as validateUuid15, logger as logger16 } from "@elizaos/core";
+var storage3 = multer4.memoryStorage();
+var agentAudioUpload = () => multer4({
+  storage: storage3,
+  limits: {
+    fileSize: MAX_FILE_SIZE,
+    files: 1
+  },
+  fileFilter: (req, file, cb) => {
+    if (ALLOWED_AUDIO_MIME_TYPES.includes(file.mimetype)) {
+      cb(null, true);
+    } else {
+      cb(new Error("Invalid audio file type"), false);
+    }
+  }
+});
+function validateAudioFile(file) {
+  return ALLOWED_AUDIO_MIME_TYPES.includes(file.mimetype);
+}
+
+// src/api/memory/groups.ts
 function createGroupMemoryRouter(agents, serverInstance) {
   const router = express16.Router();
   const db = serverInstance?.database;
@@ -3147,184 +3107,110 @@ import express21 from "express";
 // src/api/audio/processing.ts
 import { logger as logger18, ModelType as ModelType2, validateUuid as validateUuid17 } from "@elizaos/core";
 import express18 from "express";
-import fs3 from "fs";
+import fs6 from "fs";
 import os from "os";
-import path3 from "path";
-function validateSecureFilePath(filePath) {
-  if (!filePath) {
-    throw new Error("File path is required");
-  }
-  const resolvedPath = path3.resolve(filePath);
-  const normalizedPath = path3.normalize(resolvedPath);
-  if (normalizedPath.includes("..") || normalizedPath !== resolvedPath) {
-    throw new Error("Invalid file path: path traversal detected");
-  }
-  const allowedBasePaths = [process.cwd(), os.tmpdir(), os.homedir()];
-  const isPathAllowed = allowedBasePaths.some(
-    (basePath) => normalizedPath.startsWith(path3.resolve(basePath))
-  );
-  if (!isPathAllowed) {
-    throw new Error("Invalid file path: path outside allowed directories");
-  }
-  try {
-    const stats = fs3.statSync(normalizedPath);
-    if (!stats.isFile()) {
-      throw new Error("Path does not point to a regular file");
-    }
-  } catch (error) {
-    throw new Error(`File access error: ${error instanceof Error ? error.message : String(error)}`);
-  }
-  return normalizedPath;
-}
-function getUploadedFile(req) {
-  if (req.files && !Array.isArray(req.files)) {
-    return req.files.file;
-  } else if (Array.isArray(req.files) && req.files.length > 0) {
-    return req.files[0];
-  }
-  return null;
-}
+import path6 from "path";
 function createAudioProcessingRouter(agents) {
   const router = express18.Router();
   router.use(createUploadRateLimit());
   router.use(createFileSystemRateLimit());
-  router.post(
-    "/:agentId/audio-messages",
-    agentAudioUpload(),
-    // Use agentAudioUpload
-    async (req, res) => {
-      const audioReq = req;
-      logger18.debug("[AUDIO MESSAGE] Processing audio message");
-      const agentId = validateUuid17(req.params.agentId);
-      if (!agentId) {
-        return sendError(res, 400, "INVALID_ID", "Invalid agent ID format");
-      }
-      const audioFile = getUploadedFile(audioReq);
-      if (!audioFile) {
-        return sendError(res, 400, "INVALID_REQUEST", "No audio file provided");
-      }
-      const runtime = agents.get(agentId);
-      if (!runtime) {
+  router.post("/:agentId/audio-messages", agentAudioUpload().single("file"), async (req, res) => {
+    const audioReq = req;
+    logger18.debug("[AUDIO MESSAGE] Processing audio message");
+    const agentId = validateUuid17(req.params.agentId);
+    if (!agentId) {
+      return sendError(res, 400, "INVALID_ID", "Invalid agent ID format");
+    }
+    const audioFile = audioReq.file;
+    if (!audioFile) {
+      return sendError(res, 400, "INVALID_REQUEST", "No audio file provided");
+    }
+    const runtime = agents.get(agentId);
+    if (!runtime) {
+      cleanupUploadedFile(audioFile);
+      return sendError(res, 404, "NOT_FOUND", "Agent not found");
+    }
+    try {
+      if (!validateAudioFile(audioFile)) {
         cleanupUploadedFile(audioFile);
-        return sendError(res, 404, "NOT_FOUND", "Agent not found");
+        return sendError(res, 400, "INVALID_FILE_TYPE", "Invalid audio file type");
       }
-      try {
-        if (!validateAudioFile(audioFile)) {
-          cleanupUploadedFile(audioFile);
-          return sendError(res, 400, "INVALID_FILE_TYPE", "Invalid audio file type");
-        }
-        let securePath;
-        try {
-          const filePath = audioFile.tempFilePath || "";
-          securePath = validateSecureFilePath(filePath);
-        } catch (pathError) {
-          cleanupUploadedFile(audioFile);
-          return sendError(
-            res,
-            403,
-            "INVALID_PATH",
-            `Invalid file path: ${pathError instanceof Error ? pathError.message : String(pathError)}`
-          );
-        }
-        const stats = await fs3.promises.stat(securePath);
-        if (stats.size > MAX_FILE_SIZE) {
-          cleanupUploadedFile(audioFile);
-          return sendError(
-            res,
-            413,
-            "FILE_TOO_LARGE",
-            `Audio file too large (max ${MAX_FILE_SIZE_DISPLAY})`
-          );
-        }
-        const audioBuffer = await fs3.promises.readFile(securePath);
-        const transcription = await runtime.useModel(ModelType2.TRANSCRIPTION, audioBuffer);
-        logger18.info(`[AUDIO MESSAGE] Transcription for agent ${agentId}: ${transcription}`);
+      if (audioFile.size > MAX_FILE_SIZE) {
         cleanupUploadedFile(audioFile);
-        sendSuccess(res, { transcription, message: "Audio transcribed, further processing TBD." });
-      } catch (error) {
-        logger18.error("[AUDIO MESSAGE] Error processing audio:", error);
-        cleanupUploadedFile(audioFile);
-        sendError(
+        return sendError(
           res,
-          500,
-          "PROCESSING_ERROR",
-          "Error processing audio message",
-          error instanceof Error ? error.message : String(error)
+          413,
+          "FILE_TOO_LARGE",
+          `Audio file too large (max ${MAX_FILE_SIZE_DISPLAY})`
         );
       }
+      const transcription = await runtime.useModel(ModelType2.TRANSCRIPTION, audioFile.buffer);
+      logger18.info(`[AUDIO MESSAGE] Transcription for agent ${agentId}: ${transcription}`);
+      cleanupUploadedFile(audioFile);
+      sendSuccess(res, { transcription, message: "Audio transcribed, further processing TBD." });
+    } catch (error) {
+      logger18.error("[AUDIO MESSAGE] Error processing audio:", error);
+      cleanupUploadedFile(audioFile);
+      sendError(
+        res,
+        500,
+        "PROCESSING_ERROR",
+        "Error processing audio message",
+        error instanceof Error ? error.message : String(error)
+      );
     }
-  );
-  router.post(
-    "/:agentId/transcriptions",
-    agentAudioUpload(),
-    // Use agentAudioUpload
-    async (req, res) => {
-      const audioReq = req;
-      logger18.debug("[TRANSCRIPTION] Request to transcribe audio");
-      const agentId = validateUuid17(req.params.agentId);
-      if (!agentId) {
-        return sendError(res, 400, "INVALID_ID", "Invalid agent ID format");
-      }
-      const audioFile = getUploadedFile(audioReq);
-      if (!audioFile) {
-        return sendError(res, 400, "INVALID_REQUEST", "No audio file provided");
-      }
-      const runtime = agents.get(agentId);
-      if (!runtime) {
+  });
+  router.post("/:agentId/transcriptions", agentAudioUpload().single("file"), async (req, res) => {
+    const audioReq = req;
+    logger18.debug("[TRANSCRIPTION] Request to transcribe audio");
+    const agentId = validateUuid17(req.params.agentId);
+    if (!agentId) {
+      return sendError(res, 400, "INVALID_ID", "Invalid agent ID format");
+    }
+    const audioFile = audioReq.file;
+    if (!audioFile) {
+      return sendError(res, 400, "INVALID_REQUEST", "No audio file provided");
+    }
+    const runtime = agents.get(agentId);
+    if (!runtime) {
+      cleanupUploadedFile(audioFile);
+      return sendError(res, 404, "NOT_FOUND", "Agent not found");
+    }
+    try {
+      logger18.debug("[TRANSCRIPTION] Reading audio file");
+      if (!validateAudioFile(audioFile)) {
         cleanupUploadedFile(audioFile);
-        return sendError(res, 404, "NOT_FOUND", "Agent not found");
+        return sendError(res, 400, "INVALID_FILE_TYPE", "Invalid audio file type");
       }
-      try {
-        logger18.debug("[TRANSCRIPTION] Reading audio file");
-        if (!validateAudioFile(audioFile)) {
-          cleanupUploadedFile(audioFile);
-          return sendError(res, 400, "INVALID_FILE_TYPE", "Invalid audio file type");
-        }
-        let securePath;
-        try {
-          const filePath = audioFile.tempFilePath || "";
-          securePath = validateSecureFilePath(filePath);
-        } catch (pathError) {
-          cleanupUploadedFile(audioFile);
-          return sendError(
-            res,
-            403,
-            "INVALID_PATH",
-            `Invalid file path: ${pathError instanceof Error ? pathError.message : String(pathError)}`
-          );
-        }
-        const stats = await fs3.promises.stat(securePath);
-        if (stats.size > MAX_FILE_SIZE) {
-          cleanupUploadedFile(audioFile);
-          return sendError(
-            res,
-            413,
-            "FILE_TOO_LARGE",
-            `Audio file too large (max ${MAX_FILE_SIZE_DISPLAY})`
-          );
-        }
-        const audioBuffer = await fs3.promises.readFile(securePath);
-        logger18.debug("[TRANSCRIPTION] Transcribing audio");
-        const transcription = await runtime.useModel(ModelType2.TRANSCRIPTION, audioBuffer);
+      if (audioFile.size > MAX_FILE_SIZE) {
         cleanupUploadedFile(audioFile);
-        if (!transcription) {
-          return sendError(res, 500, "PROCESSING_ERROR", "Failed to transcribe audio");
-        }
-        logger18.success("[TRANSCRIPTION] Successfully transcribed audio");
-        sendSuccess(res, { text: transcription });
-      } catch (error) {
-        logger18.error("[TRANSCRIPTION] Error transcribing audio:", error);
-        cleanupUploadedFile(audioFile);
-        sendError(
+        return sendError(
           res,
-          500,
-          "PROCESSING_ERROR",
-          "Error transcribing audio",
-          error instanceof Error ? error.message : String(error)
+          413,
+          "FILE_TOO_LARGE",
+          `Audio file too large (max ${MAX_FILE_SIZE_DISPLAY})`
         );
       }
+      logger18.debug("[TRANSCRIPTION] Transcribing audio");
+      const transcription = await runtime.useModel(ModelType2.TRANSCRIPTION, audioFile.buffer);
+      cleanupUploadedFile(audioFile);
+      if (!transcription) {
+        return sendError(res, 500, "PROCESSING_ERROR", "Failed to transcribe audio");
+      }
+      logger18.success("[TRANSCRIPTION] Successfully transcribed audio");
+      sendSuccess(res, { text: transcription });
+    } catch (error) {
+      logger18.error("[TRANSCRIPTION] Error transcribing audio:", error);
+      cleanupUploadedFile(audioFile);
+      sendError(
+        res,
+        500,
+        "PROCESSING_ERROR",
+        "Error transcribing audio",
+        error instanceof Error ? error.message : String(error)
+      );
     }
-  );
+  });
   return router;
 }
 
@@ -3821,15 +3707,15 @@ import express28 from "express";
 import { logger as logger23 } from "@elizaos/core";
 import express27 from "express";
 import { existsSync, writeFileSync } from "fs";
-import path4 from "path";
+import path7 from "path";
 import dotenv from "dotenv";
-import fs4 from "fs/promises";
+import fs7 from "fs/promises";
 async function parseEnvFile(filePath) {
   try {
     if (!existsSync(filePath)) {
       return {};
     }
-    const content = await fs4.readFile(filePath, "utf-8");
+    const content = await fs7.readFile(filePath, "utf-8");
     if (content.trim() === "") {
       return {};
     }
@@ -3849,17 +3735,17 @@ function getLocalEnvPath() {
 function resolveEnvFile(startDir = process.cwd()) {
   let currentDir = startDir;
   while (true) {
-    const candidate = path4.join(currentDir, ".env");
+    const candidate = path7.join(currentDir, ".env");
     if (existsSync(candidate)) {
       return candidate;
     }
-    const parentDir = path4.dirname(currentDir);
+    const parentDir = path7.dirname(currentDir);
     if (parentDir === currentDir) {
       break;
     }
     currentDir = parentDir;
   }
-  return path4.join(startDir, ".env");
+  return path7.join(startDir, ".env");
 }
 function createEnvironmentRouter() {
   const router = express27.Router();
@@ -4610,6 +4496,7 @@ function createApiRouter(agents, serverInstance) {
   );
   router.use(createApiRateLimit());
   router.use(securityMiddleware());
+  router.use("/media", mediaRouter());
   router.use(validateContentTypeMiddleware());
   router.use(
     bodyParser.json({
@@ -4629,7 +4516,6 @@ function createApiRouter(agents, serverInstance) {
   );
   router.use("/agents", agentsRouter(agents, serverInstance));
   router.use("/messaging", messagingRouter(agents, serverInstance));
-  router.use("/media", mediaRouter());
   router.use("/memory", memoryRouter(agents, serverInstance));
   router.use("/audio", audioRouter(agents));
   router.use("/server", runtimeRouter(agents, serverInstance));
@@ -5033,7 +4919,14 @@ var MessageBusService = class _MessageBusService extends Service {
       await this.runtime.emitEvent(EventType2.MESSAGE_RECEIVED, {
         runtime: this.runtime,
         message: agentMemory,
-        callback: callbackForCentralBus
+        callback: callbackForCentralBus,
+        onComplete: async () => {
+          const room = await this.runtime.getRoom(agentRoomId);
+          const world = await this.runtime.getWorld(agentWorldId);
+          const channelId = room?.channelId;
+          const serverId = world?.serverId;
+          await this.notifyMessageComplete(channelId, serverId);
+        }
       });
     } catch (error) {
       logger27.error(
@@ -5110,7 +5003,6 @@ var MessageBusService = class _MessageBusService extends Service {
         logger27.error(
           `[${this.runtime.character.name}] MessageBusService: Cannot map agent room/world to central IDs for response. AgentRoomID: ${agentRoomId}, AgentWorldID: ${agentWorldId}. Room or World object missing, or channelId/serverId not found on them.`
         );
-        await this.notifyMessageComplete(channelId, serverId);
         return;
       }
       const shouldSkip = content.actions?.includes("IGNORE") || !content.text || content.text.trim() === "";
@@ -5118,7 +5010,6 @@ var MessageBusService = class _MessageBusService extends Service {
         logger27.info(
           `[${this.runtime.character.name}] MessageBusService: Skipping response (reason: ${content.actions?.includes("IGNORE") ? "IGNORE action" : "No text"})`
         );
-        await this.notifyMessageComplete(channelId, serverId);
         return;
       }
       let centralInReplyToRootMessageId = void 0;
@@ -5263,8 +5154,8 @@ var messageBusConnectorPlugin = {
 };
 
 // src/loader.ts
-import fs5 from "fs";
-import path5 from "path";
+import fs8 from "fs";
+import path8 from "path";
 import { fileURLToPath } from "url";
 import {
   logger as logger28,
@@ -5272,10 +5163,10 @@ import {
   validateCharacter
 } from "@elizaos/core";
 var __filename = fileURLToPath(import.meta.url);
-var __dirname = path5.dirname(__filename);
+var __dirname = path8.dirname(__filename);
 function tryLoadFile(filePath) {
   try {
-    return fs5.readFileSync(filePath, "utf8");
+    return fs8.readFileSync(filePath, "utf8");
   } catch (e) {
     throw new Error(`Error loading file ${filePath}: ${e}`);
   }
@@ -5372,36 +5263,36 @@ async function loadCharacter(filePath) {
   }
   return jsonToCharacter(parseResult.data);
 }
-function handleCharacterLoadError(path7, error) {
+function handleCharacterLoadError(path10, error) {
   const errorMsg = error instanceof Error ? error.message : String(error);
   if (errorMsg.includes("ENOENT") || errorMsg.includes("no such file")) {
-    logger28.error(`Character file not found: ${path7}`);
+    logger28.error(`Character file not found: ${path10}`);
     throw new Error(
-      `Character '${path7}' not found. Please check if the file exists and the path is correct.`
+      `Character '${path10}' not found. Please check if the file exists and the path is correct.`
     );
   } else if (errorMsg.includes("Character validation failed")) {
-    logger28.error(`Character validation failed for: ${path7}`);
-    throw new Error(`Character file '${path7}' contains invalid character data. ${errorMsg}`);
+    logger28.error(`Character validation failed for: ${path10}`);
+    throw new Error(`Character file '${path10}' contains invalid character data. ${errorMsg}`);
   } else if (errorMsg.includes("JSON")) {
-    logger28.error(`JSON parsing error in character file: ${path7}`);
-    throw new Error(`Character file '${path7}' has malformed JSON. Please check the file content.`);
+    logger28.error(`JSON parsing error in character file: ${path10}`);
+    throw new Error(`Character file '${path10}' has malformed JSON. Please check the file content.`);
   } else if (errorMsg.includes("Invalid JSON")) {
-    logger28.error(`Invalid JSON in character file: ${path7}`);
+    logger28.error(`Invalid JSON in character file: ${path10}`);
     throw new Error(
-      `Character file '${path7}' has invalid JSON format. Please check the file content.`
+      `Character file '${path10}' has invalid JSON format. Please check the file content.`
     );
   } else {
-    logger28.error(`Error loading character from ${path7}: ${errorMsg}`);
-    throw new Error(`Failed to load character '${path7}': ${errorMsg}`);
+    logger28.error(`Error loading character from ${path10}: ${errorMsg}`);
+    throw new Error(`Failed to load character '${path10}': ${errorMsg}`);
   }
 }
-async function safeLoadCharacter(path7) {
+async function safeLoadCharacter(path10) {
   try {
-    const character = await loadCharacter(path7);
-    logger28.info(`Successfully loaded character from: ${path7}`);
+    const character = await loadCharacter(path10);
+    logger28.info(`Successfully loaded character from: ${path10}`);
     return character;
   } catch (e) {
-    return handleCharacterLoadError(path7, e);
+    return handleCharacterLoadError(path10, e);
   }
 }
 async function loadCharacterTryPath(characterPath) {
@@ -5421,27 +5312,27 @@ async function loadCharacterTryPath(characterPath) {
   const jsonPath = hasJsonExtension ? characterPath : `${characterPath}.json`;
   const basePathsToTry = [
     basePath,
-    path5.resolve(process.cwd(), basePath),
-    path5.resolve(process.cwd(), "..", "..", basePath),
-    path5.resolve(process.cwd(), "..", "..", "..", basePath),
-    path5.resolve(process.cwd(), "agent", basePath),
-    path5.resolve(__dirname, basePath),
-    path5.resolve(__dirname, "characters", path5.basename(basePath)),
-    path5.resolve(__dirname, "../characters", path5.basename(basePath)),
-    path5.resolve(__dirname, "../../characters", path5.basename(basePath)),
-    path5.resolve(__dirname, "../../../characters", path5.basename(basePath))
+    path8.resolve(process.cwd(), basePath),
+    path8.resolve(process.cwd(), "..", "..", basePath),
+    path8.resolve(process.cwd(), "..", "..", "..", basePath),
+    path8.resolve(process.cwd(), "agent", basePath),
+    path8.resolve(__dirname, basePath),
+    path8.resolve(__dirname, "characters", path8.basename(basePath)),
+    path8.resolve(__dirname, "../characters", path8.basename(basePath)),
+    path8.resolve(__dirname, "../../characters", path8.basename(basePath)),
+    path8.resolve(__dirname, "../../../characters", path8.basename(basePath))
   ];
   const jsonPathsToTry = hasJsonExtension ? [] : [
     jsonPath,
-    path5.resolve(process.cwd(), jsonPath),
-    path5.resolve(process.cwd(), "..", "..", jsonPath),
-    path5.resolve(process.cwd(), "..", "..", "..", jsonPath),
-    path5.resolve(process.cwd(), "agent", jsonPath),
-    path5.resolve(__dirname, jsonPath),
-    path5.resolve(__dirname, "characters", path5.basename(jsonPath)),
-    path5.resolve(__dirname, "../characters", path5.basename(jsonPath)),
-    path5.resolve(__dirname, "../../characters", path5.basename(jsonPath)),
-    path5.resolve(__dirname, "../../../characters", path5.basename(jsonPath))
+    path8.resolve(process.cwd(), jsonPath),
+    path8.resolve(process.cwd(), "..", "..", jsonPath),
+    path8.resolve(process.cwd(), "..", "..", "..", jsonPath),
+    path8.resolve(process.cwd(), "agent", jsonPath),
+    path8.resolve(__dirname, jsonPath),
+    path8.resolve(__dirname, "characters", path8.basename(jsonPath)),
+    path8.resolve(__dirname, "../characters", path8.basename(jsonPath)),
+    path8.resolve(__dirname, "../../characters", path8.basename(jsonPath)),
+    path8.resolve(__dirname, "../../../characters", path8.basename(jsonPath))
   ];
   const pathsToTry = Array.from(/* @__PURE__ */ new Set([...basePathsToTry, ...jsonPathsToTry]));
   let lastError = null;
@@ -5466,11 +5357,11 @@ function commaSeparatedStringToArray(commaSeparated) {
 }
 async function readCharactersFromStorage(characterPaths) {
   try {
-    const uploadDir = path5.join(process.cwd(), ".eliza", "data", "characters");
-    await fs5.promises.mkdir(uploadDir, { recursive: true });
-    const fileNames = await fs5.promises.readdir(uploadDir);
+    const uploadDir = path8.join(process.cwd(), ".eliza", "data", "characters");
+    await fs8.promises.mkdir(uploadDir, { recursive: true });
+    const fileNames = await fs8.promises.readdir(uploadDir);
     for (const fileName of fileNames) {
-      characterPaths.push(path5.join(uploadDir, fileName));
+      characterPaths.push(path8.join(uploadDir, fileName));
     }
   } catch (err) {
     logger28.error(`Error reading directory: ${err.message}`);
@@ -5526,11 +5417,11 @@ function expandTildePath(filepath) {
     if (filepath === "~") {
       return process.cwd();
     } else if (filepath.startsWith("~/")) {
-      return path6.join(process.cwd(), filepath.slice(2));
+      return path9.join(process.cwd(), filepath.slice(2));
     } else if (filepath.startsWith("~~")) {
       return filepath;
     } else {
-      return path6.join(process.cwd(), filepath.slice(1));
+      return path9.join(process.cwd(), filepath.slice(1));
     }
   }
   return filepath;
@@ -5540,11 +5431,11 @@ function resolvePgliteDir(dir, fallbackDir) {
   if (existsSync3(envPath)) {
     dotenv2.config({ path: envPath });
   }
-  const base = dir ?? process.env.PGLITE_DATA_DIR ?? fallbackDir ?? path6.join(process.cwd(), ".eliza", ".elizadb");
+  const base = dir ?? process.env.PGLITE_DATA_DIR ?? fallbackDir ?? path9.join(process.cwd(), ".eliza", ".elizadb");
   const resolved = expandTildePath(base);
-  const legacyPath = path6.join(process.cwd(), ".elizadb");
+  const legacyPath = path9.join(process.cwd(), ".elizadb");
   if (resolved === legacyPath) {
-    const newPath = path6.join(process.cwd(), ".eliza", ".elizadb");
+    const newPath = path9.join(process.cwd(), ".eliza", ".elizadb");
     process.env.PGLITE_DATA_DIR = newPath;
     return newPath;
   }
@@ -5580,6 +5471,46 @@ var AgentServer = class {
       throw error;
     }
   }
+  /**
+   * Dynamically resolves the client path based on the installation context.
+   * Handles both development and production scenarios.
+   *
+   * @returns {string} The resolved path to the client dist directory
+   * @throws {Error} If no valid client path can be found
+   */
+  resolveClientPath() {
+    try {
+      const cliPackageJson = __require.resolve("@elizaos/cli/package.json");
+      const cliDir = path9.dirname(cliPackageJson);
+      const cliDistPath = path9.join(cliDir, "dist");
+      if (fs9.existsSync(path9.join(cliDistPath, "index.html"))) {
+        logger29.debug(`[CLIENT PATH] Resolved client path from npm package: ${cliDistPath}`);
+        return cliDistPath;
+      }
+    } catch (e) {
+      logger29.debug("[CLIENT PATH] Could not resolve @elizaos/cli package, trying other methods");
+    }
+    const relativePath = path9.resolve(__dirname2, "../../cli/dist");
+    if (fs9.existsSync(path9.join(relativePath, "index.html"))) {
+      logger29.debug(`[CLIENT PATH] Resolved client path from relative path: ${relativePath}`);
+      return relativePath;
+    }
+    const cwdPath = path9.join(process.cwd(), "dist");
+    if (fs9.existsSync(path9.join(cwdPath, "index.html"))) {
+      logger29.debug(`[CLIENT PATH] Resolved client path from current directory: ${cwdPath}`);
+      return cwdPath;
+    }
+    if (process.env.ELIZA_CLIENT_PATH) {
+      const envPath = path9.resolve(process.env.ELIZA_CLIENT_PATH);
+      if (fs9.existsSync(path9.join(envPath, "index.html"))) {
+        logger29.debug(`[CLIENT PATH] Resolved client path from environment variable: ${envPath}`);
+        return envPath;
+      }
+    }
+    throw new Error(
+      "Unable to locate client files. Please ensure @elizaos/cli is properly installed."
+    );
+  }
   /**
    * Initializes the database and server.
    *
@@ -5784,26 +5715,10 @@ var AgentServer = class {
         })
       );
       this.app.use(
-        bodyParser2.json({
+        express30.json({
           limit: process.env.EXPRESS_MAX_PAYLOAD || "100kb"
         })
       );
-      this.app.use(
-        fileUpload2({
-          useTempFiles: true,
-          tempFileDir: "/tmp/",
-          createParentPath: true,
-          preserveExtension: true,
-          safeFileNames: true,
-          limits: {
-            fileSize: 50 * 1024 * 1024
-            // 50MB default limit
-          },
-          abortOnLimit: true,
-          uploadTimeout: 6e4
-          // 60 seconds
-        })
-      );
       const serverAuthToken = process.env.ELIZA_SERVER_AUTH_TOKEN;
       if (serverAuthToken) {
         logger29.info("Server authentication enabled. Requires X-API-KEY header for /api routes.");
@@ -5815,10 +5730,10 @@ var AgentServer = class {
           "Server authentication is disabled. Set ELIZA_SERVER_AUTH_TOKEN environment variable to enable."
         );
       }
-      const uploadsBasePath = path6.join(process.cwd(), ".eliza", "data", "uploads", "agents");
-      const generatedBasePath = path6.join(process.cwd(), ".eliza", "data", "generated");
-      fs6.mkdirSync(uploadsBasePath, { recursive: true });
-      fs6.mkdirSync(generatedBasePath, { recursive: true });
+      const uploadsBasePath = path9.join(process.cwd(), ".eliza", "data", "uploads", "agents");
+      const generatedBasePath = path9.join(process.cwd(), ".eliza", "data", "generated");
+      fs9.mkdirSync(uploadsBasePath, { recursive: true });
+      fs9.mkdirSync(generatedBasePath, { recursive: true });
       this.app.get(
         "/media/uploads/agents/:agentId/:filename",
         // @ts-expect-error - this is a valid express route
@@ -5835,7 +5750,7 @@ var AgentServer = class {
           if (!filePath.startsWith(agentUploadsPath)) {
             return res.status(403).json({ error: "Access denied" });
           }
-          if (!fs6.existsSync(filePath)) {
+          if (!fs9.existsSync(filePath)) {
             return res.status(404).json({ error: "File does not exist!!!!!!!" });
           }
           res.sendFile(sanitizedFilename, { root: agentUploadsPath }, (err) => {
@@ -5939,8 +5854,14 @@ var AgentServer = class {
           }
         }
       };
-      const clientPath = path6.resolve(__dirname2, "../../cli/dist");
-      this.app.use(express30.static(clientPath, staticOptions));
+      try {
+        const clientPath = this.resolveClientPath();
+        this.app.use(express30.static(clientPath, staticOptions));
+        logger29.info(`[STATIC] Serving client files from: ${clientPath}`);
+      } catch (error) {
+        logger29.error("[STATIC] Failed to resolve client path:", error);
+        logger29.warn("[STATIC] Client UI will not be available. API endpoints will still work.");
+      }
       const pluginRouteHandler = createPluginRouteHandler(this.agents);
       this.app.use(pluginRouteHandler);
       const apiRouter = createApiRouter(this.agents, this);
@@ -5982,8 +5903,30 @@ var AgentServer = class {
           res.setHeader("Content-Type", "application/javascript");
           return res.status(404).send(`// JavaScript module not found: ${req.path}`);
         }
-        const cliDistPath = path6.resolve(__dirname2, "../../cli/dist");
-        res.sendFile(path6.join(cliDistPath, "index.html"));
+        try {
+          const cliDistPath = this.resolveClientPath();
+          res.sendFile(path9.join(cliDistPath, "index.html"), (err) => {
+            if (err && !res.headersSent) {
+              logger29.error("[STATIC] Failed to serve index.html:", err);
+              res.status(404).json({
+                success: false,
+                error: {
+                  message: "Client UI not available. Please ensure @elizaos/cli is properly installed.",
+                  code: 404
+                }
+              });
+            }
+          });
+        } catch (error) {
+          logger29.error("[STATIC] Failed to resolve client path for fallback route:", error);
+          res.status(404).json({
+            success: false,
+            error: {
+              message: "Client UI not available. API endpoints are still accessible at /api/*",
+              code: 404
+            }
+          });
+        }
       });
       this.server = http.createServer(this.app);
       this.socketIO = setupSocketIO(this.server, this.agents, this);